JP2007066133A - Access management system and method therefor - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an access management system capable of performing flexible access control by a comparatively light management responsibility. <P>SOLUTION: A document processor 18 includes a context acquisition part which acquires context regarding a document or service, a context identifier generation part which generates a context identifier of the context to be acquired and a context storage device 16 stores the context. A capability issuance device 14 generates key information from the context identifier to be acquired by the context identifier generation part. The document processor 18 also includes a context identifier acquisition part which acquires the context identifier from a user, a verification part which verifies possession of the key information generated by the key information generation part by the user corresponding to the acquired context identifier and a processing part which performs processing regarding the context concerning the context identifier to be acquired according to verification results. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to an access management system and an access management method, and more particularly to an access management system and an access management method that can reduce a management burden.

A system that generates a hash value of an electronic document and uses the hash value as access credential information (capability (electronic permit)) for the document is described in Patent Document 1 below. In this system, it is determined that the person who has the hash value is a person who has access qualification, and the person is allowed to access the document. In this way, in the system described in Patent Document 1 below, access restriction to a document is realized without requiring special user management.
Japanese Patent Laid-Open No. 2004-246736

  In the above system, all persons who have a hash value as access qualification information can access a document corresponding to the hash value equally. Therefore, if the access control for the document is to be performed in detail, it is necessary to separately set an access right for each user based on user authentication using a user ID and a password. However, implementation of such user authentication and access right setting is generally complicated.

  The present invention has been made in view of the above problems, and an object thereof is to provide an access management system and an access management method capable of flexible access control with a relatively light management burden.

  In order to solve the above-described problem, an access management system according to the present invention includes a context acquisition unit that acquires a context including information about a document or a service, and a context identifier that generates a context identifier of the context acquired by the context acquisition unit. Generating means; context storing means for storing the context acquired by the context acquiring means; key information generating means for generating key information from the context identifier acquired by the context identifier generating means; and the context identifier from the user. Context identifier acquisition means to be acquired, and possession by the user of the key information generated by the key information generation means corresponding to the context identifier acquired by the context identifier acquisition means Verifying means for verifying, and processing means for executing a process related to the context stored in the context storage means related to the context identifier acquired by the context identifier acquiring means in accordance with the verification result by the verification means. It is characterized by.

  The access management method according to the present invention includes a context acquisition step of acquiring a context including information on a document or a service, a context identifier generation step of generating a context identifier of the context acquired in the context acquisition step, and the context A context storing step for storing the context acquired in the acquiring step in a storage means, a key information generating step for generating key information from the context identifier acquired in the context identifier generating step, and a context for acquiring the context identifier from a user By the user of the key information generated in the key information generation step corresponding to the context identifier acquired in the identifier acquisition step and the context identifier acquisition step. A verification step for verifying possession, and a processing step for executing processing related to the context stored in the storage unit according to the context identifier acquired in the context identifier acquisition step according to the verification result in the verification step; It is characterized by including.

  According to the present invention, key information is generated from a context identifier. When the user possesses this key information, processing related to the context related to the corresponding context identifier, for example, processing such as service execution, document printing, transmission, and display is executed. According to the present invention, since key information is generated from a context identifier and is used as a capability, flexible access control can be performed with a relatively light management burden.

  In one aspect of the present invention, the key information generation unit uses a context identifier generated by the context identifier generation unit and a private key having the context identifier as a public key as the key information based on a predetermined secret parameter. Generating and verifying by the user of the private key that is the key information based on the context identifier acquired by the context identifier acquiring unit and a public parameter corresponding to the predetermined secret parameter Verify possession. According to this aspect, extremely secure access management can be realized using an ID-based public key cryptosystem such as a Guillou-Quisquater protocol.

  Moreover, in one aspect of the present invention, the output unit stores the context content related to the context identifier acquired by the context identifier acquisition unit stored in the context storage unit when a predetermined condition is satisfied. An output related to a document or a service related to information included in the context is performed. According to this aspect, it is possible to realize very flexible access control by appropriately setting the content of the context.

  Hereinafter, an embodiment of the present invention will be described in detail with reference to the drawings.

  FIG. 1 is a diagram showing a configuration of an access management system according to an embodiment of the present invention. As shown in FIG. 1, the access management system 10 includes an electronic card 12, a capability issuing device 14, a context storage device 16, and a document processing device 18. The electronic card 12 includes a CPU, a memory, and an RFID communication unit, and can perform short-range wireless communication with the capability issuing device 14 and the document processing device 18 by the RFID method. Then, predetermined data calculation can be executed, data can be transmitted to the capability issuing device 14 and the document processing device 18, or data can be received and stored in the memory. The short-range wireless communication method is not limited to RFID, and may be, for example, Bluetooth (registered trademark).

