JP2006209270A - Personal information communication system and its method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a personal information communication system and its method for performing the transfer confirmation and discard certification of personal information from a user at the time of communicating personal information through the Internet, and for specifying the user of leakage source when the personal information is leaked. <P>SOLUTION: This personal information communication system is provided with a personal information transfer server 1 for storing personal information, an authentication station server 2 for issuing/authenticating electronic signatures based on a public key code, a user authenticating server 3 for authenticating a user, and the user personal computer 4 of a user. When the personal information is sent, a transfer confirmation log 5 is generated, and when the personal information is discarded, a discard authentication log is generated, and when the personal information is leaked, log files 16 and 17 are retrieved by using public keys, and the leakage source is specified. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to a communication system that ensures the security of personal information, which is secret information notified via the Internet, and in particular, records a personal information transfer confirmation and disposal certificate input by a user in a log file. The present invention relates to a personal information communication system and method for identifying a leaking source user from the log file when personal information is leaked.

  Conventionally, personal information is treated as confidential information that is not disclosed to the discreet, and when necessary, personal information is recorded and handed on magnetic media or paper when it is exchanged with a contractor or partner. It was. On the other hand, when sending personal information over a communication line, a user authentication server for authenticating a user and a certificate authority server for managing an encryption key are provided, and encrypted mail executed by a large-scale system is technically known. However, it is not widely used in general society.

  Therefore, when notifying the confidential information to the related party, the user may adopt a measure of notifying only the confidential information part required by the parties who need the confidential information but not the unnecessary confidential information part. This will be described using an example of online shopping. When the user keeps the address confidential to the merchandise ordering party and informs the address only to the merchandise delivery company, the user first creates the first and second pieces of secret information created separately. One of the two tallys, the address information of the user's own terminal, and the order data are notified to the order destination. The ordering party processes the order data by itself and transfers the tally and address information to the delivery company. The delivery company sends a tally to the address information terminal and requests the user's address. The user determines that the requester of the address is valid based on the returned tally and the tally remaining at hand, and sends the remaining tally to the delivery company. The delivery company restores the user address using the previous tally and the obtained tally and delivers the product to the user's address. This method realizes security that prevents leakage and impersonation of confidential information in a simple manner in which confidential information is divided to generate tally and cannot be restored without obtaining all the tally (see, for example, Japanese Patent Application Laid-Open No. 2004-2005). -240917).

  Furthermore, there is a case where it is unavoidable to suppress the use of confidential information that is unavoidably notified to a business partner for purposes other than the purpose. In the personal information sent to the other party through the network, by changing the item that can be changed so that the other party can be specified and sending it, if the personal information is diverted or leaked outside the purpose, it is leaked by verifying the changed part There is a method of specifying the source (for example, JP-A-2003-223414).

JP 2004-240917 A (column number 0017) JP 2003-223414 A (column number 0035)

  The first problem with the prior art is that it is not possible to obtain confirmation from the other user during data communication. The reason for this is that an encrypted mail signed / received certificate is a proof of delivery, but it cannot be proved that the user has received it.

  The second problem is that it is impossible to prove that the user has surely discarded the personal information after use. The reason for this is that, regardless of whether it is a medium or an e-mail, a means of communication that considers the security of personal information is provided. Had to be exchanged separately.

  The third problem is that when personal information is illegally leaked, the leak source cannot be specified. The reason for this is that encrypted mail is encrypted and prevented from being tampered with on the network, but it is decrypted after being received and stored on the PC in plain text. When handling a large amount of data, the amount of data is large, and it is difficult to identify the source of leakage in a short time.

  As can be seen from the above problem, the security of personal information given to the user depends on the trust of the user. Therefore, from the other party who sent and received the personal information, the transfer confirmation and the discard certificate of the confidential information are recorded as a system procedure, and if the confidential information is leaked, the user of the leakage source can be specified by the record It is to realize the mechanism including prevention of impersonation.

  The object of the present invention is that when personal information to be handled in a confidential manner is transferred to the user, it is surely obtained from the user in accordance with the system procedure, and the transfer confirmation and disposal certificate is obtained and stored as a log. An object of the present invention is to provide a personal information communication system and a method thereof having a mechanism capable of specifying a leak source user.

  Therefore, the present invention has an authentication server that has an authentication data registration file for registering a user identifier and password and performs authentication processing for the user, and an encryption key management file for managing a public key and its private key. A certificate authority server that manages the public key and private key sent to the user and verifies the electronic signature, a personal information transfer server that encrypts and sends the personal information requested by the user with the public key, and the user In a personal information communication system comprising a personal information transfer server having a personal information request and a user personal computer used for browsing the personal information transfer server, the personal information transfer server stores an exchange confirmation log file for accumulating an exchange confirmation log for confirming the exchange of personal information. And the personal information held by the user personal computer and the public key and the secret key thereof are discarded, and the certificate authority server stores the public key and the secret thereof. A discontinuation certification log file for accumulating a disposition certification log that proves that the user authentication server has deleted the user authentication data, and an applet file for accumulating a personal information management applet to be downloaded to the user PC And a notification process for the data request and notification of the user personal computer, a transfer process of a personal information applet that preserves personal information and a public key and its private key, and a log creation process for creating an exchange confirmation log and a disposal certification log And a user search process for searching for leaked personal information.

