JP2006309659A - Electronic certificate management system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an electronic certificate management system allowing certain execution of various kinds of processing related to an electronic certificate of invalidation processing or the like with a service order about a contract of communication service. <P>SOLUTION: In this electronic certificate management system 30, an order processing part 31 changes a user profile of a profile recording area 36 on the basis of the service order received from an external device 10, and enqueues invalidation requirement to an invalidation requirement queue 35 when the service order is a name change, succession, or cancellation. A certificate invalidation registration part 33 acquires the invalidation requirement queued to the invalidation requirement queue 35, and performs invalidation registration processing and an invalidation request after confirming presence of the electronic certificate of an invalidation requirement target in the profile recording area 36. A certificate issuing part 34 performs invalidation processing of the electronic certificate receiving the invalidation request. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to an electronic certificate management system for managing electronic certificates, and in particular, an electronic certificate for revoking an electronic certificate and changing the identification information of the holder of the electronic certificate in conjunction with a service order. This is related to a document management system.

  In recent years, mobile devices can access the Internet in the same way as personal computers, and use public key infrastructure (PKI) to solve security problems such as data eavesdropping, falsification, and impersonation. Security technology has been adopted. Two-way authentication in SSL (Secure Socket Layer) communication is performed by client authentication using an electronic certificate stored in the mobile device in communication where the mobile device user is a client and the service provider user (CP: Contents Provider) is a server. Can be realized.

  High reliability is required for the management of electronic certificates. For this reason, it is necessary to issue or revoke an electronic certificate with strict identity verification. When you issue / revoke an electronic certificate at the counter, you can confirm the person directly. On the other hand, when issuing or revoking an electronic certificate by operating a mobile device, the user is authenticated by authenticating the mobile device based on the fact that the mobile device and the contractor are bound by a communication service contract. It is possible to confirm the sex.

  FIG. 4 shows an outline of a conventional revocation process. At the time of service order (contract procedure) such as “cancellation”, “name change” or “succession” of a communication service contract, the communication service contractor operates the mobile device in advance or is limited by the declaration from the contractor. The operator operates the dedicated terminal and requests revocation. As a result, a revocation request is transmitted from the mobile device or the dedicated terminal to the electronic certificate management system (step S1), and revocation processing is performed in the electronic certificate management system (step S2).

  However, such conventional techniques have the following problems. That is, considering the case of “cancellation” of the contractor α for the communication service contract, or the case of performing the “name change” or “succession” procedure from the contractor α to the contractor β, the contractor α In order to revoke the issued electronic certificate, as described above, the contractor α operates the mobile device in advance before the procedure, and the electronic certificate issued to the contractor α is revoked, or There is a method in which an operator performs a revocation process using a dedicated terminal separately from the above-described procedure process according to the declaration of the contractor α. However, in such a method, there is a possibility that the revocation process may not be performed due to a processing omission or a processing error of the contractor α or the operator, and the electronic certificate may not be written in the certificate revocation list until the expiration date. . Furthermore, in the busy season, it takes time for the revocation processing by the operator, and there is a problem that the time difference between the contract procedure and the revocation of the electronic certificate may become large.

  Conventionally, CommonName, which is the identification name of the holder (issued person) of the electronic certificate, is managed as one item of the user profile, being bundled with the communication service contract ID, and the communication service contract is canceled. It was not changed or deleted until For this reason, for example, even after the communication service contractor α “name change” or “succession” to the contractor β, the CommonName of the electronic certificate is not changed. However, since the electronic certificate stored in the mobile device can also be used in communication media other than the mobile device (PC (personal computer), etc.), the communication service contractor α changes the “name change” or “succession” After that, the contractor α was able to use the electronic certificate issued to him. Therefore, when the service providing user contracted by the contractor β receives a service request accompanied by electronic authentication from the contractor α, there is a possibility that the contractor α is misidentified as the contractor β from the CommonName of the electronic certificate of the contractor α. there were.

