JP2010278982A - System and method for verification - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To authenticate qualification information online which is disclosed by an information source on a network. <P>SOLUTION: A verification system has a qualification information verification server 200. The system connected to a second network 30 different from a first network 10 accesses a qualification information database 300 to obtain a declaration identifier of the qualification information for the verification request when a verification request for the qualification information is received from a server 102 for disclosing the qualification information through an interface 103, inquires through a verification server 500 whether or not a combination of a qualified person identifier and a certificate identifier, corresponding to the combination of an information source identifier and the declaration identifier, is held in a certificate database 600, and verifies the qualification information for the verification request. <P>COPYRIGHT: (C)2011,JPO&INPIT

Description

  The present invention relates to a system and method for providing proof of information published by a publisher on a network.

  Conventionally, in an IP network such as the Internet, data is downloaded mainly using HTTP (Hyper Text Transfer Protocol). The downloaded data is formatted and displayed by a web browser for web browsing. In addition, as represented by, for example, Flash (registered trademark), Javascript (registered trademark), and the like, an environment for realizing the function expansion of the Web browser is also prepared. Web browsers can provide various extended functions by executing programs in the form of plug-ins.

  In a Web service that implements services by exchanging data between the HTTP server and client, the client operates the API (Application Program Interface) of the HTTP server via HTTP, and causes the HTTP server to perform a specific operation. Such control is becoming possible.

  HTTP uses TCP / IP as a lower layer protocol. In an IP network, the destination of information is identified by an IP address. Currently, in an IP network, an IP address is dynamically assigned to each user by DHCP (dynamic host configuration protocol) or the like. That is, the user does not always use the same IP address, and the user cannot be uniquely identified from the IP address.

  As a network architecture of NGN (Next Generation Network) discussed in ITU and the like, service provision through an IP network is assumed. Specifically, the IP Multimedia Subsystem (IMS) formulated by 3GPP (3rd Generation Partnership Project), the standard organization for third-generation mobile communication networks, is used to provide network services by NGN. (See Non-Patent Document 1). IMS is a subsystem that uses SIP (Session Initiation Protocol) to perform service execution control, session control between terminals, registration processing, accounting processing, and the like. IMS manages user IDs uniformly by using an identifier called SIP URI (Uniform Resource Identifier). The SIP URI is different from the above-described IP address in that the user is uniquely identified.

  IMS executes various applications using SIP Application Server (SIP AS). IMS can not only establish a multimedia session between two parties, but also provide an extended service using SIP AS. For example, an interface called ANI (Application Network Interface) is defined in NGN. ANI mainly uses SIP AS, and enables non-NGN networks to receive services from NGN via API. That is, a terminal connected to an IMS network or a service provided by a server can be used by a terminal connected to another network such as the Internet.

3GPP IP Multimedia (IM) Subsystems Sh Interfaces; Signaling flows and message contents.3GPP TS 29.328, 3rd Generation Partnership Project (3GPP), Dec. 2008

  On networks such as the Internet, a large amount of information is disclosed by various publishers (information sources) such as public institutions, companies, corporations, and individuals. However, the authenticity of published information is not generally guaranteed, and there are actually blogs and articles that distribute false or false information.

  As one aspect of information disclosure, it is conceivable that a publisher such as an individual or a corporation discloses his / her qualifications on a network (for example, the Internet). The qualification mentioned here means a profile that can be proved by a third party other than the publisher (qualification organization, school, government office, etc.) such as qualifications, academic background, awards, etc. To do. Qualification is generally understood as an indicator of publisher ability, performance, etc. Therefore, a viewer who has viewed the publisher's credential information on the network may request contact with the publisher on the premise of the authenticity of the credential information, such as requesting a job from the publisher. . However, since the authenticity of the information published on the network is generally not guaranteed as described above, even if the publisher misrepresents his / her qualification, the viewer cannot confirm it. As a result, in order for the viewer to confirm the authenticity of the credential information of the publisher, it is necessary to refer to a third party who can prove the authenticity of the credential information (such as obtaining a certificate), which is complicated. It is.

  Accordingly, an object of the present invention is to provide online proof of credential information published by a publisher on a network.

  A certification system according to an aspect of the present invention includes a qualification information disclosure server that publishes qualification information indicating a qualification held by a publisher via a first network, and a qualification holder that holds the qualification as the first credential holder. A certificate that associates and holds a certificate holder identifier that is identified on a second network different from the network and a certificate identifier that is assigned to certificate information that proves that the certificate holder has the certificate Certificate information database, a publisher identifier for identifying the publisher on the second network, and a certificate identifier assigned to certificate information that proves the authenticity of the credential information. A credential information database that associates and holds a report identifier, and is connected to the second network and is accessible to the certificate information database A certificate server connected to the second network and receiving a certification request for requesting certification of the credential information from the credential information public server via the interface, and accessing the credential database and subject to the certification request Whether or not the combination of the qualification holder identifier and the certificate identifier corresponding to the combination of the publisher identifier and the declaration identifier is held in the certificate database. A credential certification server that inquires through the certification server and certifies the certification information that is the subject of the certification request.