  Further, the processing device includes an Internet communication unit that connects a user personal computer to the Internet by CGI, a notification processing unit that receives an authentication request or a data request from the user personal computer, and a response to the data request. A data transfer processing unit that receives a personal information management applet, a public key and its private key, a personal information file name, and encrypted personal information in response to a processing request from the processing unit; In response to a processing request for an authentication request, an authentication processing unit for sending a user authentication request and a user authentication data deletion request to the user authentication server, and obtaining a public key and its private key and processing for verifying an electronic signature Key and verification processing unit for sending a request to the certificate authority server and receiving the public key and its private key and the result of verifying the electronic signature A log creation processing unit for creating an exchange confirmation log and a disposal certification log based on the electronic signature verification result attached to the notification of the user personal computer, and registering in the delivery confirmation log file and the disposal certification log file; When leaked, based on the secret key attached to the encrypted personal information, a user search processing unit that searches for the user of the leak source, and an intranet communication unit that connects the user authentication server and the certificate authority server And.

  Furthermore, the user personal computer maintains a public key downloaded from the personal information transfer server, its private key, and encrypted personal information in a storage area, and generates and adds an electronic signature to a user request. It is characterized in that it is provided with means for operating it in the storage area.

  Further, the notification processing unit includes a user accepting means for accepting a connection request using an initial password sent from the user personal computer and a newly registered password, and a password requesting means for requesting the user personal computer to input a new password. The personal information transfer server sends a redirect request for requesting connection to a download site, and outputs / receives to / from the user personal computer by the output of the transfer confirmation log or output of the discard proof log. A completion notification means for notifying, a completion notification receiving means for receiving a notification of completion of transfer of the encrypted personal information with an electronic signature, a discard instruction means for notifying an instruction for discarding the encrypted personal information with an electronic signature, and an electronic signature Request acceptor who accepts personal information requests and download site connection requests Characterized in that it comprises a and.

  Further, the data transfer processing unit includes an applet downloading means for downloading the personal information management applet to a user personal computer, a key sending means for sending the public key and its private key to the user personal computer, and a personal information file name. File name sending means for sending the personal information to the user personal computer, and personal information downloading means for sending the encrypted personal information obtained by encrypting the personal information with the public key to the user personal computer.

  Further, the authentication processing unit attaches an identifier of the personal information transfer server itself to the password of the user, and sends authentication information sending means for sending a user authentication request to the user authentication server, a user identifier and a password And an authentication stop means for requesting the suspension of use.

  Further, the key and verification processing unit sends a key generation request to the certificate authority server, sends a public key and a secret key thereof, and a digital signature verification request to the certificate authority server, Electronic signature verification means for obtaining a verification result.

  In addition, the log creation processing unit includes a transfer confirmation log unit that creates a transfer confirmation log of personal information and outputs it to a transfer confirmation log file, and a discard certificate log unit that generates a discard certificate log and outputs it to the discard certificate log file. It is characterized by providing.

  Further, the user search processing unit searches for the leakage source identifying means for detecting the secret key from the maintenance form personal information, and the search key log file and the discard certification log file with the public key corresponding to the secret key. And a user search means for specifying.

  Further, the personal information management applet includes means for maintaining in the storage area the maintenance type personal information obtained by adding the public key downloaded from the personal information transfer server, its private key, and the private key to the encrypted personal information. A means for accepting a discard instruction with an electronic signature and verifying the electronic signature; a means for discarding the public key and its private key and the personal information in the form of preservation in accordance with the discard instruction with an electronic signature; and an electronic signature. Means for generating and adding an electronic signature to a personal information transfer completion notification and a public key invalid certificate issuance request, and means for terminating the personal information management applet itself.

  Further, the transfer confirmation log file includes an identifier of a user who has transferred personal information, a date and time when the personal information was transferred, a personal information file name in which the personal information is registered, and an electronic signature attached to completion of the transfer. And a public key.

Further, the discard certification log file includes an identifier of a user who has exchanged personal information, a date and time when the personal information is discarded, a personal information file name in which the personal information is registered, and an electronic signature attached to the completion of the disposal. And a public key.
[Action] The user sends the identifier and the initial password in advance by mail or by encrypted mail, and when the user requests personal information, the user must change the initial password to a new password unknown to others. And accepting personal information requests. By using a new password that only the user knows, it is possible to detect the misappropriation of the password or the impersonation that another person requests for personal information.

  Further, the private key is attached to the encrypted personal information obtained by encrypting the personal information with the public key, and the personal information is stored in a secure format in which the encrypted personal information and the private key are paired. With this mechanism, plaintext personal information is not stored, so it is possible to prevent others from browsing. Further, since the encrypted personal information cannot be decrypted if the secret key is separated, the personal information is preserved only by discarding the secret key.

  Furthermore, by performing the confirmation of sending and receiving personal information with an electronic signature, interference from others can be eliminated.

  In addition, when the user himself / herself has received or received personal information or confirmed that it has been discarded, it is recorded in the transfer confirmation log or the disposal certification log, and personal information is leaked or used inappropriately , Identify users of leak sources.

