JP2010225007A - Information processing method, information processing system and reader/writer - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide technology allowing use of an IC card reader/writer with easy operation without additionally setting up plug-in software or driver software necessary to use the IC card reader/writer in a Web application use terminal. <P>SOLUTION: This IC card reader/writer 130 has: a USB connector 136 performing transmission/reception of information with the user terminal 120; an IC card input/output part 137 performing transmission/reception of information with an IC card; a storage part 133 storing a file from the user terminal 120; and a control part 134 monitoring presence/absence of storage of the file including a hash value of prescribed data from the user terminal 120 into the storage part 133, detecting that the file is stored in the storage part 133, transmitting an encryption processing request including predetermined encryption processing kind information and the hash value of the prescribed data to the IC card, receiving an encryption processing result from the IC card, and storing the received encryption processing result into the storage part. <P>COPYRIGHT: (C)2011,JPO&INPIT

Description

  The present invention relates to a technology that enables an IC card reader / writer to be used with a simple operation without additionally setting up driver software and plug-in software necessary for using the IC card reader / writer in a Web application using terminal.

  In recent years, Web applications such as electronic applications and online banking services have been widely used. Some of these web applications use PKI technology, which is one of encryption technologies, for the purpose of secure and reliable user authentication, detection of falsification of transmitted data, and prevention of denial of the fact that data has been transmitted. Many. In PKI technology, different keys are used for data encryption processing and decryption processing, one key is a public key that is assumed to be disclosed to the other, and the other key is strictly managed by the person and the other It is a secret key that is not open to the public. If the data sent by the principal is encrypted with the private key to the web application server, and the web application server is able to correctly decrypt the data with the corresponding public key, the data encrypted by the principal managing the private key must be Guaranteed to be. However, at this time, if there is a possibility that the secret key that only the principal can know is leaked to others, even if the web application server can correctly decrypt the encrypted data, it is not necessarily encrypted by the principal. There is a risk that it may not be possible to say that the data is new. For this reason, there is a case in which the use of an IC card that stores a secret key and performs an encryption process inside may be required so that the secret key is not leaked to others.

  In order to apply electronically on the Web screen using the IC card information, the user prepares an IC card reader / writer and adds it to the driver software and Web application to make the IC card reader / writer available. It is necessary to set up plug-in software in the terminal (see, for example, Non-Patent Document 1).

“Preparations for using e-Tax”, [Search March 4, 2009] Internet <URL: http://www.nta.go.jp/tetsuzuki/shinkoku/shotoku/tokushu/jyunbi. htm>

  However, certain technical knowledge is required to perform the above-described driver software and plug-in software setup work. For this reason, users who can use Web applications that require IC card information, such as electronic application applications and net banking applications, were limited. In addition, even if a user has a certain level of technical knowledge, when trying to set up multiple types of driver software and multiple types of plug-in software on a single terminal, the driver software and plug-in software are mutually connected. In some cases, the web application might not function properly.

  The present invention has been made in view of the above circumstances, and the object of the present invention is to additionally set up driver software and plug-in software necessary for using an IC card reader / writer in a Web application using terminal. The object is to provide a technology that enables an IC card reader / writer to be used with a simple operation.

  In order to solve the above problems, the present invention provides a terminal, a reader / writer connected to the terminal, a recording medium configured to be communicable with the reader / writer, and the terminal connected via a network. The present invention is implemented in a network system composed of a Web server, and the terminal, reader / writer, recording medium, and Web server each perform the following processing.

  The terminal transmits a request for a predetermined Web screen to the Web server via the network, a process for receiving the predetermined Web screen from the Web server via the network, and an input unit. A process of calculating the hash value of the acquired input data, a process of transmitting a file in which the hash value of the input data is described to the reader / writer, a process of receiving an encryption process result from the reader / writer, and the encryption process A process of transmitting a signature value included in a result and the input data to the Web server via the network, and a process of receiving a determination result of whether or not the input data has been tampered from the Web server via the network To do.

