JP2005311648A - Encryption attribute certificate issuing method, attribute verification method, attribute verification support method, attribute authentication device, attribute verification device, attribute verification support device, encryption attribute certificate issuing program, attribute verification program, and attribute verification support program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To cope with the situation when there are many attribute verifiers and the attribute verifiers can not be individually specified in issuing an attribute certificate. <P>SOLUTION: An attribute authentication station issues an encryption attribute certificate on which the encryption attribute information of an attribute possessor generated with a public key of an attribute decryption organization, the attribute information of the verifier, and the public key of the attribute decryption organization are put. An attribute verification device authenticates the attribute decryption organization by using the public key of the attribute decryption organization to be put on the encryption attribute certificate, and requests the disclosure of the encryption attribute information by designating the verifier attribute certificate and the encryption attribute certificate. The attribute decryption organization authenticates the attribute verifier by using the two certificates, decrypts the encryption attribute information to be put on the encryption attribute certificate by using a secret key of its own device, and replies to the attribute verification device after re-encrypting by using the public key of the attribute verifier. The attribute verification device acquires the attribute information of the attribute possessor by decrypting the re-encryption information by using the secret key of its own device. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to an attribute authentication device, an attribute verification device and an attribute verification support device used in an attribute authentication system, an encrypted attribute certificate issuance method executed by the attribute authentication device, and an attribute executed by the attribute verification device Used for realizing the verification method, the attribute verification support method executed by the attribute verification support device, the encrypted attribute certificate issuing program used for realizing the encrypted attribute certificate issuing method, and the attribute verification method The present invention relates to an attribute verification program and an attribute verification support program used for realizing the attribute verification support method.

  In particular, the present invention provides an attribute authentication technique that can cope with a case where there are a large number of attribute verifiers or when an attribute verifier cannot be individually identified at the time of issuing an attribute certificate in which attribute information is encrypted. It is about.

  An attribute certificate for encrypting attribute information has been standardized (for example, see Non-Patent Documents 1 and 2).

  Next, a conventional attribute encryption method will be outlined with reference to FIG.

  Here, in FIG. 4, the attribute certificate authority is AA, the attribute certificate authority AA's private key is SK-AA, the attribute certificate authority AA's public key is PK-AA, the attribute owner is X, and the attribute owner's attribute is X AT-X, attribute owner X's private key SK-X, attribute owner X's public key PK-X, attribute verifier Y, attribute verifier Y's secret key SK-Y, attribute verifier Y's public key is indicated by PK-Y.

  Hereinafter, information obtained by encrypting the information P with the key K is represented as E [K, P], a digital signature with the secret key SK for the information P is represented with S [SK, P], and the digital signature with the secret key SK is represented. Is represented as S [SK].

  In the prior art, as shown in FIG. 4, the attribute authority AA encrypts the attribute information AT-X of the attribute owner X by using the public key PK-Y of the attribute verifier Y who permits the browsing. The encrypted attribute certificate including the encrypted attribute “E [PK-Y, AT-X]” is issued. Here, the encrypted attribute certificate also includes information for specifying the public key PK-Y of the attribute verifier Y.

  With this encrypted attribute certificate, only the attribute verifier Y can verify the attribute information AT-X of the attribute owner X.

Further, in the prior art, when there are a plurality of attribute verifiers such as “Y1, Y2,...”, Encryption using the respective public keys “PK-Y1, PK-Y2,. Creation attributes “E [PK-Y1, AT-X], E [PK-Y2, AT-X],...” And issue an encryption attribute certificate having all of them as attribute information I am doing so.
ITU-T X. 509 IETF RFC 3281

  However, the prior art has problems in the following cases.

(I) When there are a large number of attribute verifiers In the prior art, when there are a large number of attribute verifiers, the encrypted attributes “E [PK-Y1, AT-X], E The number of [PK-Y2, AT-X],... "Is also large, which increases the size of the encryption attribute certificate and makes it difficult to handle. At the same time, the load of the attribute certificate authority issuance process also increases.

