JP2007334674A - Access control system, and service request node and service provision node suitable for access control system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an access control system capable of simply executing processing for acquiring an approval certificate even when a service request node and a service provision node are of one-many relation, and a service request node and a service provision node suitable for the access control system. <P>SOLUTION: The service request node 10 has a communication part 11 that transmits approval information and a node authorization code issued by a certificate issuing server to a plurality of service provision nodes. When a service is used, transmits a node authorization code to one of the plurality of the service provision nodes 30. The service provision node 30 has an approval certificate verification part 33 for determining whether to provide the service to the service request node 10 based on the approval information corresponding to the node authorization code received from the service request node 10. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to an access control system that restricts the use of a service by using an authorization certificate that proves that the use of the service is permitted, and a service requesting node and a service providing node suitable for use in the access control system.

  2. Description of the Related Art Conventionally, a node that requests use of a service (hereinafter referred to as a service request node), a certificate issuing server that has an authorization certificate issuing unit that issues an authorization certificate that certifies that use of the service is permitted, and a service In a distributed network including nodes to be provided (hereinafter referred to as service providing nodes), the following distributed authentication method and distributed access control method have been applied (for example, Non-Patent Document 1).

  Specifically, the service request node requests the certificate issuing server for an authentication certificate that proves that the access to the above-described authorization certificate issuing unit has been authenticated. Further, the service request node generates a node authenticator based on the node identifier for identifying the service request node and the current time in order to ensure that it is new transmission information.

  Subsequently, the service request node transmits a desired service name, a node authenticator, and an authentication certificate to the authorization certificate issuing unit of the certificate issuing server, and the above-described authorization certificate is sent to the certificate issuing server authorization certificate. Obtain from the issuing department.

  Further, the service request node transmits the above-described node authenticator and authorization certificate to one service providing node and receives provision of a desired service from the one service providing node.

  In each process described above, information transmitted and received between the nodes is encrypted as necessary using a temporary use key, a shared secret key, or the like.

As described above, in the conventional distributed authentication method and distributed access control method, distributed authentication and distributed access control are performed on the assumption that the service request node and the service providing node have a one-to-one relationship.
“The Network Authentication Protocol”, [online], [searched on January 13, 2006], Internet <URL: http://web.mit.edu/kerberos/www/>

  On the other hand, nodes that function as service providing nodes are not limited to home appliances and PCs, and it is assumed that various sensors, furniture, walls, tableware, clothes, and the like function as service providing nodes. In such a case, it is assumed that the service request node and the service providing node have a one-to-many relationship instead of a one-to-one relationship.

  However, when the service request node and the service providing node have a one-to-many relationship, when the service request node receives a service provided from the plurality of service providing nodes, the service request node and the service providing node correspond to each of the plurality of service providing nodes. Since the certificate has to be acquired, the processing related to the acquisition of the authorization certificate is complicated. Further, since the service request node has to manage the authorization certificate corresponding to each of the plurality of service providing nodes, the management of the authorization certificate is complicated. Furthermore, since the service request node must transmit an authorization certificate to each of the plurality of service providing nodes, the communication cost for transmitting the authorization certificate increases.

  Therefore, the present invention has been made to solve the above-described problem, and even when the service request node and the service providing node have a one-to-many relationship, the processing and authorization for obtaining the authorization certificate To provide an access control system capable of simplifying certificate management and suppressing communication costs related to transmission of an authorization certificate, and a service request node and a service providing node suitable for use in the access control system With the goal.

  The first feature of the present invention is that a service request node (service request node 10) that requests the use of a service and authorization information (authorization information (Tc: s) or authorization certificate) indicating that the use of the service is permitted. An access control system (access control) including a certificate issuing server (certificate issuing server 20) for generating a certificate ({Tc: s} Ks) and a plurality of service providing nodes (service providing node 30) for providing the service In the system 100), the service request node transmits a node authenticator including at least the authorization information generated by the certificate issuing server and a node identifier for identifying the service request node to the plurality of service providing nodes. When requesting the use of the service with the authorization information transmission unit (communication unit 11), the plurality of A node authenticator transmitting unit (communication unit 11) that transmits the node authenticator to any one of the service providing nodes, and the service providing node receives the node authenticator transmitting unit of the service request node. The gist of the invention is that it includes a service provision determination unit (authorization certificate verification unit 33) that determines whether to provide the service to the service request node based on the authorization information corresponding to a node authenticator.

  According to this feature, the authorization information transmission unit transmits the node authenticator and the authorization information to a plurality of service providing nodes.

  That is, since the authorization information is information common to a plurality of service providing nodes, it is not necessary for the service request node to obtain the authorization information corresponding to each of the plurality of service providing nodes, and the processing related to obtaining the authorization information is simplified. Can be. Further, it is not necessary for the service request node to manage the authorization information corresponding to each of the plurality of service providing nodes, and the processing related to the management of the authorization information can be simplified.

  Furthermore, since each of the plurality of service providing nodes holds the authorization information, it is not necessary to send the authorization information again when the service request node receives provision of the desired service, and the communication cost for transmitting the authorization information is eliminated. Can be suppressed.

  A second feature of the present invention is that, in the first feature of the present invention, the service providing node associates the node authenticator received from the authorization information transmission unit of the service request node with the authorization information. An authorization information holding unit (authorization certificate holding unit 34) to hold, and an authorization information holding for determining whether or not the authorization information received from the authorization information transmitting unit of the service request node is held in the authorization information holding unit The gist is to further include a determination unit (authorization certificate holding determination unit 36).