  The reader / writer receives the file from the terminal and saves it in a storage unit, determines the encryption processing type based on the file, information indicating the determined encryption processing type, and the input data A process of transmitting a cryptographic process request including a hash value to the recording medium, a process of receiving the cryptographic process result from the recording medium, and a process of transmitting the cryptographic process result to the terminal are performed.

  The web server includes a process of receiving a request for the predetermined web screen from the terminal via the network, a process of transmitting the web screen to the terminal via the network, and the signature value and A process of receiving the input data via the network and a process of transmitting a determination result of whether or not the input data has been tampered to the terminal via the network are performed.

  Further, the present invention provides the Web screen with an input unit for the input data and a hash value for instructing calculation of the hash value of the input data so that the user can use the reader / writer with a simple operation. A calculation instruction unit; a hash value display unit that displays a hash value of the calculated input data; and a signature value input unit that inputs the signature value. ing.

  As described above, according to the present invention, an IC card reader / writer can be easily operated without additional setup of driver software and plug-in software necessary for using the IC card reader / writer on a Web application terminal. Can be provided.

1 is a diagram illustrating an overall configuration of a network system according to an embodiment. Data files stored in the storage unit 123 of the IC card reader / writer user terminal 120 and the storage unit 133 of the IC card reader / writer 130 and execution programs executed by the control units (124, 134), library programs (driver software) Etc.). It is a figure which shows the example of an electronic application Web screen. It is a sequence diagram showing a flow of processing among the user terminal 120, the IC card reader / writer 130, the IC card 140, and the electronic application Web server 110. 5 is a flowchart showing details of processing executed by the IC card reader / writer 130. Similarly, it is a flowchart showing details of processing executed by the IC card reader / writer 130. 6 is a diagram illustrating a configuration example of an encryption processing control file 227. FIG. It is a figure which shows the structural example of the encryption process target data file 226 in which the information which shows encryption process classification was described. It is a figure which shows the structural example of the encryption process target data file 226 in which the information which shows encryption process type is not described. It is a figure which shows the other structural example of the encryption process target data file 226 in which the information which shows encryption process type is not described. 6 is a diagram illustrating a configuration example of an encryption processing result data file 228. FIG. It is a figure which shows the other example of an electronic application Web screen.

  Embodiments of the present invention will be described in detail with reference to the drawings.

  In the following description, an electronic application to a local government is taken as an example. In this embodiment, the residents use an IC card such as a Juki card in which a PKI certificate is installed in order to authenticate the residents and to prevent falsification and denial of application contents.

  First, with reference to FIG. 1 and FIG. 2, the overall configuration of the network system (information processing system) according to the present embodiment, and the conceptual hardware configuration and functional configuration of various computers and devices that configure the network system will be described.

  FIG. 1 is a diagram showing an overall configuration of a network system according to the present embodiment. As shown in FIG. 1, the network system according to the present embodiment includes an electronic application Web server 110 and a plurality of user terminals 120 connected to a network 101 such as the Internet, and an IC card reader connected to the user terminal 120. The writer 130 and the IC card 140 configured to be able to communicate with the IC card reader / writer 130 are configured.

  The electronic application Web server 110 is realized by a general computer, and includes an output unit 111 such as a display, an input unit 112 such as a keyboard and a mouse, a storage unit 113 such as a RAM (Random Access Memory) and a HDD (Hard Disk Drive), A control unit 114 such as a CPU (Central Processing Unit) and a network interface unit 115 such as a LAN (Local Area Network) card that transmits and receives information to and from the user terminal 120 via the network 101 are provided.

  Similarly, the user terminal 120 is also realized by a general computer, and includes an output unit 121 such as a display, an input unit 122 such as a keyboard and a mouse, a storage unit 123 such as a RAM and an HDD, a control unit 124 such as a CPU, and an electronic application. A network interface unit 125 such as a LAN card for transmitting / receiving information to / from the Web server 110 and the network 101, and a USB port 126 are provided.