(Ii) When an attribute verifier cannot be specified individually when issuing an attribute certificate When an encrypted attribute certificate is issued, an attribute verifier cannot be specified individually, but the attributes that the attribute verifier should have are determined. There is a case.

  In such a case, according to the conventional technique, since the public key used for encryption cannot be specified, the encryption attribute certificate cannot be issued.

  For example, “attribute information that allows all doctors to browse” corresponds to both (i) and (ii) above.

  In other words, there are many doctors, and it is difficult to issue and handle an encrypted attribute certificate that includes attribute information separately encrypted with the public keys of all doctors.

  In addition, since the public key of a person who becomes a doctor after issuing an encrypted attribute certificate cannot be specified at the time of issuing the encrypted attribute certificate, it is not possible to issue an encrypted attribute certificate that can be verified by such a doctor. Is possible.

  The present invention has been made in view of such circumstances, and when there are a large number of attribute verifiers or when attribute verifiers cannot be individually identified at the time of issuing an attribute certificate in which attribute information is encrypted, The purpose is to provide a new attribute authentication technology that can cope with this.

  In order to achieve this object, an attribute authentication system according to the present invention includes an attribute authentication device, an attribute verification device, and an attribute verification support device having the following configuration.

(1) Configuration of Attribute Authentication Device of the Present Invention An attribute authentication device of the present invention operates to construct an attribute authority, and (a) a verifier attribute that is information for identifying an attribute verifier attribute. A first obtaining means for obtaining information; and (b) second obtaining decryption key owner information, which is information for identifying the public key of the attribute decryption organization that owns the decryption key of the encrypted attribute information of the attribute owner. (C) generating means for generating attribute owner encrypted attribute information by encrypting attribute owner attribute information using the public key of the attribute decryption organization, and (d) An issuing means for issuing an encrypted attribute certificate in which the generated encrypted attribute information, the verifier attribute information acquired by the first acquiring means, and the decryption key owner information acquired by the second acquiring means are posted; Is provided.

  The encrypted attribute certificate issuance method of the present invention realized by the operation of each of the above processing means can be realized by a computer program, and this computer program is recorded on an appropriate recording medium such as a semiconductor memory. Or provided via a network, installed when the present invention is carried out, and operated on a control means such as a CPU, thereby realizing the present invention.

(2) Attribute verification apparatus of the present invention The attribute verification apparatus of the present invention operates as an apparatus operated by an attribute verifier, and (b) issued by the attribute authentication apparatus of the present invention configured as described above. And (b) an encrypted attribute certificate acquired by the acquiring means, which obtains an encrypted attribute certificate (which includes encrypted attribute information, verifier attribute information, and decryption key owner information). Authentication means that authenticates the attribute decryption authority using the decryption key owner information, and (c) a verifier attribute certificate that proves the attribute information of the attribute verifier when the attribute decryption authority can be authenticated by the authentication means, Specify the encrypted attribute certificate acquired by the acquiring means, request the disclosure of the encrypted attribute information posted in the encrypted attribute certificate, and (d) respond to the disclosure request by the requesting means Publish your own device And decrypting means for decrypting the attribute information of the attribute owner by decrypting the re-encrypted information on the encrypted attribute information re-encrypted with the key.

  When adopting this configuration, the authentication means, for example, transmits challenge information to the attribute decryption authority, and encrypts the challenge information encrypted with the private key of the attribute decryption authority returned in response to the challenge information. The attribute decryption authority is authenticated by decrypting with the public key of the attribute decryption authority specified by the decryption key owner information posted in the generalized attribute certificate.

  The attribute verification method of the present invention realized by the operation of each of the above processing means can be realized by a computer program, and this computer program is provided by being recorded on an appropriate recording medium such as a semiconductor memory. Alternatively, the present invention is realized by being provided via a network, installed when the present invention is carried out, and operating on a control means such as a CPU.