  The effect of the present invention is that personal information can be safely communicated over the Internet. The reason is not asynchronous communication like e-mail, but after authenticating the user, issuing the encryption key, encrypting it, sending it while preventing tampering with the electronic signature, and then electronically signing with the private key A transfer confirmation log is generated and stored in response to the transfer completion notification. When discarding personal information, an invalid certificate issue request with an electronic signature is sent to the personal information transfer server when the personal information is discarded. User authentication data is deleted, and a discard certification log is generated and saved. This is because in the unlikely event of a personal information leakage accident, the public key is obtained from the certificate authority server by using the private key added to the encrypted personal information, the log is searched, and the leakage source user can be easily identified. Also, since personal information is stored on the user's personal computer as personal information in a secure format consisting of the encrypted personal information encrypted with the public key and its private key, plain text personal information can only be displayed for viewing. This is because if it does not exist and the secret key is deleted, it cannot be decrypted and personal information is preserved.

  Embodiments of the present invention will be described with reference to the drawings. Referring to FIG. 1, the embodiment of the personal information communication system includes an exchange confirmation log file 16 for confirming that personal information has been exchanged with a user, and discarding that proves that the user has surely discarded personal information. A certificate log file 17 for storing a certification log; and an applet file 18 for storing a personal information management applet to be incorporated in a user's personal computer. The certificate authority server 2 verifies the electronic signature, and the public key and its secret. It has an encryption key management file 22 for managing keys, a user authentication server 3 has an authentication data registration file 31 for managing user identifiers and passwords, and a user personal computer 4 is connected to the personal information transfer server 1 through the Internet. A browser to be connected is installed, and a personal information request and confirmation / invalidation confirmation with electronic signature are sent to the personal information transfer server 1. Made by actuating the person information management applet.

  The certificate authority server 2, the user authentication server 3, and the personal information transfer server 1 are connected by an intra network 6 and disconnected from an external network.

  Referring to FIG. 2, the processing device 10 of the user transfer server 1 returns a response in response to an authentication request or data request from the Internet communication unit 101 that connects the user PC to the Internet via the CGI and the user PC. Upon receiving the processing request of the notification processing unit 102 and the notification processing unit 102 for the data request, the user receives the personal information management applet, the public key and its private key, the personal information file name, and the encrypted personal information. A data transfer processing unit 103 to be downloaded to a personal computer; an authentication processing unit 104 that receives a processing request for an authentication request and sends a user authentication request and a user authentication data deletion request to the user authentication server 3; Request and the electronic signature verification request are sent to the certificate authority server 2 and the public key and its private key and the electronic signature verification result are received. The transfer confirmation log and the discard certification log are created based on the key to be taken and the verification processing unit 105, the completion of the transmission / reception of the personal information from the user personal computer 4, and the verification result of the electronic signature attached to the discard certification request. A log creation processing unit 106 registered in the file 16 and the discard certification log file 17, and a user search processing unit for searching for a user of a leakage source by a secret key attached to the encrypted personal information when personal information is leaked 107 and an intranet communication unit 108 for connecting the user authentication server 3 and the certificate authority server 2.

  Referring to FIG. 3A, the notification processing unit 102 includes a user acceptance unit 1021 that accepts a connection request using an initial password and a new password sent by the user personal computer 4, and a new password for the user personal computer 4. Password request means 1022 for requesting input, redirection request means 1023 for requesting connection to the download site of the personal information transfer server 1, completion of transmission / reception to the user personal computer 4 by output of the transfer confirmation log and output of the discard certification log, and Completion notification means 1024 for notifying completion of disposal, completion notification receiving means 1025 for receiving notification of completion of sending / receiving of encrypted personal information with an electronic signature, discard instruction means 1026 for notifying an instruction for discarding encrypted personal information with an electronic signature, Accepts personal information request with electronic signature and download site connection request Provided that a request receiving means 1027, the.

  Referring to FIG. 3B, the data transfer processing unit 103 includes an applet download unit 1031 for downloading the personal information management applet to the user personal computer, and a key sending unit for sending the public key and its private key to the user personal computer. 1032; file name sending means 1033 for sending the personal information file name to the user personal computer; and personal information download means 1034 for sending the encrypted personal information encrypted with the public key to the user personal computer. .

  Referring to FIG. 3C, the authentication processing unit 104 adds an identifier of the personal information transfer server 1 itself to the user password, and sends an authentication information sending means for sending a user authentication request to the user authentication server 3. 1041 and authentication stop means 1042 for requesting stop of use of the user identifier and password.

  Referring to FIG. 3D, the key and verification processing unit 105 sends a key generation request to the certificate authority server 2 and receives a public key and its private key, and a digital signature verification request. Is sent to the certificate authority server 2 and electronic signature verification means 1052 for obtaining the verification result is provided.

  Referring to FIG. 3 (e), the log creation processing unit 106 creates an exchange confirmation log means 1061 that creates an exchange confirmation log of personal information and outputs it to the exchange confirmation log file 16; A discard proof log means 1062 for outputting to the log file 17.

  Referring to FIG. 3 (f), the user search processing unit 107 secretly stores the leakage source specifying means 1071 for detecting the secret key attached to the encrypted personal information, the transfer confirmation log file 16 and the discard certification log file 17. User search means 1072 for searching by a public key corresponding to the key and identifying a user.

  Referring to FIG. 4A, the encrypted personal information 412 downloaded to the user personal computer 4 is stored in the storage area 40 as the maintenance form personal information 41 to which the secret key 411 is added.