  According to a third aspect of the present invention, in the second aspect of the present invention, the authorization information corresponding to the node authenticator received by the service providing node from the node authenticator transmission unit of the service request node is the A gist of further comprising an authorization information request unit (communication unit 31) for requesting the authorization information corresponding to the node authenticator to another service providing node when the authorization information is not held in the authorization information holding unit. To do.

  According to a fourth aspect of the present invention, in the second aspect of the present invention, when the service providing node determines that the authorization information holding determination unit determines that the authorization information is held in the authorization information holding unit, The gist is to further include an authorization information holding notification unit (communication unit 31) for notifying a service providing node that the authorization information corresponding to the node authenticator is held.

  A fifth feature of the present invention is that a certificate issuing server (certificate issuing server 20) that generates authorization information indicating that use of a service is permitted, and a plurality of service providing nodes (service providing) that provide the service A service request node (service request node 10) for requesting the use of the service, the authorization information generated by the certificate issuing server, and an access control system (access control system 100) including the node 30) An authorization information transmission unit (communication unit 11) for transmitting a node authenticator including at least a node identifier for identifying the service request node to the plurality of service providing nodes; A node authenticator transmission unit that transmits the node authenticator to any of the service providing nodes ( And summarized in that it comprises a signal unit 11) and.

  A sixth feature of the present invention is that a service request node (service request node 10) requesting use of a service and a certificate issuing server (certificate issuing) that generates authorization information indicating that use of the service is permitted. The service providing node (service providing node 30) used in the access control system (access control system 100) including the server 20) provides the service, and the authorization information and the service generated by the certificate issuing server. The authorization information receiving unit (communication unit 31) that receives from the service request node a node authenticator including at least a node identifier for identifying the request node, and the node authenticator received from the service request node and the authorization information An authorization information holding unit (authorization certificate holding unit 34) to be attached and the service An authorization information holding judgment unit (authorization certificate holding judgment unit 36) for judging whether or not the authorization information received from the requesting node is held in the authorization information holding unit; and the node authenticator received from the service request node And a service provision determination unit (authorization certificate verification unit 33) that determines whether or not to provide the service to the service request node based on the authorization information corresponding to.

  According to a seventh aspect of the present invention, in the sixth aspect of the present invention, the service providing node includes the node authenticator received from the service request node when the service request node requests use of the service. When the corresponding authorization information is not held in the authorization information holding unit, an authorization information requesting unit (communication unit 31) that requests the authorization information corresponding to the node authenticator from another service providing node. Is further provided.

  An eighth feature of the present invention is that, in the sixth feature of the present invention, when the service providing node determines that the authorization information holding determination unit determines that the authorization information is held in the authorization information holding unit, another service is provided. The gist is to further include an authorization information holding notification unit (communication unit 31) for notifying the providing node that the authorization information corresponding to the node authenticator is held.

  According to the present invention, even when the service request node and the service providing node are in a one-to-many relationship, the processing for obtaining the authorization certificate and the management of the authorization certificate are simplified, and the authorization certificate It is possible to provide an access control system capable of suppressing communication costs related to transmission, and a service request node and a service providing node suitable for use in the access control system.

[First Embodiment]
(Configuration of access control system)
Hereinafter, the configuration of the access control system according to the first embodiment of the present invention will be described with reference to the drawings. FIG. 1 is a diagram showing an access control system 100 according to the first embodiment of the present invention.

  As shown in FIG. 1, the access control system 100 includes a service request node 10, a certificate issuing server 20, and a plurality of service providing nodes 30 (service providing nodes 30a to 30c).

  The service request node 10 is a node that requests use of a service. Specifically, the service request node 10 is provided with a desired service by presenting the authorization certificate issued by the certificate issuing server 20 to the service providing node 30. Details of the service request node 10 will be described later (see FIG. 2).

  The certificate issuing server 20 issues an authorization certificate that proves that the use of the service is permitted. Details of the certificate issuing server 20 will be described later (see FIG. 3).

  The service providing node 30 is a node that provides a service to the service request node 10. For example, the service providing node 30 is a home appliance or PC having a communication function, and may be various sensors, furniture, walls, tableware, clothes, and the like including an IC chip having a communication function. Details of the service providing node 30 will be described later (see FIG. 4).

(Service request node configuration)
The configuration of the service request node according to the first embodiment of the present invention will be described below with reference to the drawings. FIG. 2 is a block diagram showing the service request node 10 according to the first embodiment of the present invention.

  As illustrated in FIG. 2, the service request node 10 includes a communication unit 11, a key management unit 12, a certificate verification unit 13, and an authenticator holding unit 14.

  The communication unit 11 performs communication between the service request node 10 and the certificate issuing server 20. Specifically, the communication unit 11 includes a node identifier (c) for identifying the service request node 10, an authorization certificate issuing unit identifier (tgs) for identifying an authorization certificate issuing unit 24 of the certificate issuing server 20 described later, The encrypted node authenticator ({Ac} kc: tgs), the authentication certificate ({Tc: tgs} Ktgs), and the desired service name (s) are transmitted to the certificate issuing server 20. On the other hand, the communication unit 11 includes an encrypted temporary use key ({Kc: tgs} Kc), an authentication certificate ({Tc: tgs} Ktgs), and an encrypted temporary use key ({Kc: s} Kc: tgs). The authorization certificate ({Tc: s} Ks) is received from the certificate issuing server 20.