  ADVANTAGE OF THE INVENTION According to this invention, the proof of the credential information which the publisher has exhibited on the network can be provided online.

1 is a block diagram showing a certification system according to a first embodiment. The figure which shows an example of the public profile of FIG. The block diagram which shows the detail of the various network elements connected to the 2nd network of FIG. The figure which shows an example of the recording content of the qualification information database of FIG. The figure which shows an example of the recording content of the qualification information database of FIG. The figure which shows an example of the recording content of the qualification information database of FIG. The block diagram which shows the element which concerns on the registration process of the qualification information in the certification | authentication system of FIG. The figure which shows an example of the qualification information which the publisher of FIG. 1 desires to register. The sequence diagram which shows the flow of the registration process of the qualification information in the certification | authentication system of FIG. The block diagram which shows the element which concerns on the provision process of the proof in the proof system of FIG. The figure which shows an example of the public profile provided in the certification | authentication system of FIG. The sequence diagram which shows the flow of the provision process of the proof in the proof system of FIG. The block diagram which shows the element which concerns on the provision process of the proof in the proof system which concerns on 2nd Embodiment. The figure which shows an example of the public profile provided in the certification | authentication system which concerns on 2nd Embodiment. The sequence diagram which shows the flow of the provision process of the proof in the proof system which concerns on 2nd Embodiment.

Embodiments of the present invention will be described below with reference to the drawings.
(First embodiment)
As shown in FIG. 1, the certification system according to the first embodiment of the present invention includes a first network 20 and a second network 30.
The first network 20 is, for example, the Internet, and transmits and receives data mainly using HTTP. The first network 20 is connected to various network elements such as a qualification information disclosure server 102 and an access terminal operated by the viewer 101.

  The second network 30 is a network different from the first network 20, and is a network that can uniquely identify a subscriber (such as the publisher 100) such as an IMS network. In addition, it is desirable that the second network 30 has sufficiently high security performance so that an identifier of certificate information described later can be safely distributed. The second network 30 includes a qualification information certification server 200, a qualification information registration server 400, a certification server 500 (in FIG. 1, a server provided in the university 501, the public office 502, and the qualification organization 503), the publisher 100 Various network elements such as access terminals to be operated are connected. The qualification information certification server 200 and the qualification information registration server 400 can access a qualification information database 300 described later.

  The qualification information disclosure server 102 publishes on the first network 20 the public profile 10 that has been declared in advance by the publisher 100. Specifically, when receiving the browsing request for the public profile 10 from the viewer 101 via the first network 20, the qualification information disclosure server 102 causes the viewer 101 to browse the public profile 10 accordingly.

  FIG. 2 shows an example of a public profile 10. The public profile 10 includes qualification information indicating the qualification (for example, a profile that can be proved by a third party such as educational background, national qualification, and private qualification) that the publisher 100 has. The public profile 10 may include information other than the qualification information. In the certification system according to the present embodiment, the qualification information disclosure server 102 distributes the certification application together with the public profile 10 to the viewer. As will be described later, when the certification application is activated by an active operation (event) of the viewer 101, it verifies the authenticity of part or all of the credential information included in the public profile 10.

  When the certification application is activated, a certification request for requesting certification for specific credential information is transmitted from the access terminal operated by the viewer 101 to the credential certification server 200 via the first network 20. Then, the qualification information disclosure server 102 transmits this certification request to the credential information certification server 200 via the interface 103. The certification request includes a publisher identifier for uniquely identifying the target publisher 100 on the second network 30 (for example, ID: kokai-sha in FIG. 1) and a qualification for identifying the target qualification information. Information identifier. The publisher identifier is, for example, a SIP URI.

  The interface 103 is an interface using, for example, SOAP (Simple Object Access Protocol) or REST (Representational State Transfer), and couples the credential disclosure server 102 and the credential certification server 200.

  As shown in FIG. 3, the qualification information certification server 200 includes a proof request reception unit 201, a proof request analysis unit 202, a qualification information database operation unit 203, a query request generation unit 204, a query request transmission unit 205, and a query result reception unit 206. , A query result analysis unit 207, a proof response generation unit 208, and a proof response transmission unit 209.