(3) Attribute verification support apparatus of the present invention The attribute verification support apparatus of the present invention operates to construct an attribute decoding engine newly provided in the present invention, and is configured as described above. Receiving means for receiving a disclosure request (issued by designating a verifier attribute certificate and an encrypted attribute certificate) issued by the attribute verification apparatus of the present invention; and (b) an encrypted attribute certificate received by the receiving means. When the verifier attribute information included in the certificate and the verifier attribute certificate received by the receiving means are used to authenticate the attribute verifier, and (c) the attribute verifier can be authenticated by the authentication means, Disclosing means for disclosing to the attribute verifier the encrypted attribute information posted in the encrypted attribute certificate received by the receiving means in a decryptable form.

  When adopting this configuration, the authentication means, for example, authenticates the verifier attribute certificate with the public key of the attribute authority that issued it, and if the authentication is obtained, The attribute verifier is authenticated by judging whether or not the attribute information of the attribute verifier described in the verifier attribute information to be posted matches the attribute information of the attribute verifier described in the verifier attribute certificate. To do.

  Further, for example, the disclosure means decrypts the encrypted attribute information posted in the encrypted attribute certificate, re-encrypts it using the attribute verifier's public key, and discloses it to the attribute verifier.

  The attribute verification support method of the present invention realized by the operation of each of the above processing means can be realized by a computer program, and this computer program is recorded on an appropriate recording medium such as a semiconductor memory and provided. Or provided via a network, installed when implementing the present invention, and operated on a control means such as a CPU, thereby realizing the present invention.

(4) Attribute verification process of the present invention In the authentication system having the present invention configured as described above, the attribute authentication apparatus of the present invention uses the public key of the attribute decryption organization newly provided in the present invention to own the attribute. By encrypting the attribute information of the user, the encrypted attribute information of the attribute owner is generated, and the encrypted attribute information, the verifier attribute information, and the public key of the attribute decryption organization are transmitted to the attribute owner. Issue the listed encryption attribute certificate.

  Upon receiving the issue of the encrypted attribute certificate, the attribute verification apparatus of the present invention receives the encrypted attribute certificate from the attribute owner, the attribute verification support apparatus of the present invention that operates as an attribute decryption authority, The challenge information is sent and the response information encrypted in response to the attribute decryption authority's private key is decrypted with the attribute decryption authority's public key posted on the received encrypted attribute certificate. By doing so, the attribute decryption authority is authenticated.

  Then, when the attribute verification apparatus of the present invention authenticates the attribute decryption authority in this way, the attribute verification apparatus constructed by the attribute authentication apparatus of the present invention for the attribute verification support apparatus of the present invention that operates as the attribute decryption authority. A verifier attribute certificate obtained from a station or the like and an encrypted attribute certificate received from the attribute owner are specified, and a request is made to disclose the encrypted attribute information posted on the encrypted attribute certificate.

  Upon receiving the request for disclosure of the encrypted attribute information, the attribute verification support apparatus of the present invention authenticates the verifier attribute certificate specified in the request for disclosure with the public key of the attribute certification authority, thereby obtaining the authentication. The attribute information of the attribute verifier described in the verifier attribute information listed in the encrypted attribute certificate specified in the disclosure request and the attribute described in the verifier attribute certificate specified in the disclosure request. The attribute verifier is authenticated by determining whether or not the attribute information of the verifier matches.

  When the attribute verification support apparatus of the present invention authenticates the attribute verifier in this way, the encrypted attribute information posted in the encrypted attribute certificate specified in the request for disclosure is decrypted with the private key of the own apparatus. Subsequently, using the public key of the attribute verifier, the decrypted information is re-encrypted and returned to the attribute verification apparatus of the present invention.