  The communication unit 11 performs communication between the service request node 10 and the service providing node 30. Specifically, the communication unit 11 transmits the encrypted node authenticator ({Ac} kc: s) and the authorization certificate ({Tc: s} Ks) to the plurality of service providing nodes 30. For example, the communication unit 11 transmits an encrypted node authenticator ({Ac} kc: s) and an authorization certificate ({Tc: s} Ks) by broadcast. In addition, the communication unit 11 transmits the node authenticator (Ac) and the desired service name (s) to any one of the plurality of service providing nodes 30.

  The key management unit 12 holds a shared secret key (Kc) shared between an authentication certificate issuing unit 23 of the certificate issuing server 20 described later and the service request node 10.

  Further, the key management unit 12 holds a primary usage key (Kc: s) that is temporarily used between the service request node 10 and the service providing node 30. Specifically, the key management unit 12 decrypts the encrypted temporary use key ({Kc: tgs} Kc) received from the certificate issuing server 20 with the shared secret key (Kc), and the temporary use key (Kc: tgs). Next, the key management unit 12 decrypts the encrypted temporary use key ({Kc: s} Kc: tgs) received from the certificate issuing server 20 with the temporary use key (Kc: tgs), and then uses the temporary use key (Kc). : S) and holds the acquired temporary use key (Kc: s).

  The certificate verification unit 13 verifies the validity of the authorization certificate ({Tc: s} Ks) received from the certificate issuing server 20. Specifically, the certificate verification unit 13 decrypts the encrypted temporary use key ({Kc: tgs} Kc) received from the certificate issuing server 20 with the shared secret key (Kc), and the temporary use key (Kc). : Tgs). Next, the certificate verification unit 13 requests the issuance of the authorization certificate issuing unit identifier (tgs) included in the temporary use key (Kc: tgs) and the authorization certificate ({Tc: s} Ks). It is verified whether or not the authorization certificate issuing unit identifier (tgs) of the issuing unit 24 matches. Further, the certificate verification unit 13 decrypts the encrypted temporary use key ({Kc: s} Kc: tgs) received from the certificate issuing server 20 with the temporary use key (Kc: tgs), and the temporary use key ( Kc: s) is acquired. Next, the certificate verification unit 13 verifies whether the service name (s) included in the temporary use key (Kc: s) matches the desired service name (s).

  The authenticator holding unit 14 is a node necessary for transmitting the encrypted node authenticator ({Ac} kc: s) and the authorization certificate ({Tc: s} Ks) to the plurality of service providing nodes 30. Holds the authenticator (Ac). Specifically, the authenticator holding unit 14 generates a node authenticator (Ac) based on the node identifier for identifying the service request node 10 and the current time, and holds the generated node authenticator (Ac).

(Configuration of certificate issuing server)
The configuration of the certificate issuing server according to the first embodiment of the present invention will be described below with reference to the drawings. FIG. 3 is a block diagram showing the certificate issuing server 20 according to the first embodiment of the present invention.

  As illustrated in FIG. 3, the certificate issuing server 20 includes a communication unit 21, a key management unit 22, an authentication certificate issuing unit 23, and an authorization certificate issuing unit 24.

  The communication unit 21 performs communication between the certificate issuing server 20 and the service request node 10. Specifically, the communication unit 21 uses the encrypted temporary use key ({Kc: tgs} Kc), the authentication certificate ({Tc: tgs} Ktgs), and the encrypted temporary use key ({Kc: s} Kc). : Tgs) and an authorization certificate ({Tc: s} Ks) are transmitted to the service request node 10. On the other hand, the communication unit 21 includes a node identifier (c) for identifying the service request node 10, an authorization certificate issuing unit identifier (tgs) for identifying the authorization certificate issuing unit 24, and an encrypted node authenticator ({Ac} kc). : Tgs), an authentication certificate ({Tc: tgs} Ktgs), and a desired service name (s) are received from the service request node 10.

  The key management unit 22 holds a shared secret key (Kc) shared between the authentication certificate issuing unit 23 and the service request node 10. The key management unit 22 holds a shared secret key (Ktgs) shared between the authentication certificate issuing unit 23 and the authorization certificate issuing unit 24.

  Further, the key management unit 22 holds a shared secret key (Ks) shared between the authorization certificate issuing unit 24 and the service providing node 30. Further, the key management unit 22 generates a temporary use key (Kc: tgs) that is temporarily used between the authorization certificate issuing unit 24 and the service request node 10, and the generated temporary use key (Kc: tgs).

  The authentication certificate issuing unit 23 issues an authentication certificate ({Tc: tgs} Ktgs) that proves that the service request node 10 is permitted to access the authorization certificate issuing unit 24. Specifically, the authentication certificate issuing unit 23 generates authentication information (Tc: tgs) that permits the service request node 10 to access the authorization certificate issuing unit 24, and the generated authentication information (Tc: tgs) is encrypted with the shared secret key (Ktgs) to obtain an authentication certificate ({Tc: tgs} Ktgs).

  The authorization certificate issuing unit 24 issues an authorization certificate ({Tc: s} Ks) that proves that use of a desired service is authorized. Specifically, the authorization certificate issuing unit 24 generates authorization information (Tc: s) for authorizing use of a desired service, and uses the generated authorization information (Tc: s) with the shared secret key (Ks). Encrypt and obtain an authorization certificate ({Tc: s} Ks).

(Service providing node configuration)
The configuration of the service providing node according to the first embodiment of the present invention will be described below with reference to the drawings. FIG. 4 is a block diagram showing the service providing node 30 according to the first embodiment of the present invention.