For example, Patent Documents 1 and 2 exist as other conventional techniques related to the revocation processing of an electronic certificate.
JP 2002-72876 A JP 2003-264538 A

However, in Patent Documents 1 and 2, revocation processing triggered by a revocation request is disclosed, as in the prior art described above, but an electronic certificate is provided according to various service orders for communication service contracts. The point of reliably executing the related processing has not been studied.
The present invention solves the above-mentioned problems, and it is possible to automatically and reliably execute various processes related to an electronic certificate such as a revocation process in response to a service order for a communication service contract. An object is to provide an electronic certificate management system.

  In order to solve the above-mentioned problem, the invention according to claim 1 is an electronic certificate management system for managing an electronic certificate, wherein the electronic certificate management system includes a contract recording unit, an order processing unit, and a certificate revocation registration. And a certificate issuing unit, wherein the contract recording unit includes a profile recording area for recording a user profile including contract information of a communication service and management information of the electronic certificate, and an electronic certificate revocation request. A revocation request queue for queuing, wherein the order processing unit receives an order receiving means for receiving a service order for a communication service contract from an external device, and the profile based on the service order received by the order receiving means. Profile management means for changing the user profile recorded in the recording area, and the order receiving means A revocation request means for enqueuing a revocation request for the corresponding electronic certificate in the revocation request queue when the received service order is a first type of service order accompanied by revocation of the electronic certificate; The certificate revocation registration unit is configured to acquire a revocation request queued in the revocation request queue, and to manage a revocation request target electronic certificate based on the revocation request acquired by the revocation request acquisition unit. A certificate search means for confirming whether or not information is recorded in the profile recording area; and when the certificate search means confirms that the management information is recorded, the revocation request target electronic A certificate registration means for performing certificate revocation registration processing, and a request for revocation of an electronic certificate for which revocation registration processing has been performed by the certificate registration means. An electronic certificate management system, wherein the certificate issuing unit includes a revocation unit that performs revocation processing of a digital certificate that has been revoked by the revocation processing request unit. To do.

  With this configuration, it is possible to automatically and reliably execute various processes related to the electronic certificate such as the revocation process in response to the service order from the external device. Therefore, it is possible to eliminate processing omissions that are manually performed by a communication service contractor or operator, so that it is possible to prevent unauthorized use of an electronic certificate due to revocation omission. The burden can be reduced. In addition, queuing revocation requests in the revocation request queue enables service order processing and digital certificate revocation processing to be performed asynchronously, and service order processing continues regardless of the execution status of revocation processing. can do.

  According to a second aspect of the present invention, in the electronic certificate management system according to the first aspect, when the service order received by the order receiving unit is the first type of service order, After the user profile is deleted or updated by the profile management means and the revocation request means has successfully enqueued the revocation request to the revocation request queue, a message indicating that the service order processing has been completed is sent to the external If the service order transmitted to the apparatus and received by the order receiving means is other than the first type of service order, the service order processing is completed after the profile management means creates or updates the user profile. A message to the effect is transmitted to the external device. .

With this configuration, it is possible to automatically and reliably execute service order processing in accordance with the type of service order. In addition, the service order process can be independently executed regardless of the execution status of the electronic certificate revocation process.
According to a third aspect of the present invention, in the electronic certificate management system according to the first or second aspect, the certificate revocation registration unit is queued in the revocation request queue by polling the revocation request queue. It further comprises revocation request monitoring means for monitoring revocation requests.

With this configuration, the service order process and the electronic certificate revocation process can be performed asynchronously, and the execution of each process can be continued without being affected by the execution status of each process.
According to a fourth aspect of the present invention, in the electronic certificate management system according to any one of the first to third aspects, the certificate revocation registration unit is configured such that the revocation registration process by the certificate registration unit fails. The revocation request recovery means for performing the recovery process of the revocation request acquired from the revocation request queue is further provided, the revocation request acquisition by the revocation request acquisition means and the revocation registration processing by the certificate registration means, the revocation registration The process is repeated a predetermined number of times until the process is successful, and if the revocation registration process is not successful even after the predetermined number of times, a message to that effect is output.

  With this configuration, even if the revocation registration process fails, it is possible to reliably perform the revocation registration process by recovering the revocation request and repeating the acquisition of the revocation request and the revocation registration process. When the revocation registration process is not successful, by outputting a message to that effect, the operator can confirm that the revocation registration process has failed, and it is possible to prevent revocation leakage.