  Referring to FIG. 4B, the user personal computer 4 includes a browser 42 that connects the personal information transfer server 1 via the Internet 5, a personal information management applet 43 that is downloaded from the personal information transfer server 1 and incorporated into the browser 42. Are provided in the storage area 40.

  Referring to FIG. 4 (c), the personal information management applet 43 includes an encryption key maintaining means 431 for storing a public key (not shown) and its private key and the secure personal information 41 in the storage area 40, and a personal information transfer server. The electronic signature verifying means 432 for the electronic signature attached to the notification from No. 1, the encryption key invalidating means 433 for invalidating the protected public key and its private key, and the secure form personal information 41, and the electronic signature. An electronic signature adding means 434 for generating and adding and means 435 for terminating the personal information management applet 43 itself are provided.

  Referring to FIG. 5, the transfer confirmation log file 16 is a file that records the transfer of personal information possessed by the personal information transfer server 1 by the user personal computer 4. The transfer confirmation log record 161 includes a user identifier 162, It includes an exchange date / time 163, an exchanged personal information file name 164, an electronic signature 165, and a public key 166.

  Referring to FIG. 6, the discard certification log file 17 is a certification record file in which the personal information transfer server 1 discards the encryption key and personal information held in the user personal computer 4, and the discard certification log record 171 is a user identifier. 172, discard date 173, discarded personal information file name 174, invalidity certificate 175, and public key 176.

  Next, the operation of the personal information transfer server 1 will be described with reference to FIG. The personal information transfer server 1 authenticates the user using the user authentication server 3 with an identifier and a password, and then requests the certificate authority server 2 to issue a public key and a secret key thereof. The public key and its private key are sent and stored in the storage area 40 by the downloaded personal information management applet 43.

  The personal information is transmitted / received by transmitting the personal information obtained by encrypting the personal information obtained from the personal information file (not shown) by the personal information transfer server 1 using the public key to the user personal computer 4, and using the personal information management applet 43. In the storage area 40, the storage format personal information 41 to which the secret key is added is stored.

  After the user personal computer 4 receives and sends the encrypted personal information, the personal information management applet 43 sends a completion notice with an electronic signature digitally signed with a private key to the personal information transfer server 1. The personal information transfer server 1 requests the certificate authority server 2 to verify the electronic signature, and generates and records an exchange confirmation log 161 including a certificate and a public key based on the verification result. The personal information transfer server 1 sends a completion notice to the user personal computer 4 and ends the personal information exchange.

  After decrypting and browsing the maintenance form personal information 41 on the user personal computer 4, when the maintenance form personal information 41 is discarded, the personal information transfer server 1 uses the user authentication server 3 to identify the user with an identifier and a password. After the authentication, the user personal computer 4 sends a request for discard instruction with an electronic signature to the personal information transfer server 1 in order to discard the maintenance form personal information 41. The personal information transfer server 1 requests the certificate authority server 2 to verify the electronic signature, and sends a discard instruction with an electronic signature to the user personal computer 4 based on the verification result of the electronic signature. The user personal computer 4 verifies the electronic signature by the personal information management applet 43, discards the private key 411 of the maintenance form personal information 41 according to the discard instruction, and invalidates the encrypted personal information 412.

  Next, in order to invalidate the public key, the personal information management applet 43 sends to the personal information transfer server 1 an invalid certificate issuance request with an electronic signature generated by the private key. The personal information transfer server 1 requests the certificate authority server 2 to verify the invalid certificate issuance request with the electronic signature. Based on the verification result, the certificate authority server 2 stops using the public key, and the user authentication server 3 After deleting the user identifier and password, a discard certificate log 171 is generated and registered in the discard certificate log file 17. The personal information transfer server 1 sends a completion notice to the user personal computer 4, and the personal information management applet 43 deletes and discards the public key to be maintained and its private key, and terminates itself.

  Since the secret key 411 is attached to the secure format encrypted personal information 41 when the secure format encrypted personal information 41 is leaked, the certificate authority server 2 uses the encrypted personal information 412 handled by the personal information transfer server 1. Whether or not there is can be determined by the encryption key management file 21 that manages the secret key 411. In such a case, it is possible to easily identify the user by estimating the leakage source from the public key, the personal information transfer confirmation log file 16 or the personal information discard certification log file 17.

  The personal information transfer server 1 and the user personal computer 4 are connected by the Internet 5 and communicate by http. The personal information transfer server 1, the user authentication server 2, and the certificate authority server 3 are connected by an intranet 6 and communicate by a protocol defined by the intranet.

  Next, a description will be given with reference to FIG. 7 showing an operation of executing the personal information transfer confirmation method in this embodiment. On the premise that the user of this personal information communication system is registered in advance, the identifier, initial password, and URL of the user himself / herself are sent by mail or encrypted mail prior to sending / receiving the personal information. Shall.

  The user connects the user personal computer 4 to the Internet 5, inputs a URL to connect to the personal information transfer server 1, sends an identifier and an initial password by CGI of the Internet communication means 101 of the personal information transfer server 1, and notifies The user accepting means 1021 of the processing unit 102 accepts it (Step 501). The authentication processing unit 104 of the personal information transfer server 1 sends the server's own identifier, user identifier, and initial password to the user authentication server 3 and makes an authentication request (step 502). The user authentication server 3 verifies the user identifier and the initial password with the authentication data registration file 31 and, when authentication is possible, sends OK to the authentication processing unit 104 (step 503). The authentication processing unit 104 confirms that the user has received the initial password in advance by the OK, and sends the password input screen for requesting a new password to the user personal computer 4 by the notification processing unit 102 (step). 504). The user inputs a new password not known to others into the user personal computer 4 and sends it to the personal information transfer server 1 (step 505).