  As illustrated in FIG. 4, the service providing node 30 includes a communication unit 31, a key management unit 32, an authorization certificate verification unit 33, an authorization certificate holding unit 34, and a service providing unit 35.

  The communication unit 31 performs communication between the service providing node 30 and the service request node 10. Specifically, the communication unit 31 receives the encrypted node authenticator ({Ac} kc: s) and the authorization certificate ({Tc: s} Ks) transmitted by broadcast. The communication unit 31 receives the node authenticator (Ac) and the desired service name (s).

  The key management unit 32 holds a shared secret key (Ks) shared between the service providing node 30 and the authorization certificate issuing unit 24 of the certificate issuing server 20. Further, the key management unit 32 holds a temporary use key (Kc: s) that is temporarily used between the service request node 10 and the service providing node 30.

  The authorization certificate verification unit 33 provides a desired service to the service request node 10 by verifying the validity of the authorization certificate ({Tc: s} Ks) held in the authorization certificate holding unit 34. It is determined whether or not. Specifically, the authorization certificate verification unit 33 decrypts the encrypted node authenticator ({Ac} Kc: s) received from the service request node 10 with the temporary use key (Kc: s), and performs node authentication. A child (Ac) is acquired. Next, the authorization certificate verification unit 33 verifies whether or not a node authentication code (Ac) that matches the acquired node authentication code (Ac) is held in the authorization certificate holding unit 34. Further, the authorization certificate verification unit 33 decrypts the authorization certificate ({Tc: s} Ks) received from the service request node 10 with the shared secret key (Ks), and obtains authorization information (Tc: s). . Next, the authorization certificate verification unit 33 holds the authorization certificate (Tc: s) corresponding to the acquired authorization information (Tc: s) in association with the acquired node authenticator (Ac). It is verified whether it is held in the unit 34.

  The authorization certificate holding unit 34 holds the node authenticator (Ac) and the authorization certificate ({Tc: s} Ks) in association with each other. Specifically, the authorization certificate holding unit 34 decrypts the encrypted node authenticator ({Ac} Kc: tgs) received from the service request node 10 with the temporary use key (Kc: tgs), and decrypts the node authenticator. (Ac) is acquired, and the node authenticator (Ac) and the authorization certificate ({Tc: s} Ks) are stored in association with each other.

  The authorization certificate holding unit 34 decrypts the authorization certificate ({Tc: s} Ks) with the shared secret key (Ks) to further obtain authorization information (Tc: s), and obtains a node authenticator (Ac). And authorization information (Tc: s) may be held in association with each other.

  When the authorization certificate verification unit 33 verifies that the authorization certificate ({Tc: s} Ks) is valid, the service providing unit 35 provides the desired service requested from the service request node 10 as a service. Provide to request node 10.

(Access control system operation)
The operation of the access control system according to the first embodiment of the present invention will be described below with reference to the drawings. FIG. 5 is a sequence diagram showing an operation of the access control system 100 according to the first embodiment of the present invention.

  As shown in FIG. 5, in step 10, the service request node 10 has a node identifier (c) for identifying the service request node 10 and an authorization certificate issuing unit for identifying the authorization certificate issuing unit 24 of the certificate issuing server 20. The identifier (tgs) is transmitted to the authentication certificate issuing unit 23 of the certificate issuing server 20.

  In step 11, the authentication certificate issuing unit 23 of the certificate issuing server 20 uses a temporary use key (Kc: tgs) temporarily used between the service request node 10 and the authorization certificate issuing unit 24 as a service. Encryption is performed using a shared secret key (Kc) shared between the request node 10 and the authentication certificate issuing unit 23.

  In addition, the authentication certificate issuing unit 23 sends authentication information (Tc: tgs) for authorizing the service request node 10 to access the authorization certificate issuing unit 24, and the authentication certificate issuing unit 23 and the authorization certificate issuing unit 24. To generate an authentication certificate ({Tc: tgs} Ktgs) that proves that access to the authorization certificate issuing unit 24 is authorized. .

  Further, the authentication certificate issuing unit 23 transmits the encrypted temporary use key ({Kc: tgs} Kc) and the authentication certificate ({Tc: tgs} Ktgs) to the service request node 10.

  In step 12, the service request node 10 generates a node authenticator (Ac) using the node identifier for identifying the service request node 10 and the current time. Further, the service request node 10 decrypts the encrypted temporary use key ({Kc: tgs} Kc) with the shared secret key (Kc), and acquires the temporary use key (Kc: tgs). Further, the service request node 10 encrypts the node authenticator (Ac) with the temporary use key (Kc: tgs).

  In addition, the service request node 10 sends the encrypted node authenticator ({Ac} Kc: tgs), the authentication certificate ({Tc: tgs} Ktgs), and the desired service name (s) to the certificate issuing server. 20 to the authorization certificate issuing unit 24.

  In step 13, the authorization certificate issuing unit 24 of the certificate issuing server 20 uses the temporary use key (kc: s) temporarily used between the service request node 10 and the service providing node 30 as the service request node. 10 and the temporary certificate key (Kc: tgs) temporarily used between the authorization certificate issuing unit 24.

  Further, the authorization certificate issuing unit 24 shares the authorization information (Tc: s) that permits the service request node 10 to use a desired service between the authorization certificate issuing unit 24 and the service providing node 30. To obtain an authorization certificate ({Tc: s} Ks) that certifies that the use of the desired service is authorized.