  According to a fifth aspect of the present invention, in the electronic certificate management system according to any one of the first to fourth aspects, the management information of the electronic certificate is for identifying a holder of the electronic certificate. Holder identification information is included, and the profile management means changes the holder identification information when the service order received by the order receiving means is a second type of service order accompanied by a contractor change. It is characterized by.

  With this configuration, it becomes possible to uniquely associate the contract name of the communication service with the electronic certificate, and the reliability of the electronic certificate can be improved.

  As described above, according to the present invention, it is possible to automatically and reliably execute various processes related to an electronic certificate such as a revocation process in response to a service order for a communication service contract from an external device. It becomes. Accordingly, since the processing omission can be eliminated, the unauthorized use of the electronic certificate can be prevented, and the processing load on the communication service contractor or operator can be reduced.

  Furthermore, in the case of a service order that involves a change in the contractor of the communication service, it is possible to uniquely bind the holder identification information and the contract name by changing the holder identification information of the electronic certificate. It becomes possible to identify the certificate user and increase the reliability of the electronic certificate.

Next, embodiments of the present invention will be described with reference to the drawings.
[1. Constitution]
First, the configuration of the electronic certificate management system according to this embodiment of the present invention will be described. FIG. 1 is a configuration diagram of an electronic certificate management system according to the present embodiment. An electronic certificate management system 30 according to the present embodiment includes an order processing unit 31 that performs service order processing in response to a service order from an external device 10 such as a dedicated terminal, a contract recording unit 32 that includes a storage device, A certificate revocation registration unit 33 that performs revocation registration processing of an electronic certificate, a certificate issuance unit 34 that performs issuance and revocation processing of an electronic certificate, and a maintenance terminal 37 are configured. Each of these components may be composed of one device or may be composed of a plurality of devices. Moreover, the some component may be comprised with one apparatus. Each device includes hardware resources such as a CPU (Central Processing Unit), a storage device, and a communication interface, and software resources such as programs and data stored in the storage device. Each component is realized by these hardware resources and software resources. Hereinafter, each component will be described.

  The contract recording unit 32 includes a profile recording area 36 and an expiration request queue 35. The profile recording area 36 records a user profile. The user profile is used to manage contractor information for managing information related to contractors who have entered into communication service contracts, such as mobile phone line contracts, and to manage electronic certificates issued to contractors. Management information is included. The contractor information includes a contract ID, a contractor name, an address, a telephone number, and the like. The management information of the electronic certificate includes CommonName (holder identification information) for identifying the holder (issuer and user) of the electronic certificate. This CommonName is ITU-T X. It is defined by the 500 protocol.

The revocation request queue 35 is a storage area for queuing revocation requests from the order processing unit 31.
The order processing unit 31 performs service order processing triggered by reception of the service order from the external device 10, and transmits a message indicating that the service order processing is completed to the external device 10. The function of the order processing unit 31 will be described in detail. The order processing unit 31 includes an order receiving unit 311, a profile management unit 312, and an expiration request unit 313.

  The order receiving unit 311 receives a service order for a communication service contract from the external device 10. Here, the “service order for a communication service contract” includes a first type of service order with an electronic certificate revocation, a second type of service order with a contractor change, and a new user profile. And a third type of service order with creation.

The first type of service order that accompanies revocation of an electronic certificate includes, for example, “cancellation”, “transfer”, “pause”, “name change”, and “success”. The second type of service order accompanied by the contractor change includes “name change” and “succession”. The third type of service order that involves creating a new user profile includes “new contract” and “transfer”.
The profile management unit 312 changes the user profile recorded in the profile recording area 36 according to the type of service order received by the order receiving unit 311. Specifically, for example, when the type of service order is “new contract”, the profile management unit 312 creates a user profile and records it in the profile recording area 36. When the service order type is “address change”, the address of the corresponding user profile recorded in the profile recording area 36 is updated. If the service order type is “cancel”, the corresponding user profile recorded in the profile recording area 36 is deleted.