The certification request reception unit 201 receives a certification request from the qualification information disclosure server 102 via the interface 103. The certification request analysis unit 202 analyzes the content of the certification request received by the certification request reception unit 201.
The qualification information database operation unit 203 makes an inquiry to the qualification information database 300 based on the analysis result of the proof request by the proof request analysis unit 202. Specifically, the qualification information database operation unit 203 accesses the qualification information database 300 and acquires the inquiry content and the inquiry destination corresponding to the qualification information that is the subject of the certification request. The inquiry content is a declaration identifier (specific description will be described later) of the qualification information that is the target of the certification request. The inquiry destination is connected to the second network 30 and is uniquely identified on the second network 30 by an inquiry destination identifier (for example, ID: daigaku, ID: kankoucho, ID: shikaku-dantai in FIG. 1). Is done. The reference identifier is, for example, a SIP URI.

  The reference destination is a proof server 500 provided in an organization (for example, a university 501, a public office 502, a qualifying group 503, etc.) that manages information of a qualification holder (qualification holder) corresponding to the qualification information that is the subject of the certification request. It is. The certification server 500 is assigned to identify a credential holder identifier that uniquely identifies the credential holder on the second network 30 and certificate information that proves that the credential holder has the qualification. A certificate information database 600 (for example, a degree holder database 601 managed by the university 501, a national exam passer database 602 managed by the government office 502, and a qualifying organization 503). Qualification acquirer information database 603 or the like. The certificate identifier may be determined in various ways at each reference destination, such as a serial number given to the qualification holder, a qualification examination test number, a registration number with the qualification authority.

  The inquiry request generation unit 204 generates an inquiry request based on the inquiry content and the inquiry destination acquired by the qualification information database operation unit 203. The inquiry request transmission unit 205 transmits the inquiry request generated by the inquiry request generation unit 204 to the certification server 500 via the second network 30.

  As illustrated in FIG. 3, the certification server 500 includes a query request receiving unit 510, a certificate information database access unit 520, and a query result transmission unit 530. The inquiry request reception unit 510 receives an inquiry request from the inquiry request transmission unit 205 via the second network 30. In the certificate information database access unit 520, the combination of the qualification holder identifier and the certificate identifier corresponding to the combination of the publisher identifier and the report identifier included in the inquiry request received by the inquiry request reception unit 510 is the certificate information database 600. It is confirmed whether it is held in. The inquiry result transmission unit 530 returns the inquiry result from the certificate information database access unit 520 to the credential information certification server 200 via the second network 30.

  The inquiry result receiving unit 206 receives the inquiry result via the second network 30. The inquiry result analyzing unit 207 analyzes the contents of the inquiry result received by the inquiry result receiving unit 206. The proof response generation unit 208 generates a proof response to the proof request based on the analysis result of the inquiry result analysis unit 207. The certification response transmission unit 209 returns the certification response generated by the certification response generation unit 208 to the qualification information disclosure server 102 via the interface 103. The qualification information disclosure server 102 transmits the received certification response to the viewer 101 via the first network 20.

  In the qualification information database 300, a publisher identifier of the publisher 100 and a reporting identifier previously reported from the publisher 100 in order to prove the authenticity of the qualification information are stored in association with each other. The qualification information corresponding to the publisher 100 may be one item or a plurality of items. Individual credentials are identified by a credentials identifier. A report identifier is previously reported from the publisher 100 regarding each qualification information. The credential information database 300 searches for a report identifier corresponding to a publisher identifier and a qualification information identifier by an operation from the credential certification server 200.

  For example, as shown in FIG. 4A, the credential information database 300 holds each publisher identifier (qualification information certification service user ID in FIG. 4A) and a certificate table number indicating a certificate table corresponding to each publisher identifier. You may have a table to do. As shown in FIGS. 4B and 4C, a qualification information identifier (certificate ID in FIGS. 4B and 4C) for identifying individual qualification information of each publisher, and an inquiry destination identifier (FIG. 4B and FIG. 4C) corresponding thereto. The ID of the qualification authority in FIG. 4C) and the declaration identifier (the certificate number in FIGS. 4B and 4C) may be held in the certificate table corresponding to each certificate table number.

  The qualification information registration server 400 includes a registration request reception unit 401, a registration request analysis unit 402, a qualification information database operation unit 403, a registration response generation unit 404, and a registration response transmission unit 405. As shown in FIG. 5A, the qualification information registration server 400 acquires the qualification information 11 to be registered (hereinafter simply referred to as qualification information 11) from the publisher 100 via the second network 30, and uses this as the qualification information. Register in the database 300. The qualification information 11 includes a reference destination identifier that uniquely identifies on the second network 30 a reference destination that can prove that the publisher 100 has a specific qualification, and a publisher identifier of the publisher 100 at the reference destination. And a declaration identifier (for example, “0123456789” and “ID 9999999999” shown in FIG. 5B) declared by the publisher 100 is included as a certificate identifier associated with.