  Further, the authorization certificate issuing unit 24 transmits the encrypted temporary use key ({Kc: s} Kc: tgs) and the authorization certificate ({Tc: s} Ks) to the service request node 10.

  In step 14, the service request node 10 decrypts the encrypted temporary use key ({Kc: s} Kc: tgs) with the temporary use key (Kc: tgs) to obtain the temporary use key (Kc: s). To do. Further, the service request node 10 encrypts the node authenticator (Ac) with the temporary use key (Kc: s).

  Further, the service request node 10 broadcasts the encrypted node authenticator ({Ac} Kc: s) and the authorization certificate ({Tc: s} Ks). That is, the service request node 10 transmits the encrypted node authenticator ({Ac} Kc: s) and the authorization certificate ({Tc: s} Ks) to the plurality of service providing nodes 30.

  Each service providing node 30 decrypts the encrypted node authenticator ({Ac} Kc: s) with the temporary use key (Kc: s) to obtain the node authenticator (Ac). Similarly, each service providing node 30 decrypts the authorization certificate ({Tc: s} Ks) with the shared secret key (Ks), and obtains authorization information (Tc: s). Each service providing node 30 stores a node authenticator (Ac) and authorization information (Tc: s) in association with each other.

  In step 15, the service request node 10 transmits the node authenticator (Ac) and the desired service name (s) to the service providing node 30a in order to receive provision of the desired service. That is, the service request node 10 transmits a node authenticator (Ac) and a desired service name (s) to any one of the plurality of service providing nodes 30.

  In step 16, the service providing node 30a makes a service request for a desired service depending on whether or not the authorization information (Tc: s) corresponding to the node authenticator (Ac) is held in the authorization certificate holding unit 34. It is determined whether or not to provide to the node 10.

  Specifically, when the authorization information (Tc: s) corresponding to the node authenticator (Ac) is held in the authorization certificate holding unit 34, the service providing node 30a assigns the desired service to the service request node. 10 to provide. On the other hand, when the authorization information (Tc: s) corresponding to the node authenticator (Ac) is not held in the authorization certificate holding unit 34, the service providing node 30a is not permitted to use a desired service. This is notified to the service request node 10.

(Service request node operation)
The operation of the service request node according to the first embodiment of the present invention will be described below with reference to the drawings. FIG. 6 is a flowchart showing the operation of the service request node 10 according to the first exemplary embodiment of the present invention.

  As shown in FIG. 6, in step 20, the service request node 10 determines whether or not a request for a desired service is the first time. Further, the service request node 10 proceeds to the process of step 21 when the request for the desired service is the first time, and proceeds to the process of step 23 when the request for the desired service is not the first time.

  In step 21, the service request node 10 acquires an authorization certificate ({Tc: s} Ks) according to the procedure of steps 10 to 13 described above.

  In step 22, the service request node 10 broadcasts the encrypted node authenticator ({Ac} Kc: s) and the authorization certificate ({Tc: s} Ks).

  In step 23, the service request node 10 transmits a desired service name (s) and a node authenticator (Ac) to any of the plurality of service providing nodes 30 in order to receive provision of the desired service.

  In step 24, the service request node 10 determines whether or not to request the service provision to another service providing node 30. Further, the service request node 10 returns to the process of step 23 when requesting the service provision to the other service providing node 30 and returns to the process when not requesting the service provision to the other service providing node 30. Terminate the process.

(Service provider node operation)
Hereinafter, the operation of the service providing node according to the first embodiment of the present invention will be described with reference to the drawings. FIG. 7 is a flowchart showing the operation of the service providing node 30 according to the first embodiment of the present invention. FIG. 7 shows processing of the service providing node 30 when the service requesting node 10 requests provision of a desired service.

  As shown in FIG. 7, in step 30, the service providing node 30 receives a desired service (s) name and a node authenticator (Ac) from the service request node 10.

  In step 31, the service providing node 30 determines whether or not the authorization certificate ({Tc: s} Ks) corresponding to the node authenticator (Ac) received from the service request node 10 is held in the authorization certificate holding unit 34. Determine whether. In addition, when the authorization certificate ({Tc: s} Ks) is held in the authorization certificate holding unit 34, the service providing node 30 moves to the process of step 32, and the authorization certificate ({Tc: s } Ks) is not held in the authorization certificate holding unit 34, the process proceeds to step 35.

  In step 32, the service providing node 30 verifies the authorization certificate ({Tc: s} Ks) held in the authorization certificate holding unit 34.

  In step 33, the service providing node 30 determines whether or not the authorization certificate ({Tc: s} Ks) is valid, and if the authorization certificate ({Tc: s} Ks) is valid. Then, it is determined whether or not use of a desired service received from the service request node 10 is permitted. The service providing node 30 proceeds to the process of step 34 when the use of the desired service is permitted, and proceeds to the process of step 35 when the use of the desired service is not permitted.

  In step 34, the service providing node 30 provides a desired service to the service requesting node 10.

  In step 35, the service providing node 30 notifies the service requesting node 10 that the use of the desired service is not permitted.

(Action and effect)
According to the access control system 100 according to the first embodiment of the present invention, the service request node 10 receives an encrypted node authenticator (Ac) and an authorization certificate ({Tc: s} Ks) as a plurality of service providing nodes. Send to 30.