As a particularly characteristic function, the profile management unit 312 is recorded in the profile recording area 36 when the service order received by the order receiving unit 311 is a second type of service order accompanied by a contractor change. Change the CommonName of the digital certificate management information included in the user profile of the corresponding contractor.
When the service order received by the order receiving unit 311 is the first type of service order accompanied by the revocation of the electronic certificate, the revocation request unit 313 receives the revocation request queue of the corresponding contractor's electronic certificate. Enqueue to 35.

Next, the function of the certificate revocation registration unit 33 will be described. The certificate revocation registration unit 33 includes a certificate revocation registration unit 33, a revocation request acquisition unit 331, a certificate search unit 332, a certificate registration unit 333, a revocation request recovery unit 334, and a revocation request monitoring unit 335. Revocation processing requesting means 336.
The revocation request monitoring unit 335 monitors revocation requests queued in the revocation request queue 35 by periodically polling the revocation request queue 35.

The revocation request acquisition unit 331 acquires a revocation request queued in the revocation request queue 35 and dequeues (deletes the revocation request from the revocation request queue 35).
Based on the revocation request acquired by the revocation request acquisition unit 331, the certificate search unit 332 determines whether or not the management information of the electronic certificate subject to revocation request is recorded in the profile recording area 36. Confirm by searching.

When the certificate search unit 332 confirms that the management information of the corresponding electronic certificate is recorded in the profile recording area 36, the certificate registration unit 333, for example, identifies the revocation request target electronic certificate. By registering information in a predetermined storage area, the revocation registration process for the revocation request target electronic certificate is performed.
The revocation processing request unit 336 sends a revocation processing request to the certificate issuing unit 34 for the electronic certificate for which the revocation registration processing has been performed.

The revocation request recovery unit 334 performs recovery processing of the revocation request acquired from the revocation request queue 35 when the revocation registration processing of the electronic certificate by the certificate registration unit 333 fails. Here, “recovery processing” may be recovery processing by rollback or rollforward.
Furthermore, after the recovery process is performed, the certificate revocation registration unit 33 succeeds in the revocation request acquisition process by the revocation request acquisition unit 331 and the revocation registration process by the certificate registration unit 333. Repeat a predetermined number of times. If the revocation registration process is not successful even after repeating a predetermined number of times, the certificate revocation registration unit 33 outputs a message notifying that the revocation registration process has failed to the maintenance terminal 37.

When the certificate issuing unit 34 receives the revocation processing request from the certificate revocation registration unit 33, the revocation means 341 performs revocation processing of the corresponding electronic certificate.
[2. Operation]
Next, the operation of the electronic certificate management system 30 according to the present embodiment will be described with reference to FIGS. FIG. 2 is a flowchart showing the operation of the order processing unit 31, and FIG. 3 is a flowchart showing the operation of the certificate revocation registration unit 33.

  First, when the order processing unit 31 receives a service order from the external apparatus 10 by the order receiving unit 311 (F1-1 in FIG. 2), the profile management unit 312 changes (creates) the user profile based on the type of the service order. Update or delete) (F1-2), and record the user profile in the profile recording area 36 of the contract recording unit 32 (F1-3).

  Next, when the type of the service order received is “change of name” of the contractor or “succession” of the contractor (the type of service order is the first type with the revocation of the electronic certificate, and In the case of the second type involving contractor change) (F1-4; Yes), the order processing unit 31 adds the user profile of the corresponding contractor recorded in the profile recording area 36 by the profile management unit 312. The CommonName included is changed (F1-5), and the revocation request means 313 enqueues the revocation request into the revocation request queue 35 of the contract recording unit 32 (F1-6), and then the external device 10 that is the service order distribution source A message indicating that the service order process has been completed is transmitted (F1-8).

  On the other hand, when the type of service order received is “cancellation” of the communication service (the type of service order is the first type with the revocation of the electronic certificate and the second type with the contractor change) (F1-4; No, F1-7; Yes), the order processing unit 31 enqueues the revocation request into the revocation request queue 35 of the contract recording unit 32 by the revocation request unit 313 (F1-6). A message to the effect that the service order processing has been completed is transmitted to the external device 10 that is the distribution source of the service order (F1-8).