  When the notification processing unit 102 receives the new password, the authentication processing unit 104 sends the identifier of the personal information transfer server 1 itself, the identifier of the user, the initial password, and the new password to the user authentication server 3. The user authentication server 3 changes the password of the authentication data registration file 31 (step 506). The user authentication server 3 sends OK for the password change to the authentication processing unit 104 (step 507). The notification processing unit 102 sends a redirect request for connection to the download site of the personal information management applet to the user personal computer 4 (step 508).

  The user personal computer 4 requests a download site connection, and the notification processing unit 102 accepts the connection request (step 509). In response to the connection request, the data transfer processing unit 103 obtains a personal information management applet from the applet file 18 and downloads it to the user personal computer 4 (step 510). The browser 42 of the user personal computer 4 operates by incorporating the downloaded personal information management applet into the browser 42 of the storage area 40, and sends a key acquisition request to the personal information transfer server 1 (step 511).

  The notification processing unit 102 makes a key acquisition request to the certificate authority server 2 through the key and verification processing unit 105 (step 512). The certificate authority server 2 obtains the public key and its private key from the encryption key management file 21, and sends them to the key and verification processing unit 105 (step 513). The key and verification processing unit 105 sends the key to the user personal computer 4 through the data transfer processing unit 10103, and the personal information management applet 43 maintains the key in the predetermined storage area 40 (step 514).

  The user personal computer 4 sends a personal information download site connection request to the personal information transfer server 1 (step 515). The notification processing 102 accepts the connection request, and the data transfer processing unit 103 sends a personal information file name list that can be referred to by the user from the personal information management table (not shown) to the user personal computer 4 (step 516). . The user personal computer 4 displays a list of personal information file names, and the user designates personal information. The personal information management applet 43 generates an electronic signature and sends a personal information request with an electronic signature to the personal information transfer server 1 (step 517). The notification processing unit 102 sends a personal information request with an electronic signature to the certificate authority server 2 by the key and verification unit 105, and requests verification of the electronic signature (step 518). The certificate authority server 2 obtains and verifies the public key for verifying the electronic signature from the encryption key management file 21, and obtains a certificate indicating that the verification result is valid and the public key, and a key and verification processing unit. 105 (step 519).

  The data transfer processing unit 103 sends the encrypted personal information encrypted using the public key to the user personal computer 4, and the personal information management applet 43 of the user personal computer 4 stores the secret key 411 in the encrypted personal information 412. Is stored in the storage area 40 (step 520). The user decrypts the encrypted personal information 412 with the private key 411 of the maintenance format personal information 41, displays it, and browses the contents. Personal information is confirmed by browsing to complete the exchange of personal information, and the user inputs the completion of the exchange of personal information. The personal information management applet 43 generates an electronic signature using the private key, and sends an exchange completion notice with an electronic signature to the personal information transfer server 1 (step 521).

  The notification processing unit 102 receives the notification of completion of transfer with an electronic signature, sends it to the certificate authority server 2, and requests verification of the electronic signature (step 522). When the verification result of the electronic signature is correct, the certificate authority server 2 sends the certificate and the public key used for verification to the key and verification processing unit 105 (step 523). Based on the certificate, the log creation means 106 outputs a log including the user identifier, date and time, personal information file name, electronic signature, and public key to the transfer confirmation log file 15 (step 524). ), The completion is sent to the user personal computer 4 (step 525). The personal information management applet 43 of the user personal computer 4 invalidates itself and ends.

  Next, the operation of executing the personal information discarding method in this embodiment will be described with reference to FIG. The user connects the user personal computer 4 to the Internet 5, inputs a URL, connects to the personal information transfer server 1, and follows the instruction by the CGI of the Internet communication means 100 of the personal information transfer server 1, A password is sent (step 601). The notification processing unit 102 of the personal information transfer server 1 sends its own identifier, user identifier, and password to the user authentication server 3 through the authentication processing unit 104 and makes an authentication request (step 602). The user authentication server 3 refers to the authentication data registration file 31 using the user identifier and password, authenticates the user, and sends OK to the authentication processing unit 104 (step 603).

  After authenticating the user, the authentication processing unit 104 sends a redirection request, which is a request for connection to the download (DL) site of the personal information management applet, to the user personal computer 4 through the notification processing unit 102 (step). 604). The user personal computer 4 connects to the download site of the personal information transfer server 1 (step 605). The data transfer processing unit 103 downloads the personal information discard applet of the applet file 18 to the user personal computer 4 and operates by being incorporated in the browser 42 of the user personal computer 4 (step 606).

  When the user inputs a personal information discard request to the user personal computer 4, the personal information management applet 43 generates an electronic signature, and sends a discard instruction request with an electronic signature to the personal information transfer server 1 (step 607). The notification processing unit 102 sends an electronic signature verification request with its own identifier to the certificate authority server 2 through the key and verification processing unit 105 (step 608). The certificate authority server 2 verifies the electronic signature, and if it can be verified that the electronic signature is correct, sends the certificate and the public key to the key and verification processing unit 105 (step 609). Based on the certificate, the key and verification processing unit 105 electronically signs a personal information discard instruction and sends it to the user personal computer 4 (step 610).