  Upon receiving this re-encrypted attribute owner attribute information, the attribute verification apparatus of the present invention decrypts the re-encrypted information using its own secret key, thereby obtaining the attribute owner attribute information. Obtained by decryption.

  In this way, the present invention adopts a configuration in which the attribute information of the attribute owner is encrypted using the public key of the attribute decryption authority that the attribute authority can trust.

  Thus, according to the present invention, only one encryption attribute is required to be described in the encryption attribute certificate, and the problem (i) can be solved.

  Further, the present invention adopts a configuration in which verifier attribute information (for example, attribute information such as “doctor”) owned by only the attribute verifier is described in the encrypted attribute certificate.

  Thus, according to the present invention, even if the attribute verifier cannot be individually identified at the time of issuing the encrypted attribute certificate, if the attribute information of the attribute verifier is determined, the verifier attribute information is owned. Encrypted attribute certificates that can be verified only by the user can be issued, and the problem (ii) can be solved.

  In this way, according to the present invention, when there are a large number of attribute verifiers, or when the attribute verifiers cannot be individually identified at the time of issuing the attribute certificate in which the attribute information is encrypted, it can be dealt with. become.

  Hereinafter, the present invention will be described in detail according to embodiments.

  FIG. 1 illustrates a system configuration of an authentication system including the present invention.

  As shown in this figure, an authentication system comprising the present invention includes an attribute authority 1 that issues an attribute attribute encrypted attribute certificate, an attribute owner terminal 2 that is operated by the attribute owner, and an attribute verifier. Are provided with an attribute verifier terminal 3 and an attribute decryption organization 4 that supports the attribute verifier.

  Hereinafter, AA is used as a symbol for identifying the attribute authority 1, X is used as a symbol for identifying the attribute owner, Y is used as a symbol for identifying the attribute verifier, and DA is used as a symbol for identifying the attribute decryption organization 4. AC-X is used as a symbol for identifying the encrypted attribute certificate issued to the attribute owner X.

  Further, the secret key of the attribute certification authority 1 is SK-AA, the public key of the attribute certification authority 1 is PK-AA, the attribute of the attribute owner X is AT-X, the secret key of the attribute owner X is SK-X, the attribute The owner X's public key is PK-X, the attribute verifier Y's attribute is AT-Y, the attribute verifier Y's private key is SK-Y, and the attribute verifier Y's public key is PK-Y.

  In the present embodiment example, it is assumed that all entities have their own public key private keys. In addition, each public key corresponding to this is open to all entities and can be accessed by individual communication or repository.

  In general, the public key is associated with the identification name of each entity in the form of a public key certificate. However, in this embodiment, the public key certificate is not used to simplify the description. However, if the public key is replaced with a public key certificate, the owner described in the attribute certificate is replaced with a distinguished name, and an appropriate certificate authority domain is assumed, this embodiment is based on the public key certificate. Is easy.

  In this embodiment, the attribute verifier Y is a verifier issued by the attribute certification authority 1 that proves that Y has the attribute verifier qualification, as shown in FIG. 1, in addition to the key pair. Assume that you have an attribute certificate (hereinafter sometimes referred to as AC-Y).

  The verifier attribute certificate AC-Y may be issued after the encryption attribute certificate AC-X is issued. The attribute authority that issues the verifier attribute certificate AC-Y does not necessarily need to be the attribute authority 1 of the present embodiment, but it must be an attribute authority that the attribute authority 1 trusts.

  There are the following three processes constituting the present embodiment.

[1] Issuance of Encrypted Attribute Certificate AC-X The attribute authority 1 issues an encrypted attribute certificate AC-X to the attribute owner X. In the encrypted attribute certificate AC-X, the attribute certificate authority 1 proves that the attribute owner X owns the attribute AT-X.

  The attribute AT-X described in the encrypted attribute certificate AC-X can be browsed only by a person who has the attribute AT-Y (attribute verifier Y).