  The IC card reader / writer 130 includes a control unit 134, a storage unit 133 as a storage area, a USB connector 136, an IC card input / output unit 137, and the like, and realizes a function as a USB Mass Storage Class device.

  The USB connector 136 of the IC card reader / writer 130 and the USB port 126 of the user terminal 120 are connected by a USB cable, and information is transmitted and received through these. The IC card 140 is an IC card of a resident who makes an electronic application. In this embodiment, the IC card 140 is inserted into the IC card input / output unit 137 and used. When a non-contact type IC card is used as the IC card 140, the IC card input / output unit 137 does not necessarily have a shape in which the IC card 140 can be physically inserted.

  FIG. 2 shows an execution program and a library program (driver software) that are executed by the data files stored in the storage unit 123 of the user terminal 120 and the storage unit 133 of the IC card reader / writer 130 and the control units (124, 134). Etc.).

  First, the USB Mass Storage Class driver 211, the electronic application program 212, the text editor program 213, the filer program 214, and the signature value / application data transmission program 215 are stored in the storage unit 123 of the user terminal 120.

  The USB Mass Storage Class driver 211 is set up as a standard in the OS. As a result, the OS realizes a function of recognizing the IC card reader / writer 130 as a USB Mass Storage Class device.

  The electronic application program 212 is a Web browser configured by a script such as predetermined HTML and JavaScript received from the electronic application Web server 110 via the network 101. The text editor program 213 realizes a function of copying the contents (signature value) of the encryption processing result data file 228 and pasting it on a predetermined data display section of the electronic application Web screen. The filer program 214 realizes a function of generating and copying a predetermined file. Normally, the filer program 214 is provided as a standard in the OS. The signature value / application data transmission program 215 realizes a function of transmitting application data and a signature value related to the application data to the electronic application Web server 10 via the network 101.

  The storage unit 133 of the IC card reader / writer 130 includes an execution program including a file management function 221, a file input monitoring function 222, an encryption process type setting function 223, and an encryption process request function 224, an encryption process type recording file 225, an encryption A processing target data file 226, an encryption processing control file 227, and an encryption processing result data file 228 are stored.

  FIG. 3 is a diagram illustrating an example of the electronic application Web screen 310 displayed on the output unit 121 of the user terminal 120. In the present embodiment, as shown in FIG. 3, an example of a Web screen for applying for a child allowance is shown. FIG. 4 is a sequence diagram showing a flow of processing among the user terminal 120, the IC card reader / writer 130, the IC card 140, and the electronic application Web server 110 that constitute the network system. The operation of the network system shown in FIG. 1 will be described with reference to FIGS.

  First, the user terminal 120 transmits a page request to the electronic application Web server 110 via the network 101 (step S401). As a response to the page request, the user terminal 120 receives a page (electronic application Web screen 310) composed of predetermined HTML or script from the electronic application Web server 110 via the network 101 and displays it on the output unit 121. (Step 402). The electronic application web screen 310 includes an input unit 311 for inputting information (application data) necessary for applying for a child allowance, such as information on a person to be notified, information on a child to be paid, information on a payee's transfer destination, and a PIN code An input unit 312, a hash value calculation button 313 for instructing calculation of a hash value of application data, an encryption processing target data display unit 314 that displays a hash value (encryption processing target data) that is the calculation result, and an encryption processing result It has an encryption processing result data input unit 315 for inputting data (signature value), a send button 316, and a cancel button 317. Further, the electronic application Web screen 310 shows a procedure of an action performed by the user as shown in steps 1 to 5.

  Next, on the electronic application Web screen 310, the user performs an operation of inputting information to the application data input unit 311 using the input unit 122. The user terminal 120 acquires input information (application data) (step 403).