  That is, since the authorization certificate ({Tc: s} Ks) is a certificate common to the plurality of service providing nodes 30, the service request node 10 obtains an authorization certificate corresponding to each of the plurality of service providing nodes 30. Therefore, it is possible to simplify the process related to obtaining the authorization certificate. In addition, it is not necessary for the service request node 10 to manage the authorization certificate corresponding to each of the plurality of service providing nodes 30, and the processing related to the management of the authorization certificate can be simplified.

  Further, each of the plurality of service providing nodes 30 holds an authorization certificate ({Tc: s} Ks), so that when the service request node 10 receives provision of a desired service, the authorization certificate ({Tc: s} Ks) need not be transmitted again, and the communication cost for transmitting the authorization certificate can be suppressed.

[Second Embodiment]
Hereinafter, a second embodiment of the present invention will be described with reference to the drawings. In the following, differences between the first embodiment and the second embodiment described above will be mainly described.

  Specifically, in the first embodiment described above, all the service providing nodes 30 hold the authorization certificate ({Tc: s} Ks) received from the service request node 10, but in the second embodiment, the service certificate Each service providing node 30 determines whether to hold the authorization certificate ({Tc: s} Ks) received from the request node 10.

  In the second embodiment, when the service providing node 30 receives a node authenticator (Ac) from the service requesting node 10 as a service providing request, the authorization certificate corresponding to the received node authenticator (Ac) is received. When ({Tc: s} Ks) is not held in the authorization certificate holding unit 34, an authorization certificate ({Tc: s} Ks) is requested from other service providing nodes 30 arranged in the vicinity. To do.

(Service providing node configuration)
The configuration of the service providing node according to the second embodiment of the present invention will be described below with reference to the drawings. FIG. 8 is a block diagram showing a service providing node 30 according to the second embodiment of the present invention.

  As illustrated in FIG. 8, the service providing node 30 includes an authorization certificate holding determination unit 36 in addition to the configuration illustrated in FIG.

  The authorization certificate holding determination unit 36 receives the encrypted node authenticator ({Ac} Kc: s) and the authorization certificate ({Tc: s} Ks) from the service request node 10, and It is determined according to a predetermined standard whether or not to hold the authenticator ({Ac} Kc: s) and the authorization certificate ({Tc: s} Ks) in association with each other.

  The predetermined criteria are (1) whether or not the free capacity of the authorization certificate holding unit 34 is greater than or equal to a predetermined threshold, and (2) a request to hold the authorization certificate ({Tc: s} Ks). Whether the service providing node 30 is set to hold the authorization certificate ({Tc: s} Ks); (4) authorization with a random probability; Whether or not the certificate ({Tc: s} Ks) is held, (5) whether or not the existence probability of the other service providing nodes 30 arranged around is not more than a predetermined threshold.

  Further, the communication unit 31 described above transmits an authentication license search notification requesting an authorization certificate ({Tc: s} Ks) to other service providing nodes 30 arranged in the vicinity. For example, the communication unit 31 transmits an authentication license search notification by broadcasting.

(Service provider node operation)
Hereinafter, the operation of the service providing node according to the second embodiment of the present invention will be described with reference to the drawings. FIG. 9 is a flowchart showing the operation of the service providing node 30 according to the second exemplary embodiment of the present invention. FIG. 9 shows the operation of the service providing node 30 when the encrypted node authenticator ({Ac} Kc: s) and the authorization certificate ({Tc: s} Ks) are received.

  As shown in FIG. 9, in step 40, the service providing node 30 receives the encrypted node authenticator ({Ac} Kc: s) and the authorization certificate ({Tc: s} Ks).

  In step 41, the service providing node 30 determines whether or not to hold the authorization certificate ({Tc: s} Ks) according to a predetermined standard. In addition, when the service providing node 30 holds the authorization certificate ({Tc: s} Ks), the service providing node 30 proceeds to the process of step 42, and when it does not hold the authorization certificate ({Tc: s} Ks). Then, the process proceeds to step 43.

  In step 42, the service providing node 30 stores the authorization certificate ({Tc: s} Ks) in the authorization certificate holding unit 34.

  In step 43, the service providing node 30 discards the authorization certificate ({Tc: s} Ks).

  Hereinafter, the operation of the service providing node 30 when a node authenticator (Ac) is received from the service requesting node 10 as a service providing request will be described with reference to the drawings. FIG. 10 is a flowchart showing the operation of the service providing node 30 when a node authenticator (Ac) is received from the service requesting node 10 as a service providing request.

  In FIG. 10, the same reference numerals are assigned to the processes similar to those in FIG. Specifically, in FIG. 10, Step 36 and Step 37 are added when it is determined that the authorization certificate ({Tc: s} Ks) is not held in the authorization certificate holding unit 34.

  As shown in FIG. 10, in step 36, the service providing node 30 searches for an authentication permit requesting an authorization certificate ({Tc: s} Ks) from other service providing nodes 30 arranged in the vicinity. Send a notification.

  In step 37, the service providing node 30 determines whether or not the authorization certificate ({Tc: s} Ks) has been obtained from the other service providing nodes 30 arranged in the vicinity. In addition, when the service providing node 30 can obtain the authorization certificate ({Tc: s} Ks), the service providing node 30 proceeds to the process of step 33 and cannot obtain the authorization certificate ({Tc: s} Ks). If so, the process proceeds to step 35.

(Action and effect)
According to the access control system 100 according to the second embodiment of the present invention, the service providing node 30 determines whether to hold the authorization certificate ({Tc: s} Ks) received from the service request node 10. . Therefore, the load on the service providing node 30 necessary for holding the authorization certificate ({Tc: s} Ks) can be reduced.