[2] Encryption attribute proof / verification The attribute owner X uses the encrypted attribute certificate AC-X to inform the attribute verifier Y that X owns the attribute AT-X. Prove it.

  The attribute information described in the encrypted attribute certificate AC-X (the attribute AT-X of the attribute owner X) is encrypted with the public key of the attribute decryption organization 4, and the attribute verifier Y does not change this. Therefore, the attribute verifier Y requests the attribute decryption agency 4 to disclose the encrypted attribute by the following process.

[3] Disclosure of attribute information The attribute verifier Y presents the encrypted attribute certificate AC-X to be verified and the Y verifier attribute certificate AC-Y to the attribute decryption authority 4, Request disclosure of encryption attributes.

  Here, first, the attribute verifier Y and the attribute decryption authority 4 mutually authenticate that they are both a valid attribute verifier and an attribute decryption authority defined by the attribute certification authority 1. Thereafter, the attribute decryption organization 4 decrypts the encrypted attribute with the private key SK-DA of the organization, encrypts it again with the public key PK-Y of the attribute verifier Y, and sends this to the attribute verifier Y. Thus, the attribute verifier Y can browse the contents of the encrypted attribute (attribute AT-X attribute AT-X).

  FIG. 2 shows an example of the basic configuration of the encrypted attribute certificate AC-X issued by the attribute authority 1 to realize the present invention.

  As shown in this figure, the issuer of the encrypted attribute certificate AC-X is the attribute certificate authority 1. The owner of the encryption attribute certificate AC-X is the owner X. In general, the owner element of the attribute certificate often uses the identification name of the owner's public key certificate, but in this embodiment, the public key of the attribute owner X is used.

  The encryption attribute certificate AC-X includes the following three pieces of information.

[I] Attribute AT-Y of attribute verifier Y
In the present embodiment example, the attribute AT-Y of the attribute verifier Y itself is used as an example. However, for this, information that can identify the attribute AT-Y of the attribute verifier Y such as the identification ID of the attribute AT-Y. That's fine.

[B] Public key PK-DA of attribute decryption organization 4
In the present embodiment example, the public key PK-DA of the attribute decryption authority 4 is used as an example. For this, the public key PK-DA of the attribute decryption authority 4 such as the identification name of the public certificate of the attribute decryption authority 4 is used. Any information can be used as long as it can be identified.

[C] Encryption attribute information E [PK-DA, AT-X]
The attribute AT-X of the attribute owner X encrypted with the public key PK-DA of the attribute decryption organization 4 is assigned. This encrypted attribute information E [PK-DA, AT-X] can be decrypted only by the secret key SK-DA corresponding to PK-DA, and only the attribute decryption organization has SK-DA. Only the attribute decryption organization 4 can decrypt and view the encrypted attribute information.

  FIG. 3 shows the encryption attribute proof and attribute information disclosure protocol according to the present invention. This figure shows a series of protocols in which the attribute verifier Y requests the attribute decryption organization 4 to disclose the owner attribute when the attribute owner X proves the owner attribute to the attribute verifier Y.

  In the present invention, when the attribute authority 1 acquires the attribute AT-X of the attribute owner X, the attribute AT-X is encrypted using the public key PK-DA of the attribute decryption organization 4 acquired in advance. As a result, encrypted attribute information E [PK-DA, AT-X] of the attribute owner X is generated, and the generated encrypted attribute information E [PK-DA, AT-X] and its encryption are used. An encrypted attribute certificate AC-X in which the public key PK-DA of the used attribute decryption organization 4 and the attribute AT-Y of the attribute verifier Y are posted is generated and issued to the attribute owner X.

  Upon receiving the issuance of the encrypted attribute certificate AC-X, the attribute owner X sends the encrypted attribute certificate AC-X and the secret key SK- to the attribute verifier Y as shown in FIG. The signature S [SK-X] created by X is transmitted ((1) in FIG. 3).