  The document processing device 18 is means for executing various types of document processing, and is configured mainly with a computer. In particular, when the document processing apparatus 18 generates a document, it generates a context related to the document and generates an identifier thereof, that is, a context identifier. The context may be the document itself or an identifier thereof (for example, a hash value of the document), or may be other information added thereto. The other information includes, for example, a document generation date and time, a date and time indicating a time limit for processing such as document output, authority to execute processing such as document output, another related document or an identifier thereof. The context identifier is a hash value of the context here. In the document processing device 18, contexts are generated and acquired in this way, and when identifiers are generated, they are stored in association with the context storage device 16, and in particular, the context identifier is transmitted to the electronic card 12. The document processing device 18 includes an RFID reader / writer in order to exchange such data with the electronic card 12.

  The electronic card 12 receives the context identifier transmitted from the document processing device 18 and stores it in the memory. Thereafter, it is transmitted to the capability issuing device 14. The capability issuing device 14 is configured by a computer, for example, and includes an RFID reader / writer. When a context identifier is received from the electronic card 12, key information is generated therefrom. Here, in order to implement three-way communication authentication according to the Guillou-Quisquater protocol, a private key having a context identifier as a public key is generated as key information (capability) and transmitted to the electronic card 12. . Thus, the electronic card 12 stores the private key corresponding to the context identifier in the memory. That is, the access management system 10 calculates the product n (= p × q) using two arbitrary prime numbers p and q, and is mutually prime with (p−1) × (q−1). Select e (> 4). Then, d is calculated according to the following equation (1).

  When the secret parameter (n, d) and the public parameter (n, e) paired therewith are determined in this way, the secret parameter is stored in the capability issuing device 14, and the public parameter is stored in the document processing device 18. The public parameter is also stored in the electronic card 12 as necessary.

  Thereafter, when a context identifier is transmitted from the electronic card, the private key t is calculated according to the following equation (2) using the value as the public key a. This private key t is transmitted to the electronic card 12 and stored.

  A user who holds the electronic card 12 holds the electronic card 12 over the RFID reader / writer of the document processing device 18 to perform processing such as printing, transmission, and display using a certain document. Then, the electronic card 12 transmits a context identifier related to the document requiring processing to the document processing device 18. Between the electronic card 12 and the document processing device 18, using the private key t stored in the electronic card 12, the witness shown in the following formula (3), the challenge by the random number c, and the following formula (4) After exchanging the response, the success / failure of the following formula (5) is determined, and thereby, the three-way authentication according to the Guillou-Quisquater protocol is performed. Note that k is a random number.

  In this way, the document processing device 18 determines whether or not the processing request is from the electronic card 12 holding the private key t. If so, the processing based on the context corresponding to the context identifier read from the context storage device 16 is performed. Execute. That is, processing such as printing using a document included in the context, or processing such as printing using a document identified by an identifier included in the context is executed. On the other hand, if the processing request is not from the electronic card 12 holding the private key t, such processing is not executed.

  Hereinafter, the configuration of each unit of the access management system 10 will be described in more detail. FIG. 2 is a functional block diagram of the document processing apparatus 18. As shown in the figure, the document processing device 18 functionally includes a context acquisition unit 18a, a context identifier generation unit 18b, a context identifier acquisition unit 18c, a verification unit 18d, and a document processing unit 18e. These functions are realized by a predetermined computer program being executed by the document processing apparatus 18 including a computer.

  First, the context acquisition unit 18a acquires a context regarding a document to be accessed. Then, the context identifier generation unit 18b generates a hash value of the context acquired in this way as a context identifier. The generated context identifier is transmitted to the context storage device 16 together with the original context, and the two are stored in association with each other as shown in FIG.

  The context identifier acquisition unit 18 c receives the context identifier from the electronic card 12. Then, the document processing unit 18e executes a process related to the context stored in the context storage device 16 in association with the context identifier. At this time, the verification unit 18d performs verification with the electronic card 12 by the three-communication authentication method, and the key information (private key t) regarding the context identifier acquired by the context identifier acquisition unit 18c is surely stored in the electronic card 12. Verify whether it is stored. When the document processing unit 18e determines that the key information is stored in the electronic card 12, the document processing unit 18e executes processing such as printing related to the context. On the other hand, when the document processing unit 18e determines that the key information is not stored, Do not execute processing such as printing related to the context.

  FIG. 4 is a functional block diagram of the capability issuing device 14. As shown in the figure, the capability issuing device 14 functionally includes a context identifier acquisition unit 14a, a key information generation unit 14b, and a key information transmission unit 14c. These functions are realized by a predetermined computer program being executed by the capability issuing device 14 including a computer. The context identifier acquisition unit 14 a receives a context identifier from the electronic card 12. In the key information generation unit 14b, the private key t having the received context identifier as the public key a is calculated by the above equation (2). Then, the key information transmission unit 14 c transmits the calculated private key t to the electronic card 12.

  Here, an access management procedure by the access management system 10 will be described.

  FIG. 5 is a flowchart showing capability issuing processing in the capability issuing device 14. As shown in the figure, in the capability issuing device 14, when the electronic card 12 holding the context identifier transmitted from the document processing device 18 is held over the RFID reader / writer of the capability issuing device 14, the context identifier is determined therefrom. Is received (S101). Then, the private key t having the received context identifier as the public key a is calculated by the above equation (2) (S102), and the calculated private key t is returned to the electronic card 12 (S103).