  Next, the user terminal 120 generates a hash value (encryption processing target data) of application data necessary for generating a signature value for performing falsification detection of the application data in the IC card reader / writer 130 ( Step 404). Specifically, first, on the electronic application Web screen 310, the user uses the input unit 122 to input the PIN code (password) stored in the IC card 140 into the PIN code input unit 312. An operation of pressing the hash value calculation button 313 is performed. The user terminal 120 calculates the hash value of the application data based on the hash value calculation instruction by the electronic application program 212, and uses the calculation result (encryption processing target data) as the encryption processing target data of the electronic application Web screen 310. It is displayed on the display unit 314. Since the PIN code is information that is normally known only to the IC card holder, the PIN code may be displayed in advance in the PIN code input field 312. In this case, when the user performs an operation of pressing the hash value calculation button 313 using the input unit 122, the PIN code and the hash value are displayed at a predetermined position on the encryption processing target data display unit 314.

  Next, the user uses the input unit 122 to copy the contents of the encryption processing target data display unit 314 (the hash value of the application data), paste it into a file such as a text file, and save the file. I do. The file generated using the text editor program 213 is stored in the storage unit 123 (step 405).

  Next, the user terminal 120 uses the filer program 214 to transfer the file stored in the storage unit 123 to the IC card reader / writer 130.

  The IC card reader / writer 130 stores the received file in the storage unit 133 as the encryption processing target data file 226 by the file input management function 222 (step 406). At this time, since the IC card reader / writer 130 is recognized as a USB Mass Storage Class device by the OS of the user terminal 120, the storage unit 133 that is a storage area appears to be part of the file system from the filer program 214. . Therefore, even users who do not have special technical knowledge can easily perform file copying. Next, the IC card reader / writer 130 analyzes the content of the encryption processing target data file 226 with the encryption processing type setting function 223, determines the encryption processing type (step 407), and uses the encryption processing request function 224 with the encryption processing target. An encryption processing request including data (hash value of application data) and information indicating the encryption processing type is transmitted to the IC card 140 (step 408).

  The IC card 140 performs encryption processing based on the received encryption processing request (step 409), and returns the result of the encryption processing to the IC card reader / writer 130 (step 410).

  The IC card reader / writer 130 uses the cryptographic processing request function 224 to generate a cryptographic processing result file 228 from the received cryptographic processing result and stores it in the storage unit 133 (step 411).

  The user accesses the storage unit 133 of the IC card reader / writer 130 using the user terminal 120, confirms that the encryption processing result file 228 has been generated, and then uses the text editor program 213 to The processing result file 228 is opened, the signature value described in the file 228 is copied using the input unit 122, pasted into the encryption processing result data input unit 315, and an operation of pressing the send button 316 is performed. In response to this operation, the signature value / application data transmission program 215 acquires the input signature value (step 412), and the signature value and the application data acquired in step 403 are transmitted via the network 101 to the electronic application Web server. 110 (step 413), and receives a response from the electronic application Web server 110 via the network 101 (step 414).

  FIG. 5 and FIG. 6 are flowcharts showing details of processing executed by the IC card reader / writer 130.

  The IC card reader / writer 130 waits for the input of the file group from the user terminal 120 by the file input monitoring function 222 (step S501), and confirms the input of the file group (step 502). Here, “input of file group” means a state in which a file is stored in the storage unit 133. In the present embodiment, one or more files are defined as a file group. Further, for example, if another file is not saved for 5 seconds or more after an arbitrary file is saved in the storage unit 133, the file is processed as a file group. As a specific example, when three files F1, F2, and F3 are input in this order, F2 is stored in the storage unit 133 for F2 two seconds after the storage of F1 in the storage unit 133 is completed. If it is written five minutes later, F1 and F2 are processed as one file group, and F3 is processed as another file group.

  After the input of the file group is confirmed by the file input monitoring function 222, the encryption process type setting function 223 then includes, for example, the file group based on the presence / absence of information indicating the encryption control file included in the file name. The presence / absence of the encryption processing control file 227 (FIG. 2) is determined (step 503).