  Thereafter, the attribute verifier Y verifies that the creator of the signature S [SK-X] owns the attribute AT-X by the following steps.

  That is, when the attribute verifier Y receives the encrypted attribute certificate AC-X and the signature S [SK-X] ((2) in FIG. 3), first, the attribute verifier 1 public key PK-AA Thus, the signature (“S [SK-AA]” shown in FIG. 2) of the attribute certificate authority 1 attached to the encrypted attribute certificate AC-X is verified ((3) in FIG. 3). The public key PK-AA required at this time can be obtained from, for example, a repository.

  If the signature verification result of the encrypted attribute certificate AC-X is valid, the encrypted attribute certificate AC-X is issued by the attribute authority 1, and is described in the encrypted attribute certificate AC-X. The corresponding relationship between the public key PK-X and the encrypted attribute information E [PK-DA, AT-X] is proved.

  Subsequently, the signature S [SK-X] sent in association with the encrypted attribute certificate AC-X is verified by the public key PK-X of the attribute owner X ((3) in FIG. 3).

  If the signature verification result of S [SK-X] is valid, along with the verification result of the encrypted attribute certificate AC-X, S [SK-X] encrypts the encrypted attribute certificate AC-X. It can be confirmed that the signature is created by a person who owns the attribute information E [PK-DA, AT-X].

  However, since the attribute verifier Y cannot decrypt the encrypted attribute information at this stage, the attribute verifier Y cannot know the contents of the attribute of the attribute owner X.

  Next, the attribute verifier Y communicates with the attribute decryption organization 4.

  First, the attribute verifier Y transmits challenge information C1 such as a random number to the attribute decryption organization 4 ((4) in FIG. 3), and the attribute decryption organization 4 receives the challenge information C1. Then ((5) in FIG. 3), the signature verifier S [SK-DA, C1] with the secret key SK-DA for the challenge information C1 and the challenge information C2 such as a random number are returned to the attribute verifier Y ( (6) of FIG.

  Upon receiving these pieces of information ((7) in FIG. 3), the attribute verifier Y uses the received signature S [SK-DA, C1] as the public key PK- described in the encrypted attribute certificate AC-X. It verifies with DA ((8) of FIG. 3).

  If the verification result is valid, the attribute verifier Y has confirmed that he has connected to the attribute decryption authority 4 specified by the encrypted attribute certificate AC-X, and server authentication for this communication is completed. .

  Subsequently, the attribute verifier Y sends the signature S [SK-Y, C2] with the secret key SK-Y to the challenge information C2 and the encrypted attribute certificate AC- that is the decryption request target to the attribute decryption authority 4. X and a verifier attribute certificate AC-Y certifying the attribute of the attribute verifier Y are transmitted ((9) in FIG. 3).

  In response to this, the attribute decryption organization 4 receives these pieces of information ((10) in FIG. 3). Then, the received verifier attribute certificate AC-Y is verified with the public key PK-AA of the attribute certificate authority 1, and the received signature S [SK-Y, C2] is further added to the verifier attribute certificate AC-Y. The attribute AT-Y of the attribute verifier Y described in the verifier attribute certificate AC-Y and the attribute described in the encrypted attribute certificate AC-X are verified using the given public key PK-Y. It is verified whether or not the attribute AT-Y of the verifier Y matches ((11) in FIG. 3).

  If any verification result is valid, the attribute decryption organization 4 can confirm that the attribute verifier Y in communication possesses the attribute AT-Y. At this point, authentication of the attribute verifier Y is completed.

  Subsequently, the attribute decryption authority 4 decrypts the encrypted attribute information E [PK-DA, AT-X] described in the encrypted attribute certificate AC-X using the secret key SK-DA, and owns the attribute. The attribute AT-X of the person X is extracted ((12) in FIG. 3).