  If the service order type is neither “cancellation” of the communication service, “name change” of the contractor, or “succession” of the contractor (the service order type is the first with an electronic certificate revocation) If the type is neither the type nor the second type involving the change of the contractor) (F1-4; No, F1-7; No), the order processing unit 31 sends the order to the external device 10 that is the distribution source of the service order. A message indicating that the service order process has been completed is transmitted (F1-8).

The certificate revocation registration unit 33 periodically polls the revocation request monitoring unit 335 to monitor the revocation request queue 35 (F2-1 in FIG. 3). If a revocation request is queued in the revocation request queue 35 (F2-1; Yes), the revocation request acquisition unit 331 acquires the revocation request queued in the revocation request queue 35 and dequeues it (F2-2). ).
The certificate revocation registering unit 33 searches the user profile recorded in the profile recording area 36 by the certificate search unit 332 based on the extracted revocation request, so that the electronic certificate of the revocation request target is included in the user profile. It is confirmed whether or not the management information of the document exists (F2-3). When the management information of the electronic certificate exists (F2-3; Yes), the certificate revocation registration unit 33 performs revocation registration processing of the revocation request target electronic certificate by the certificate registration unit 333 (F2-4). ).

When the revocation registration process succeeds (F2-4; success), the certificate revocation registration unit 33 sends a revocation process request for the electronic certificate for which the revocation registration process has been performed by the revocation process request unit 336 to the certificate issuing unit 34. (F2-5).
When the certificate issuing unit 34 receives the revocation processing request, the revocation means 341 performs revocation processing of the electronic certificate.

  When the revocation registration process fails (F2-4; failure), the certificate revocation registration unit 33 performs the revocation request recovery process on the revocation request queue 35 by the revocation request recovery unit 334 (F2-6). . The certificate revocation registration unit 33 repeats the revocation request acquisition processing and revocation registration processing a predetermined number of times (n times; n is a natural number) until the revocation registration processing succeeds with respect to the recovered revocation request (F2-7). ). If the revocation registration process is not successful even after being repeated a predetermined number of times (F2-7; Yes), a message indicating that the revocation registration process has failed is output to the maintenance terminal 37 (F2-8).

As described above, various functions related to the electronic certificate such as revocation processing triggered by the service order of the communication service contract received from the external device 10 by the function of each component included in the electronic certificate management system 30. Can be executed automatically and reliably.
Accordingly, it is possible to prevent omission of revocation input by a communication service contractor or operator, processing error, processing delay, and the like. Therefore, unauthorized use of the electronic certificate can be prevented, and the processing burden on the communication service contractor and operator can be reduced. In addition, since the service order is input after strict identity verification is performed, high reliability of identity verification can be maintained.

Further, since the service order process and the electronic certificate revocation process can be performed asynchronously, the service order process can be continued without depending on the execution status of the electronic certificate revocation process.
In addition, when changing the contractor of a communication service such as name change or inheritance, the CommonName included in the digital certificate management information of the user profile is changed, so that the holder of the digital certificate and the contract name are uniquely bound. It becomes possible to manage. For this reason, it becomes possible to specify the user of an electronic certificate, and the reliability of an electronic certificate can be improved.

  In addition, the name of the service order classified into the first type accompanied by the revocation of the electronic certificate and the name of the service order classified as the second type accompanied by the contractor change described in the above-described embodiment are examples. However, it is appropriately changed according to the form of service and naming. Further, depending on the protocol of the electronic certificate, the holder identification information of the electronic certificate may have a name other than CommonName. In the above-described embodiment, an example of a line contract of a mobile device has been described as a “communication service contract”. However, the present invention is not limited to this, and a “communication service contract” is a personal computer connected to the Internet. Any contract may be used as long as the contract is for a communication terminal with a contract such as a computer or a fixed telephone.