  Further, the service providing node 30 authorizes other service providing nodes 30 arranged in the vicinity when the authorization certificate ({Tc: s} Ks) is not held in the authorization certificate holding unit 34. An authentication license search notification requesting a certificate ({Tc: s} Ks) is transmitted. Therefore, even when the service providing node 30 determines not to hold the authorization certificate ({Tc: s} Ks), the service providing node 30 receives the authorization certificate ({Tc: s} Ks).

[Third Embodiment]
Hereinafter, a third embodiment of the present invention will be described with reference to the drawings. In the following, differences between the second embodiment and the third embodiment described above will be mainly described.

Specifically, in the second embodiment described above, the service providing node 30 only holds the authorization certificate ({Tc: s} Ks) in the authorization certificate holding unit 34, but in the third embodiment, ,
The service providing node 30 holds the authorization certificate ({Tc: s} Ks) in the authorization certificate holding unit 34, and then sends the authorization certificate ({Tc) to other service providing nodes 30 arranged around the service providing node 30. : S} Ks) is transmitted, an authorization certificate holding notification is sent.

  Further, when the service providing node 30 receives the node authenticator (Ac) from the service requesting node 10 as a service providing request, the service providing node 30 receives the authorization certificate ({Tc: s}) corresponding to the received node authenticator (Ac). When Ks) is not held in the authorization certificate holding unit 34, an authorization certificate ({Tc: s} Ks) is requested to the other service providing node 30 that has transmitted the authorization certificate holding notification.

(Service providing node configuration)
The configuration of the service providing node according to the third embodiment of the present invention will be described below with reference to the drawings. FIG. 11 is a block diagram showing a service providing node 30 according to the third embodiment of the present invention.

  As shown in FIG. 11, the service providing node 30 includes an authorization certificate holding node management unit 37 in addition to the configuration shown in FIG. 8.

  When the authorization certificate holding node management unit 37 receives an authorization certificate holding notification indicating that the authorization certificate ({Tc: s} Ks) is held from another service providing node 30, the authorization certificate holding notification Manages an identifier or the like for identifying another service providing node 30 that has transmitted.

  In addition, the communication unit 31 described above requests an authorization certificate ({Tc: s} Ks) from another service providing node 30 corresponding to the identifier managed by the authorization certificate holding node management unit 37. Send a certificate search notification.

  Further, the communication unit 31 described above holds the authorization certificate ({Tc: s} Ks) in the authorization certificate holding unit 34 and then gives the authorization certificate to other service providing nodes 30 arranged in the vicinity. An authorization certificate holding notification indicating that ({Tc: s} Ks) is held is transmitted. For example, the communication unit 31 transmits an authorization certificate holding notification by broadcasting.

(Service provider node operation)
The operation of the service providing node according to the third embodiment of the present invention will be described below with reference to the drawings. FIG. 12 is a flowchart showing the operation of the service providing node 30 according to the third exemplary embodiment of the present invention. FIG. 12 shows the operation of the service providing node 30 when receiving the encrypted node authenticator ({Ac} Kc: s) and the authorization certificate ({Tc: s} Ks).

  In FIG. 12, the same reference numerals are assigned to the same processes as those in FIG. Specifically, in FIG. 12, the process of step 44 is added after the process of storing the authorization certificate ({Tc: s} Ks) (step 42).

  As shown in FIG. 12, in step 44, the service providing node 30 gives an authorization indicating that it has held an authorization certificate ({Tc: s} Ks) to other service providing nodes 30 arranged around it. Send a certificate retention notification.

  Hereinafter, the operation of the service providing node 30 when a node authenticator (Ac) is received from the service requesting node 10 as a service providing request will be described with reference to the drawings. FIG. 13 is a flowchart showing the operation of the service providing node 30 when a node authenticator (Ac) is received from the service requesting node 10 as a service providing request.

  In FIG. 13, the same reference numerals are assigned to the processes similar to those in FIG. Specifically, in FIG. 13, when it is determined that the authorization certificate ({Tc: s} Ks) is not held in the authorization certificate holding unit 34, Step 38 is added. Instead, step 36a is added.

  As shown in FIG. 13, in step 38, the service providing node 30 determines whether an authorization certificate holding notification has been received from another service providing node 30. If the service providing node 30 has received the authorization certificate holding notification, the service providing node 30 proceeds to the process of step 36a. If the service providing node 30 has not received the authorization certificate holding notification, the service providing node 30 proceeds to the process of step 35a.

  In step 36 a, the service providing node 30 refers to the authorization certificate holding node management unit 37, identifies the other service providing node 30 that has transmitted the authorization certificate holding notification, and identifies the identified other service providing node. 30 sends an authentication license search notification requesting an authorization certificate ({Tc: s} Ks).

(Action and effect)
According to the access control system 100 according to the third embodiment of the present invention, the service providing node 30 is arranged around when the authorization certificate ({Tc: s} Ks) is stored in the authorization certificate holding unit 34. An authorization certificate holding notification indicating that the authorization certificate ({Tc: s} Ks) is held is transmitted to the other service providing node 30 that has been granted. Therefore, the service providing node 30 that does not hold the authorization certificate ({Tc: s} Ks) can easily specify another service providing node 30 that holds the authorization certificate ({Tc: s} Ks). The authorization certificate ({Tc: s} Ks) can be obtained efficiently.