  The personal information management applet 43 of the user personal computer 4 verifies the electronic signature and verifies the validity of the discard instruction. Then, the personal information management applet 43 discards the stored maintenance-type personal information 41 and completes the disposal. In order to invalidate the public key, an electronic signature is generated and an invalid certificate issue request with an electronic signature is sent to the personal information transfer server 1 (step 611). The key and verification processing unit 105 sends a request for issuing an invalid certificate with its own identifier and electronic signature to the certificate authority server 2 (step 612). The certificate authority server 2 verifies the electronic signature, and if it is verified that the electronic signature is valid, the public key of the encryption key management file 22 is invalidated and the use is stopped, and the invalid certificate and the public key are keyed. And sent to the verification processing unit 105 (step 613).

  The authentication processing unit 104 sends its own identifier, user identifier, and password to the user authentication server 3 and makes a user authentication stop request (step 614). The user authentication server 3 deletes the user identifier and password from the authentication data file 31, and sends OK to the authentication processing unit 104 (step 615). Based on the invalid certificate, the log creation processing unit 106 outputs a discard certificate log including a user identifier, date and time, personal information file name, invalid certificate, and public key to the discard certificate log file 17 (step 616). The notification processing unit 102 sends the completion to the user personal computer 4 when the stop of the public key, the output of the discard certification log, and the stop of the user authentication are all completed (step 617). Upon receipt of the completion, the user personal computer 4 discards the public key and the secret key that have been maintained, returns the control to the browser 42, and terminates the disposal of personal information.

  Next, the operation of executing the personal information leakage source search method in the personal information communication system will be described with reference to FIG. When leaked personal information is input to the personal information transfer server 1 (step 701), the user search processing unit 107 extracts the secret key 411 added to the maintenance form personal information 41 (step 702). The key and verification processing unit 105 sends the secret key 411 to the certificate authority server 2 and requests verification (step 703). The certificate authority server 2 searches the encryption key management file 21 for a public key corresponding to the secret key, and sends it to the key and verification processing unit 105 (step 705). The user search processing unit 107 searches the transfer confirmation log file 16 and the discard certificate file 17 using the public key, and detects a user who leaked personal information (step 706). Leakage investigation based on the contents recorded in the transfer confirmation log and the disposal certification log can be implemented for the corresponding user.

  The above description is based on the assumption that the personal information transfer server 1 and the personal computer 7 communicate with each other using the well-known http protocol over the Internet 5 and the authentication server 3 and the certificate authority 2 with the standard intranet 6 protocol. However, as a matter of course, the security of the intranet 6 can be enhanced by using SSL or a dedicated protocol. Further, it is clear that more secure personal information communication can be realized on the premised Internet 5 using a dedicated line, a wide area Ethernet, a VPN, or the like.

  Further, it is obvious that each processing unit in the above description is executed by a program unit, and the program unit is mounted on a system file (not shown) and loaded into a storage area to operate.

  As an application example of the present invention, it can be used for exchanging personal information and personnel information with a contractor of a personnel information system or a joint venture.

It is a figure which shows embodiment of this invention. It is a figure which shows the processing apparatus structure of the personal information transfer server in this embodiment. 2 shows details of the configuration of the processing apparatus shown in FIG. 2, where a part (a) is a notification processing part, a part (b) is a data transfer part, part (c) is an authentication part, and part (d) is a key and verification. The processing part, part (e) is a log creation part, and part (f) is a diagram showing a user search part. The partial diagram (a) shows the configuration of the maintenance form personal information, the partial diagram (b) shows the configuration of the storage area of the user personal computer, and the partial diagram (c) shows the configuration of the personal information management applet. It is a figure which shows the record structure of an exchange confirmation log file. It is a figure which shows the record structure of a discard proof log file. It is a figure which shows the operation | movement which performs the transfer confirmation method of personal information. It is a figure which shows the operation | movement which performs the destruction certification | authentication method of personal information. It is a figure which shows the operation | movement which performs the leakage source identification method of personal information.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Personal information transfer server 2 Certification authority server 3 User authentication server 4 User personal computer 5 Internet 6 Intranet 10 Processing device 16 Transfer confirmation log file 17 Disposal certification log file 18 Applet file 21 Encryption key management file 31 Authentication data registration file 40 Storage Area 41 Encrypted personal information 42 Browser 43 Personal information management applet 101 Internet communication means 102 Notification processing unit 103 Data transfer processing unit 104 Authentication processing unit 105 Key and verification processing unit 106 Log creation processing unit 107 User search processing unit 108 Intranet communication Part

Claims (15)