  Next, FIG. 6 is a flowchart showing document processing in the document processing apparatus 18. When processing such as printing of a document, the user holds the electronic card 12 storing the context identifier related to the document and the private key t generated based on the context identifier over the RFID reader / writer of the document processing device 18. . Thus, the document processing device 18 receives the context identifier from the electronic card 12 (S201). Next, the electronic card generates a random number k and transmits the witness w shown in the above equation (3) to the document processing device 18. The document processing apparatus 18 receives the witness w thus transmitted (S202). Here, the document processing device 18 determines whether or not the context associated with the context identifier received in S201 is stored in the context storage device 16 (S203). If not stored, the process is terminated.

  On the other hand, if stored, the context is received from the context storage device 16, and it is determined whether or not the content satisfies a predetermined condition (S204). That is, as described above, the context stored in the context storage device 16 includes information such as the document generation date and time. In the process of S204, a predetermined time has elapsed from the document generation date and time to the present. Check whether or not. If the content of the context does not satisfy the predetermined condition, the document processing is also terminated.

  On the other hand, if the content of the context satisfies the predetermined condition, a random number is next generated (S205), and the value is transmitted as a challenge c to the electronic card 12 (S206). The electronic card 12 receives this challenge c, generates a response R shown in the above equation (4) using the value, and returns it to the document processing device 18. The document processing apparatus 18 receives this response R (S207), and determines whether or not the private key t corresponding to the context identifier received in S201 is stored in the electronic card 12 (S208). If it is determined that it is stored, processing such as printing of a document included in the context is executed based on the context associated with the context identifier received in S201 (S210). On the other hand, if it is determined that the private key t is not stored in the electronic card 12, the process of S210 is skipped and the process ends.

  According to the above embodiment, the context identifier is set as the public key a, and the private key t corresponding to the public key a is generated and stored in the electronic card 12 as a capability. Access management for documents (including documents) can be realized.

  The present invention is not limited to the above embodiment. For example, in the above description, the document processing apparatus 18 processes the document. However, the capability is issued for the execution of various services, and the service is limitedly executed for a user who possesses the capability. You may do it. In the above description, both the document generation and output are performed by the document processing device 18, but a distributed environment may be constructed by generating and outputting the document by another device. In this case, the device that generates the document may generate the context and its identifier and store them in the context storage device 16. The key information may be verified by a device that outputs a document.

It is a block diagram of the access management system which concerns on embodiment of this invention. It is a functional block diagram of a document processing apparatus. It is a figure which shows the memory content of a context memory | storage device. It is a functional block diagram of a capability issuing device. It is a flowchart which shows a capability issuing process. It is a flowchart which shows document processing.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 10 Access management system, 12 Electronic card, 14 Capability issue apparatus, 14a, 18c Context identifier acquisition part, 14b Key information generation part, 14c Key information transmission part, 16 Context storage apparatus, 18 Document processing apparatus, 18a Context acquisition part, 18b Context identifier generation unit, 18d verification unit, 18e document processing unit, 20 LAN.

Claims (4)

A context acquisition means for acquiring a context relating to a document or service;
A context identifier generating means for generating a context identifier of the context acquired by the context acquiring means;
Context storage means for storing the context acquired by the context acquisition means;
Key information generating means for generating key information from the context identifier acquired by the context identifier generating means;
A context identifier acquisition means for acquiring the context identifier from a user;
Verification means for verifying possession by the user of the key information generated by the key information generation means corresponding to the context identifier acquired by the context identifier acquisition means;
Processing means for executing a process related to a context stored in the context storage means according to a context identifier acquired by the context identifier acquisition means in accordance with a verification result by the verification means;
An access management system comprising: The access management system according to claim 1,
The key information generation unit generates a private key with the context identifier as a public key as the key information based on the context identifier generated by the context identifier generation unit and a predetermined secret parameter,
The verification unit verifies possession by the user of the private key that is the key information based on the context identifier acquired by the context identifier acquisition unit and a public parameter corresponding to the predetermined secret parameter. ,
An access management system characterized by that. In the access management system according to claim 1 or 2,
The output unit is a document related to information included in the context when the content of the context related to the context identifier acquired by the context identifier acquisition unit stored in the context storage unit satisfies a predetermined condition. Or output about the service,
An access management system characterized by that. A context acquisition step for acquiring a context containing information about the document or service;
A context identifier generation step for generating a context identifier of the context acquired in the context acquisition step;
A context storage step of storing in the storage means the context acquired in the context acquisition step;
A key information generating step for generating key information from the context identifier acquired in the context identifier generating step;
A context identifier obtaining step for obtaining the context identifier from a user;
A verification step for verifying possession by the user of the key information generated in the key information generation step corresponding to the context identifier acquired in the context identifier acquisition step;
A processing step for executing a process related to the context stored in the storage unit according to the context identifier acquired in the context identifier acquisition step according to the verification result in the verification step;
An access management method comprising:

Images