[Other Embodiments]
In the first to third embodiments described above, information such as authentication information and authorization information is encrypted with various encryption keys, but the encryption method is not limited to the above-described method. . In addition, information such as authentication information and authorization information may be transmitted and received without being encrypted.

  In the first to third embodiments described above, the service request node 10 transmits an authorization certificate ({Tc: s} Ks) by broadcast when transmitting it to a plurality of service providing nodes 30. The transmission is not limited to the above, and may be transmitted by multicast.

It is a figure which shows the access control system which concerns on 1st Embodiment of this invention. 1 is a block diagram showing a service request node 10 according to a first embodiment of the present invention. It is a block diagram which shows the certificate issuing server 20 which concerns on 1st Embodiment of this invention. It is a block diagram which shows the service provision node 30 which concerns on 1st Embodiment of this invention. It is a sequence diagram which shows operation | movement of the access control system 100 which concerns on 1st Embodiment of this invention. It is a flowchart which shows operation | movement of the service request node 10 which concerns on 1st Embodiment of this invention. It is a flowchart which shows operation | movement of the service provision node 30 which concerns on 1st Embodiment of this invention. It is a block diagram which shows the service provision node 30 which concerns on 2nd Embodiment of this invention. It is a flowchart which shows operation | movement of the service provision node 30 which concerns on 2nd Embodiment of this invention (the 1). It is a flowchart which shows operation | movement of the service provision node 30 which concerns on 2nd Embodiment of this invention (the 2). It is a block diagram which shows the service provision node 30 which concerns on 3rd Embodiment of this invention. It is a flowchart which shows operation | movement of the service provision node 30 which concerns on 3rd Embodiment of this invention (the 1). It is a flowchart which shows operation | movement of the service provision node 30 which concerns on 3rd Embodiment of this invention (the 2).

Explanation of symbols

  DESCRIPTION OF SYMBOLS 10 ... Service request node, 11 ... Communication part, 12 ... Key management part, 13 ... Certificate verification part, 14 ... Authentication code holding part, 20 ... Certificate issuing server, DESCRIPTION OF SYMBOLS 21 ... Communication part, 22 ... Key management part, 23 ... Authentication certificate issuing part, 24 ... Authorization certificate issuing part, 30 ... Service provision node, 31 ... Communication part, 32 ... Key management unit, 33 ... Authorization certificate verification unit, 34 ... Authorization certificate holding unit, 35 ... Service providing unit, 36 ... Authorization certificate holding determination unit, 37 ...・ Authorization certificate holding node management unit, 100... Access control system

Claims (8)

An access control system including a service request node that requests use of a service, a certificate issuing server that generates authorization information indicating that use of the service is permitted, and a plurality of service providing nodes that provide the service There,
The service request node is:
An authorization information transmitting unit for transmitting the authorization information generated by the certificate issuing server and a node authenticator including at least a node identifier for identifying the service request node to the plurality of service providing nodes;
A node authenticator transmitting unit that transmits the node authenticator to the service providing node when requesting use of the service;
The service providing node is:
A service provision determining unit configured to determine whether to provide the service to the service request node based on the authorization information corresponding to the node authenticator received from the node authenticator transmission unit of the service request node; An access control system characterized by that. The service providing node is:
An authorization information holding unit that holds the node authenticator received from the authorization information transmission unit of the service request node in association with the authorization information;
The authorization information holding determination unit that determines whether or not the authorization information received from the authorization information transmission unit of the service request node is held in the authorization information holding unit. Access control system.   When the authorization information corresponding to the node authenticator received from the node authenticator transmission unit of the service requesting node is not held in the authorization information holding unit, the service providing node is transferred to another service providing node. The access control system according to claim 2, further comprising an authorization information requesting unit that requests the authorization information corresponding to the node authenticator.   When the authorization information holding determination unit determines that the service providing node holds the authorization information in the authorization information holding unit, the service providing node sends the authorization information corresponding to the node authenticator to other service providing nodes. The access control system according to claim 2, further comprising an authorization information holding notification unit that notifies that the information is held. A service request used in an access control system including a certificate issuing server that generates authorization information indicating that use of a service is permitted, and a plurality of service providing nodes that provide the service, and requests the use of the service A node,
An authorization information transmitting unit for transmitting the authorization information generated by the certificate issuing server and a node authenticator including at least a node identifier for identifying the service request node to the plurality of service providing nodes;
A service request node, comprising: a node authenticator transmitting unit that transmits the node authenticator to the service providing node when requesting use of the service. A service providing node that provides a service used in an access control system including a service request node that requests the use of a service and a certificate issuing server that generates authorization information indicating that the use of the service is permitted There,
An authorization information receiving unit that receives the authorization information generated by the certificate issuing server and a node authenticator including at least a node identifier for identifying the service request node from the service request node;
An authorization information holding unit that holds the node authenticator received from the service request node in association with the authorization information;
An authorization information holding determination unit for determining whether to hold the authorization information received from the service request node in the authorization information holding unit;
A service provision determining unit for determining whether to provide the service to the service request node based on the authorization information corresponding to the node authenticator received from the service request node; Offering node.   When the authorization information corresponding to the node authenticator received from the service request node when the service request node requests use of the service is not held in the authorization information holding unit, another service provision The service providing node according to claim 6, further comprising an authorization information requesting unit that requests the authorization information corresponding to the node authenticator from the node. When the authorization information holding determination unit determines that the authorization information is held in the authorization information holding unit, the authorization information corresponding to the node authenticator is held for another service providing node. The service providing node according to claim 6, further comprising an authorization information holding notification unit for notification.

Images