  If there is no encryption processing control file 227, the encryption processing type setting function 223 reads the encryption processing target data file 226 from the storage unit 133 (step 504), analyzes this, and whether or not information indicating the encryption processing type is described. Is determined (step 505).

  When there is no description of the information indicating the encryption processing type, the encryption processing type setting function 223 uses the initial value described in the encryption processing type recording file 225 to indicate the encryption processing type of the data for transmission to the IC card 140. (Step 506).

  If the encryption process type is described in the determination process of step 505, the encryption process type setting function 223 displays information indicating the encryption process type described in the encryption process target data file 226 as the IC card 140. It is set as information indicating the encryption processing type of the data for transmission to (step 507).

  Next, the cryptographic processing request function 224 transmits the cryptographic processing request including the information indicating the cryptographic processing type and the cryptographic processing target data (the hash value of the application data) described in the cryptographic processing target data file 226 to the IC card 140. (Step 509). The IC card 14 encrypts the encryption processing target data based on the content of the received encryption processing request, and transmits the encryption processing result to the IC card reader / writer 130.

  The IC card reader / writer 13 receives the encryption processing result (step 510), generates an encryption processing result data file 228 from the received data, and stores it in the storage unit 133 (step 511). When the processing from step 504 to step 511 is performed for each file in the file group confirmed in step 502 (step 512), the process returns to step 501 for waiting for input of the file group.

  Also, in the determination process of step 503, if the cryptographic process control file 227 is in the file group stored in the storage unit 133, the cryptographic process request function 224 follows the predetermined rule from the storage unit 133. The encryption processing control file 227 having the file name is read, analyzed, and information indicating the encryption processing type described in the encryption processing control file 227 is converted into information indicating the encryption processing type of the data to be transmitted to the IC card 140. The encryption processing control file 227 stored in the storage unit 133 is deleted (step 602).

  Next, the encryption processing request function 224 reads the encryption processing target data file 226 from the storage unit 133 (step 603), and includes the information indicating the encryption processing type and the encryption processing target data described in the encryption processing target data file 226. A cryptographic processing request is transmitted to the IC card 140 (step 604). The IC card 14 encrypts the encryption processing target data based on the content of the received encryption processing request, and transmits the encryption processing result to the IC card reader / writer 130.

  The IC card reader / writer 13 receives the encryption processing result (step 605), generates an encryption processing result data file 228 from the reception result, and stores it in the storage unit 133 (step 606). When the processing from step 603 to step 606 is performed for each file (excluding the encryption processing control file 227) confirmed in step 502 (step 607), the process returns to step 501 for waiting for input of the file group. Note that the file management function 221 stored in the storage unit 133 of the IC card reader / writer 130 shown in FIG. 2 realizes a function for managing the entire IC card reader / writer 130 in an integrated manner.

  FIG. 7A is a diagram illustrating a configuration example of the encryption processing control file 227. As illustrated in FIG. 7A, when the file name includes “.ctrl” which is a predetermined naming rule, the cryptographic process type setting function 223 identifies this file as the cryptographic process control file 227. Further, since “CODE: SIGN” and “PIN: 0123” are described as the encryption processing request code in the encryption processing control file 227 shown in FIG. 7A, the encryption processing request function 224 has the PIN code = An encryption processing request is sent to the IC card 140 with “0123”.

  FIG. 7B is a diagram illustrating a configuration example of the encryption processing target data file 226 in which information indicating the encryption processing type is described. In the example shown in FIG. 7B, since the file name does not include “.ctrl” which is a predetermined file naming rule, the encryption processing type setting function 223 uses the file name as the encryption processing target data file 226. recognize. However, “CODE: SIGN” described in the file is recognized as information indicating the encryption processing type. In addition, the encryption processing target data file 226 describes encryption processing target data (line starting with “DATA:”).