An authentication data registration file for registering a user identifier and password is sent to the user with an authentication server for authentication processing of the user, and an encryption key management file for managing the public key and its private key. A certificate authority server that manages the public key and private key to be transmitted and verifies the electronic signature, a personal information transfer server that encrypts and sends the personal information requested by the user with the public key, and the user personally sends the personal information to the personal information transfer server. In a personal information communication system comprising an information request and a user personal computer used for browsing it,
The personal information transfer server is
An exchange confirmation log file that accumulates an exchange confirmation log for confirming the exchange of personal information,
The personal information held by the user personal computer and the public key and its private key are discarded, the certificate authority server stops using the public key and its private key, and the user authentication server receives user authentication data. A discard certification log file that accumulates a discard certification log that proves that
An applet file that stores a personal information management applet to be downloaded to the user's computer;
A notification process for the data request and notification of the user personal computer, a transfer process of a personal information applet for maintaining personal information and a public key and its private key, a log creation process for creating a transfer confirmation log and a disposal certification log; A personal information communication system comprising: a processing device that executes user search processing for searching for leaked personal information. The processor is
An Internet communication unit for connecting a user personal computer to the Internet via CGI;
A notification processing unit that receives an authentication request or data request from the user personal computer and returns a response;
Data transfer in which a personal information management applet, a public key and its private key, a personal information file name, and encrypted personal information are downloaded to a user personal computer in response to a processing request of the communication processing unit in response to the data request A processing unit;
An authentication processing unit that receives a processing request for the authentication request and sends a user authentication request and a user authentication data deletion request to the user authentication server;
A key and a verification processing unit for sending a public key and its private key acquisition and electronic signature verification processing request to the certificate authority server, and receiving the public key and its private key and electronic signature verification result;
A log creation processing unit that creates an exchange confirmation log and a discard certification log based on the electronic signature verification result attached to the notification of the user personal computer, and registers the transfer confirmation log file and the discard certification log file;
A user search processing unit that searches for a user of a leakage source based on a secret key attached to the encrypted personal information when personal information is leaked;
The personal information communication system according to claim 1, further comprising: an intranet communication unit that connects the user authentication server and the certificate authority server. The user PC is
Means for maintaining a public key downloaded from the personal information transfer server, its private key and encrypted personal information in a storage area, and operating a personal information management applet for generating and adding an electronic signature to a user request. The personal information communication system according to claim 1, further comprising: The notification processing unit
A user accepting means for accepting a connection request with an initial password sent from a user personal computer and a newly registered password;
Password request means for requesting the user personal computer to input a new password;
Redirect request means for sending a redirect request for requesting connection to the download site by the personal information transfer server;
Completion notifying means for notifying the user personal computer of the completion of the transfer and the completion of the discard by outputting the transfer confirmation log or the output of the discard certification log;
A completion notification receiving means for receiving a transfer completion notification with an electronic signature of the encrypted personal information;
A discard instruction means for notifying a discard instruction with an electronic signature of the encrypted personal information;
A request receiving means for receiving a personal information request with electronic signature and a download site connection request;
The personal information communication system according to claim 2, further comprising: The data transfer processing unit
Applet download means for downloading the personal information management applet to a user computer;
Key sending means for sending the public key and its private key to a user computer;
A file name sending means for sending the personal information file name to the user computer;
Personal information download means for sending encrypted personal information, which is obtained by encrypting personal information with a public key, to a user's computer;
The personal information communication system according to claim 2, further comprising: The authentication processing unit
An authentication information sending means for attaching the identifier of the personal information transfer server itself to the password of the user and sending a user authentication request to the user authentication server;
An authentication suspension means for requesting suspension of use of a user identifier and a password;
The personal information communication system according to claim 2, further comprising: The key and verification processing unit
Key management means for sending a key generation request to the certificate authority server and receiving a public key and a secret key thereof;
An electronic signature verification means for sending an electronic signature verification request to the certificate authority server and obtaining a verification result;
The personal information communication system according to claim 2, further comprising: The log creation processor
A transfer confirmation log means for creating a transfer confirmation log of personal information and outputting it to a transfer confirmation log file;
A disposal certification log means for creating a disposal certification log and outputting it to a disposal certification log file;
The personal information communication system according to claim 2, further comprising: The user search processor
A leakage source identifying means for detecting a secret key from the personal information in the form of maintenance;
A user search means for searching for the transfer confirmation log file and the destruction certification log file with a public key corresponding to the secret key to identify a user;
The personal information communication system according to claim 2, further comprising: The personal information management applet
Means for maintaining in the storage area the preservation form personal information obtained by adding the public key downloaded from the personal information transfer server and its private key and the private key to the encrypted personal information;
A means for accepting an electronic signature disposal instruction and verifying the electronic signature;
Means for discarding the public key to be held and the private key thereof, and the integrity-type personal information by a disposal instruction with an electronic signature;
Means for generating an electronic signature and adding the electronic signature to a personal information transfer completion notification and a public key invalid certificate issuance request;
Means for terminating the personal information management applet itself;
The personal information communication system according to claim 3, further comprising: The transfer confirmation log file is
Including the identifier of the user who gave and received the personal information, the date and time when the personal information was sent and received, the name of the personal information file in which the personal information was registered, the electronic signature attached to the completion of the transfer, and the public key The personal information communication system according to claim 1, wherein: The discard certificate log file is