  Further, in the flowchart shown in FIG. 2 of the above-described embodiment, the user profile change process other than the CommonName change process is performed in F1-2, and the CommonName change process is performed in F1-5. For example, user profile change processing including CommonName change processing may be performed in F1-2. In the flowchart shown in FIG. 2 of the above-described embodiment, after the CommonName change process in F1-5, the revocation request is enqueued in the revocation request queue in F1-6, but between F1-5 and F1-6 It is also possible to reverse the processing order.

  The present invention can be used for electronic certificate management linked to a service order for a communication service contract.

It is a block diagram of the electronic certificate management system which concerns on embodiment of this invention. It is a flowchart which shows operation | movement of the order process part of the electronic certificate management system which concerns on the embodiment. It is a flowchart which shows operation | movement of the certificate revocation registration part of the electronic certificate management system which concerns on the embodiment. It is a figure which shows the outline | summary of the conventional revocation process.

Explanation of symbols

30 Electronic certificate management system 31 Order processing unit 311 Order receiving unit 312 Profile management unit 313 Revocation request unit 32 Contract recording unit 35 Revocation request queue 36 Profile recording area 33 Certificate revocation registration unit 331 Revocation request acquisition unit 332 Certificate search unit 333 Certificate registration unit 334 Revocation request recovery unit 335 Revocation request monitoring unit 336 Revocation processing request unit 34 Certificate issuing unit 341 Revocation unit 37 Maintenance terminal 10 External device

Claims (5)

In an electronic certificate management system that manages electronic certificates,
The electronic certificate management system includes a contract recording unit, an order processing unit, a certificate revocation registration unit, and a certificate issuing unit.
The contract recording unit includes a profile recording area for recording a user profile including contract information of a communication service and management information of the electronic certificate,
A revocation request queue for queuing digital certificate revocation requests;
The order processing unit includes order receiving means for receiving a service order for a communication service contract from an external device;
Profile management means for changing the user profile recorded in the profile recording area based on the service order received by the order receiving means;
Revocation requesting means for enqueuing a revocation request for the corresponding electronic certificate in the revocation request queue when the service order received by the order receiving means is the first type of service order accompanied by revocation of the electronic certificate; With
The certificate revocation registration unit includes a revocation request acquisition unit that acquires a revocation request queued in the revocation request queue.
Certificate search means for confirming whether or not the management information of the electronic certificate subject to the revocation request is recorded in the profile recording area based on the revocation request acquired by the revocation request acquisition means;
A certificate registration unit that performs revocation registration processing of the revocation request target electronic certificate when it is confirmed that the management information is recorded by the certificate search unit;
Revocation processing requesting means for requesting revocation of an electronic certificate subjected to revocation registration processing by the certificate registration means,
The electronic certificate management system, wherein the certificate issuing unit includes revocation means for performing revocation processing of an electronic certificate that has been requested to be revoked by the revocation processing request means. The order processing unit includes:
When the service order received by the order receiving means is the first type of service order,
After the user profile is deleted or updated by the profile management means, and the revocation request means has successfully enqueued the revocation request to the revocation request queue, a message to the effect that service order processing has been completed is sent to the external To the device,
When the service order received by the order receiving means is other than the first type of service order,
The electronic certificate management system according to claim 1, wherein after creating or updating the user profile by the profile management unit, a message indicating that service order processing has been completed is transmitted to the external device. The certificate revocation registration unit
The electronic certificate management system according to claim 1, further comprising: a revocation request monitoring unit that monitors revocation requests queued in the revocation request queue by polling the revocation request queue. The certificate revocation registration unit
Revocation request recovery means for performing recovery processing of the revocation request acquired from the revocation request queue when the revocation registration processing by the certificate registration means fails,
The revocation request acquisition by the revocation request acquisition unit and the revocation registration process by the certificate registration unit are repeated a predetermined number of times until the revocation registration process is successful, and the revocation registration process is not successful even after repeating the predetermined number of times. The electronic certificate management system according to any one of claims 1 to 3, wherein a message to that effect is output. The management information of the electronic certificate includes holder identification information for identifying the holder of the electronic certificate,
The profile management means includes
5. The holder identification information is changed when the service order received by the order receiving means is a second type of service order accompanied by a contractor change. 6. Electronic certificate management system described in 1.

Images