  Subsequently, the attribute decryption authority 4 re-encrypts the attribute AT-X of the attribute owner X with the public key PK-Y of the attribute verifier Y, thereby re-encrypting the attribute E [PK-Y, AT-X]. Is transmitted to the attribute verification Y ((13) in FIG. 3).

  In response to this, the attribute verifier Y receives the re-encrypted attribute E [PK-Y, AT-X] ((14) in FIG. 3), and receives the received re-encrypted attribute E [PK-Y, AT-X] is decrypted with the secret key SK-Y, and the attribute AT-X of the attribute owner X is extracted ((15) in FIG. 3).

  As described above, the attribute verifier Y can confirm that the creator of the signature S [SK-X] received first possesses the attribute AT-X ((16) in FIG. 3).

  Finally, the attribute verifier Y notifies the attribute owner X that the above confirmation has been successful ((17) in FIG. 3).

  Thus, the present invention adopts a configuration in which the attribute AT-X of the attribute owner X is encrypted using the public key PK-DA of the attribute decryption authority 4 that the attribute certification authority 1 can trust. As a result, according to the present invention, only one encrypted attribute is required to be described in the encrypted attribute certificate issued by the attribute authority 1.

  In the present invention, for example, the attribute AT-Y owned by only the attribute verifier Y such as “doctor” is described in the encrypted attribute certificate. Thus, according to the present invention, the encrypted attribute certificate can be issued even if the attribute verifier cannot be individually specified at the time of issuing the encrypted attribute certificate.

  In this way, according to the present invention, when there are a large number of attribute verifiers, or when the attribute verifiers cannot be individually identified at the time of issuing the attribute certificate in which the attribute information is encrypted, it can be dealt with. become.

It is a system configuration figure of an authentication system which comprises the present invention. It is a figure which shows an example of an encryption attribute certificate. It is explanatory drawing of the process of this invention. It is explanatory drawing of a prior art.

Explanation of symbols

1 Attribute Certification Authority 2 Attribute Owner Terminal 3 Attribute Verifier Terminal 4 Attribute Decryption Authority

Claims (14)