It includes the identifier of the user who sent and received the personal information, the date and time when the personal information was discarded, the name of the personal information file in which the personal information is registered, the electronic signature attached to the completion of the disposal, and the public key. The personal information communication system according to claim 1, wherein: An authentication data registration file for registering a user identifier and password is sent to the user with an authentication server for authentication processing of the user, and an encryption key management file for managing the public key and its private key. A certificate authority server that manages the public key and private key to be transmitted and verifies the electronic signature, a personal information transfer server that encrypts and sends the personal information requested by the user with the public key, and the user personally sends the personal information to the personal information transfer server. In a personal information communication confirmation method of a personal information communication system comprising an information request and a user personal computer used for browsing the information,
The personal information transfer server downloads a public key and its private key and a personal information management applet for maintaining encrypted personal information to a personal computer of an authenticated user, and operates the personal information management applet.
The personal information transfer server to which a key acquisition request is sent from the user personal computer sends the request to a certificate authority server;
The certificate authority server obtains a public key and its private key from a cryptographic management file, and sends the public key and its private key to the personal information transfer server;
The personal information transfer server sends the public key and its private key to a user personal computer, and the personal information management applet maintains the public key and its private key in a storage area;
The user personal computer connecting to the download site of the personal information transfer server;
The personal information transfer server sends a personal information file name list that can be viewed by a user to the user personal computer for display;
The user personal computer generates a digital signature by a personal information management applet and sends a personal information download request with a digital signature to a personal information transfer server;
The personal information transfer server sends a verification request for the electronic signature-added personal information download request to the certificate authority server, and sends a verification result certificate and a public key to the personal information transfer server;
The personal information transfer server retrieves the requested personal information from a personal information file and downloads the encrypted personal information encrypted by the public key to the user personal computer;
The user personal computer maintains, in the storage area, the stored personal information in which the private key is added to the encrypted personal information downloaded in the storage area by the personal information management applet, generates an electronic signature, and notifies the completion of transfer with the electronic signature Sending to the personal information transfer server;
The personal information transfer server sends a request for verification of the transfer completion notification with an electronic signature to the certificate authority server, the certificate authority server verifies the electronic signature, and provides a certificate and a public key of the verification result as the personal certificate. Sending to the information transfer server;
The personal information transfer server creates a transfer confirmation log including a user identifier, date and time, personal information file name, electronic signature, and public key based on the certificate, and registers the transfer confirmation log file in a transfer confirmation log file;
The personal information transfer server sends a transfer confirmation completion to the user personal computer by registering a transfer confirmation log; and
The user personal computer terminates the personal information management applet upon completion of the transfer confirmation and returns control to the browser;
A personal information exchange confirmation method for a personal information communication system, characterized in that An authentication data registration file for registering a user identifier and password is sent to the user with an authentication server for authentication processing of the user, and an encryption key management file for managing the public key and its private key. A certificate authority server that manages the public key and private key to be transmitted and verifies the electronic signature, a personal information transfer server that encrypts and sends the personal information requested by the user with the public key, and the user personally sends the personal information to the personal information transfer server. In a personal information disposal certification method of a personal information communication system comprising an information request and a user personal computer used for browsing the information,
When the user discards the encrypted personal information held by the user's personal computer and the maintenance form personal information consisting of its private key, the personal information management applet sends a disposal request with an electronic signature to the personal information transfer server. And steps to
The personal information transfer server sends the digital signature discard request to the certificate authority server and requests verification of the electronic signature;
The certificate authority server verifies the electronic signature and sends a verification certificate and a public key to the personal information transfer server;
The personal information transfer server sends a disposal instruction with an electronic signature by the public key to a user personal computer;
The user personal computer issues an invalid certificate issuance request with an electronic signature that the personal information management applet verifies the disposal instruction with an electronic signature, discards the retained personal information held, and invalidates the public key. Sending to the information transfer server;
The personal information transfer server sends the invalid certificate issuance request with the electronic signature to the certificate authority server;
The certification authority server, based on the verification result of the electronic signature, suspends and invalidates the public key, and sends the invalid certificate and the public key to the personal information transfer server;
The personal information transfer server, according to the invalid certificate, outputting a discard certificate log including a user identifier, date and time, personal information file name, invalid certificate, and public key to a discard certificate log file;
The personal information transfer server sends a user identifier and password to a user authentication server, and requests authentication stop;
The user authentication server deletes the user identifier and password from the authentication data file and sends an invalidation completion to the personal information transfer server;
The personal information transfer server sends the invalidation completion to the user's personal computer, discards the public key and its private key maintained by the personal information management applet, returns control to the browser, and discards the personal information. A step to finish,
A personal information discard certification method for a personal information communication system, characterized in that: An authentication data registration file for registering a user identifier and password is sent to the user with an authentication server for authentication processing of the user, and an encryption key management file for managing the public key and its private key. A certificate authority server that manages the public key and private key to be transmitted and verifies the electronic signature, a personal information transfer server that encrypts and sends the personal information requested by the user with the public key, and the user personally sends the personal information to the personal information transfer server. In a personal information leakage source identifying method of a personal information communication system comprising an information request and a user personal computer used for browsing the information,
A step of inputting maintenance type personal information composed of encrypted personal information and a secret key leaked to the personal information transfer server;
Detecting a secret key from the integrity type personal information;
Requesting verification of the secret key from a certificate authority server;
The certificate authority server sends a public key corresponding to a secret key to the personal information transfer server;
The user authentication server searching the personal information transfer confirmation log file and the personal information discard certification log file with the public key;
The personal information transfer server detecting a user identifier using the public key according to the search result;
A personal information leakage source identifying method for a personal information communication system, characterized by:

Images