JP2008067264A5 - - Google Patents

Claims (4)

A communication means for communicating via a network with a certificate authority that issues an electronic certificate used for authentication in electronic signature or encrypted communication and distributes an electronic certificate revocation list describing information of the revoked electronic certificate; , an electronic certificate storing means for storing the issued electronic certificate from the certificate authority, and electronic processing means for executing an electronic processing using the electronic certificate, said authentication by communication means when said electronic processing executed CRL holding means for acquiring and storing an electronic certificate revocation list from a station, and the electronic certificate revocation list acquired at the time of the second electronic processing performed after the first electronic processing are used for the first electronic processing. An electronic certificate management apparatus comprising: electronic certificate validity verification means for verifying the validity of the electronic certificate. The electronic processing time that is the time when electronic processing was performed using the electronic certificate, the identification information of the electronic certificate, and the identification information of the electronic certificate revocation list acquired and stored at the time of the electronic processing are stored for each electronic processing. An electronic certificate revocation list corresponding to the first electronic processing, and the electronic certificate used for the first electronic processing is stored in the state management table. When the electronic certificate revocation list corresponding to the second electronic processing performed at a time later than the electronic processing time of the first electronic processing is different, the electronic certificate validity verification means 2. The electronic certificate management apparatus according to claim 1, wherein the validity of the electronic certificate used in the first electronic processing is verified by an electronic certificate revocation list acquired during the second electronic processing . When the electronic certificate used in the first electronic processing is within the validity period of the electronic certificate recorded in the electronic certificate, the validity is verified by the electronic certificate validity verification unit. The electronic certificate management apparatus according to claim 1 or claim 2, wherein The electronic certificate validity verification means determines whether the identification information of the electronic certificate used at the time of the first electronic processing is written in the electronic certificate revocation list acquired at the time of the second electronic processing. The electronic certificate management apparatus according to any one of claims 1 to 3, wherein the electronic certificate used in the first electronic processing is valid when not described .