An encryption attribute certificate issuing method for issuing an attribute owner's encryption attribute certificate,
A process of obtaining verifier attribute information which is information for identifying an attribute verifier attribute;
A process of obtaining decryption key owner information, which is information for identifying the public key of the attribute decryption organization that owns the decryption key of the attribute owner's encrypted attribute information;
Generating encrypted attribute information of the attribute owner by encrypting the attribute information of the attribute owner using the public key of the attribute decryption authority;
Issuing an encrypted attribute certificate in which the encrypted attribute information, the verifier attribute information, and the decryption key owner information are posted.
An encryption attribute certificate issuing method as a feature. An attribute verification method for verifying attribute information of an attribute owner,
Verifier attribute information that is information for identifying an attribute verifier attribute, decryption key owner information that is information for identifying a public key of an attribute decryption authority that owns the decryption key of the attribute owner's encrypted attribute information, Obtaining an encrypted attribute certificate listing the attribute owner's encrypted attribute information generated using the public key of the attribute decryption authority;
Authenticating the attribute decryption authority using the decryption key owner information;
A step of requesting the disclosure of the encrypted attribute information by designating the verifier attribute certificate certified for the attribute information of the attribute verifier and the encrypted attribute certificate when the attribute decryption authority can be authenticated. That
Feature attribute verification method. The attribute verification method according to claim 2,
In the process of authenticating the attribute decryption authority, challenge information is transmitted to the attribute decryption authority, and the challenge information encrypted in response to the secret key of the attribute decryption authority returned in response to the challenge information Authenticating the attribute decryption authority by decrypting with the public key of the attribute decryption authority specified by the person information,
Feature attribute verification method. In the attribute verification method according to claim 2 or 3,
A process of acquiring attribute information of the attribute owner by decrypting the re-encrypted information on the encrypted attribute information re-encrypted with the public key of the own device returned in response to the disclosure request. To prepare,
Feature attribute verification method. An attribute verification support method for supporting verification of attribute information of an attribute owner,
Verifier attribute information that is information for identifying an attribute verifier attribute, decryption key owner information that is information for identifying a public key of an attribute decryption authority that owns the decryption key of the attribute owner's encrypted attribute information, Designate the encrypted attribute certificate posted for the attribute owner's encrypted attribute information generated using the public key of the attribute decryption authority, and the verifier attribute certificate certified for the attribute verifier's attribute information The process of receiving a disclosure request;
Authenticating the attribute verifier using the verifier attribute information and the verifier attribute certificate;
Including the step of disclosing the encrypted attribute information to the attribute verifier in a form that can be decrypted when the attribute verifier can be authenticated.
A feature attribute verification support method. The attribute verification support method according to claim 5,
In the process of authenticating the attribute verifier, the attribute verification described in the verifier attribute information is obtained when the verifier attribute certificate is authenticated with the public key of the attribute certification authority that issued the certificate. Authenticating the attribute verifier by determining whether or not the attribute information of the verifier and the attribute information of the attribute verifier described in the verifier attribute certificate match.
A feature attribute verification support method. In the attribute verification support method according to claim 5 or 6,
In the process of disclosing, decrypting the encrypted attribute information, re-encrypting it using the public key of the attribute verifier, and disclosing it to the attribute verifier,
A feature attribute verification support method. An attribute authentication device for authenticating attribute information of an attribute owner,
Means for obtaining verifier attribute information which is information for identifying an attribute verifier attribute;
Means for obtaining decryption key owner information, which is information for identifying the public key of the attribute decryption organization that owns the decryption key of the encrypted attribute information of the attribute owner;
Means for generating attribute owner encrypted attribute information by encrypting the attribute information of the attribute owner using the public key of the attribute decryption authority;
Means for issuing an encrypted attribute certificate in which the encrypted attribute information, the verifier attribute information, and the decryption key owner information are posted;
Feature attribute authentication device. An attribute verification device operated by an attribute verifier,
Verifier attribute information that is information for identifying an attribute verifier attribute, decryption key owner information that is information for identifying a public key of an attribute decryption authority that owns the decryption key of the attribute owner's encrypted attribute information, Means for obtaining an encrypted attribute certificate posted about the attribute owner's encrypted attribute information generated using the public key of the attribute decryption authority;
Means for authenticating the attribute decryption authority using the decryption key owner information;
And a means for requesting disclosure of the encrypted attribute information by designating the verifier attribute certificate certified for the attribute information of the attribute verifier and the encrypted attribute certificate when the attribute decryption authority can be authenticated. That
Feature attribute verification device. The attribute verification device according to claim 9,
Means for decrypting the attribute information of the attribute owner by decrypting the re-encrypted information on the encrypted attribute information re-encrypted with the public key of the own device returned in response to the disclosure request; To prepare,
Feature attribute verification device. An attribute verification support device that supports verification of an attribute verifier,
Verifier attribute information, which is information for identifying the attribute verifier attribute, decryption key owner information, which is information for identifying the public key of the own device, and the attribute owner generated using the public key of the own device Means for receiving a disclosure request specifying the encrypted attribute certificate posted for the encrypted attribute information and the verifier attribute certificate certified for the attribute information of the attribute verifier;
Means for authenticating the attribute verifier using the verifier attribute information and the verifier attribute certificate;
When the attribute verifier can be authenticated, the encrypted attribute information is disclosed to the attribute verifier in a decryptable form.
A feature verification support device.   An encrypted attribute certificate issuing program for causing a computer to execute processing used to realize the encrypted attribute certificate issuing method according to claim 1.   An attribute verification program for causing a computer to execute processing used to realize the attribute verification method according to claim 2.   An attribute verification support program for causing a computer to execute processing used to realize the attribute verification support method according to claim 5.

Images