  FIG. 7C is a diagram illustrating a configuration example of the encryption processing target data file 226 in which information indicating the encryption processing type is not described. The difference from the configuration of the encryption processing target data file 226 shown in FIG. 7B is that there is no line beginning with “CODE:” in the encryption processing target data file 226 shown in FIG. 7C. Since there is no line beginning with “CODE:”, the cryptographic processing request function 224 makes a cryptographic processing request to the IC card 140 with a predetermined cryptographic processing type.

  FIG. 7D is a diagram illustrating another configuration example of the encryption processing target data file 226 in which information indicating the encryption processing type is not described. In the encryption processing target data file 226 shown in FIG. 7D, only the data subject to encryption processing is described. In many cases, since a PIN code is required to access the IC card reader / writer 130, the encryption processing target data file 226 having the format shown in FIG. 7D is usually controlled by the encryption processing control shown in FIG. Used with file 227.

  FIG. 7E is a diagram illustrating a configuration example of the encryption processing result data file 228. As shown in FIG. 7E, the name obtained by adding “.enc” to the end of the file name of the original encryption processing target data file 226 becomes the file name, and the encryption processing result data file 228 describes only the encryption processing result. Is done.

  As described above, according to the above embodiment, since the file input monitoring function is provided in the IC card reader / writer 130 that functions as a USB Mass Storage Class device, the storage unit 133 that is the storage area of the IC card reader / writer 130. The encryption process using the IC card 140 can be performed simply by saving the file. In addition, the IC card reader / writer 130 can use any file according to a predetermined file name naming rule in which an encryption processing request code is described, or an encryption processing request code having a predetermined format is described at a predetermined position of the file. It is possible to request the IC card 140 for cryptographic processing. In addition, Web applications are usually composed of scripts such as HTML and JavaScript on a Web browser, and for security reasons, files are stored directly in the storage area of the IC card reader / writer using the Web application. Can not do it. Therefore, in this embodiment, since the encryption processing target data display unit 314 and the encryption processing result data input unit 315 are provided on the electronic application Web screen, the file is stored in the IC card reader / writer 130 without being restricted by security. It becomes possible.

  As described above, according to the above-described embodiment, the IC card reader / writer can be installed with a simple operation without additionally setting up driver software and plug-in software necessary for using the IC card reader / writer on the Web application using terminal. It is possible to provide technology that can be used.

  Further, the IC card and the IC card reader / writer shown in the above embodiment are merely examples, and other recording media and reader / writers corresponding thereto may be used.

  In addition, the present invention is not limited to the above-described embodiment, and various modifications can be made within the scope of the spirit thereof.

101 ... Network 110 ... Electronic application Web server 111 ... Output unit 112 ... Input unit 113 ... Storage unit 114 ... Control unit 115 ... Network interface unit 120 ... User Terminal 121 ... Output unit 122 ... Input unit 123 ... Storage unit 124 ... Control unit 125 ... Network interface unit 126 ... USB port 130 ... IC card reader / writer 133 ... Storage unit 134 ... Control unit 136 ... USB connector 137 ... IC card input / output unit 140 ... IC card

Claims (12)

Implemented in a network system including a terminal, a reader / writer connected to the terminal, a recording medium configured to be communicable with the reader / writer, and a Web server connected to the terminal via a network. An information processing method,
By the terminal
Processing for transmitting a request for a predetermined Web screen to the Web server via the network, processing for receiving the predetermined Web screen from the Web server via the network, and input data acquired via the input unit Included in the encryption processing result, processing for transmitting the file describing the hash value of the input data to the reader / writer, processing for receiving the cryptographic processing result from the reader / writer, A process of transmitting a signature value and the input data to the Web server via the network, and a process of receiving a determination result of whether or not the input data has been tampered with from the Web server via the network,
By the reader / writer,
A process of receiving the file from the terminal and storing it in a storage unit; a process of determining the encryption process type based on the file; information indicating the determined encryption process type; and an encryption including a hash value of the input data Performing a process of transmitting a processing request to the recording medium, a process of receiving the cryptographic processing result from the recording medium, and a process of transmitting the cryptographic processing result to the terminal;
By the web server
A process of receiving a request for the predetermined Web screen from the terminal via the network; a process of transmitting the Web screen to the terminal via the network; and the signature value and the input data from the terminal A process of receiving via the network and a process of transmitting the determination result of whether or not the input data has been tampered to the terminal via the network,
An information processing method characterized by the above. The web screen includes an input unit for the input data, a hash value calculation instruction unit for instructing calculation of a hash value of the input data, a hash value display unit for displaying the hash value of the calculated input data, A signature value input unit for inputting the signature value;
The information processing method according to claim 1. The web screen shows the procedure of the action performed by the user.
The information processing method according to claim 2. The recording medium is an IC card, and the card reader / writer is an IC card reader / writer.
The information processing method according to claim 3. An information processing system comprising: a terminal; a reader / writer connected to the terminal; a recording medium configured to be communicable with the reader / writer; and a Web server connected to the terminal via a network. ,
The terminal
A request for a predetermined web screen is transmitted to the web server via the network, the predetermined web screen is received from the web server via the network, and a hash value of the input data acquired via the input unit is obtained. Calculating, transmitting a file describing the hash value of the input data to the reader / writer, receiving a cryptographic processing result from the reader / writer, and sending the signature value and the input data included in the cryptographic processing result to the network. A control unit that transmits to the Web server via the network and receives the determination result of whether or not the input data has been tampered with from the Web server,
The reader / writer is
The file is received from the terminal and stored in a storage unit, the encryption processing type is determined based on the file, and the encryption processing request including the information indicating the determined encryption processing type and the hash value of the input data is received. A control unit that transmits to the recording medium, receives the cryptographic processing result from the recording medium, and transmits the cryptographic processing result to the terminal;
The web server
A request for the predetermined Web screen is received from the terminal via the network, the Web screen is transmitted to the terminal via the network, and the signature value and the input data are transmitted from the terminal via the network. A control unit that receives and transmits a determination result of whether or not the input data has been tampered with to the terminal via the network;
An information processing system characterized by this. The web screen includes an input unit for the input data, a hash value calculation instruction unit for instructing calculation of a hash value of the input data, a hash value display unit for displaying the hash value of the calculated input data, A signature value input unit for inputting the signature value;
The information processing system according to claim 5. The web screen shows the procedure of the action performed by the user.
The information processing system according to claim 6. The recording medium is an IC card, and the card reader / writer is an IC card reader / writer.
The information processing system according to claim 7. A first interface unit that transmits and receives information to and from the terminal;
A second interface unit for transmitting and receiving information to and from the recording medium;
A storage unit for storing various execution programs and a file from the terminal, and monitoring whether or not a file including a hash value of predetermined data from the terminal is stored in the storage unit, and the file is stored in the storage unit , The encryption processing request including the hash value of the predetermined data and predetermined encryption processing type information is transmitted to the recording medium, the encryption processing result is received from the recording medium, and the received A control unit that stores the cryptographic processing result in the storage unit,
A reader / writer characterized by this. The control unit, when a file having a file name according to a predetermined rule exists in the file stored in the storage unit, the predetermined data described in the file excluding the file And a cryptographic processing request including information indicating the cryptographic processing type described in the file is transmitted to the recording medium, the cryptographic processing result is received from the recording medium, and the received cryptographic processing result is stored in the storage Save to the department,
The reader / writer according to claim 9. The control unit does not include a file having a file name according to the predetermined rule in the file stored in the storage unit, and an encryption according to a predetermined format at a predetermined position of the file. When the information indicating the processing type is described, the cryptographic processing request including the information indicating the cryptographic processing type and the hash value of the predetermined data is transmitted to the recording medium, and the cryptographic processing result is received from the recording medium. And storing the received cryptographic processing result in the storage unit,
The reader / writer according to claim 10. The recording medium is an IC card, and the card reader / writer is an IC card reader / writer.
The reader / writer according to any one of claims 9 to 11.

Images