  The registration request receiving unit 401 receives a registration request for registering the qualification information 11 from the publisher 100 via the second network 30. The registration request analysis unit 402 analyzes the content of the registration request received by the registration request reception unit 401. Based on the analysis result by the registration request analysis unit 402, the qualification information database operation unit 403 associates the publisher identifier with the inquiry destination identifier and the report identifier included in the qualification information 11, and registers them in the qualification information database 300. .

  The registration response generation unit 404 generates a registration response (for example, registration completion notification) for displaying the result of the qualification information registration process to the publisher 100. The registration response transmission unit 405 transmits the registration response generated by the registration response generation unit 404 to the publisher 100 via the second network 30.

Hereinafter, the flow of the qualification information registration process will be described with reference to FIG.
The publisher 100 (assuming that the publisher identifier (ID) is (1)) transmits a connection request to the second network 30 in order to register the qualification information 11. In the second network 30, the authentication process of the publisher 100 is performed, and the authentication result is presented to the publisher 100. The authentication process here is a user authentication process normally performed in the IMS network.

  After completion of the authentication process, the publisher 100 transmits a registration request for the qualification information 11 to the qualification information registration server 400 via the second network 30. The qualification information registration server 400 acquires the registered qualification information of the publisher 100 from the qualification information database 300 in response to the received registration request. The qualification information registration server 400 provides the registered qualification information acquired from the qualification information database 300 to the publisher 100 via the second network 30. The publisher 100 transmits the qualification information 11 to the qualification information registration server 400 via the second network 30. Upon receiving the qualification information 11, the qualification information registration server 400 registers the qualification information 11 in the qualification information database 300 and receives a registration completion notification. The qualification information database 300 transmits a registration completion notification of the qualification information 11 to the publisher 100 via the second network 30. Thus, the registration process of the qualification information 11 is completed.

  As described above, proof of qualification information is provided in response to an active operation from the viewer 101 in the proof system according to the present embodiment. Specifically, as illustrated in FIG. 7A, the qualification information disclosure server 102 provides the public profile 10 to the viewer 101 on the first network 20. For example, a certification application activation button 13 for certifying the authenticity of each qualification information as shown in FIG. 7B is added to the public profile 10, and the viewer 101 operates the activation button 13 (for example, , Click) launches the proof application and provides proof of authenticity of each credential. First, a certification request for target qualification information is transmitted to the credential information disclosure server 102 via the first network 20. Then, the qualification information disclosure server 102 transmits the certification request to the qualification information certification server 200 via the interface 103. The credential certification server 200 obtains the inquiry destination and inquiry contents corresponding to the received certification request from the credential information database 300, makes an appropriate inquiry to an appropriate inquiry destination via the second network 30, and obtains an inquiry result. Get. The credential certification server 200 generates a certification response that displays the authenticity of the credential that is the subject of the certification request according to the received inquiry result, and transmits it to the credential disclosure server 102 via the interface 103. The qualification information disclosure server 102 provides the received certification response to the viewer 101 via the first network 20. Based on the provided certification response (for example, the certification logo 12 in FIG. 7B), the viewer 101 can confirm the authenticity of the credential information desired to be certified. The form of the certification logo 12 is not particularly limited, but it is desirable that the display is such that the viewer 101 can easily recognize the certification result.

Hereinafter, the flow of the proof providing process in the proof system according to the present embodiment will be described with reference to FIG.
First, the viewer 101 requests the qualification information disclosure server 102 to browse the public profile 10 including the qualification information via the first network 20 using, for example, a Web browser. Upon receiving the browsing request, the credential information public server 102 provides the certification application together with the public profile 10 to the viewer via the first network 20.

  Next, the viewer 101 activates a certification application for qualification information for which proof of authenticity is desired in the public profile 10. Note that the activation button 13 described above may be used to start the certification application, or any other method that is normally used in the technical field may be used. Upon activation of the certification application, a certification request is generated and transmitted to the credential information disclosure server 102 via the first network 20. The qualification information disclosure server 102 extracts a qualification information identifier (qualification information ID (1) in FIG. 8) for identifying the qualification information that is the target of the certification request. Then, the qualification information disclosure server 102 transmits a certification request including the qualification information ID (1) to the qualification information certification server 200 via the interface 103. The credential certification server 200 obtains a declaration identifier (certificate number (3) in FIG. 8) which is a query content for certifying the authenticity of the credential identified by the credential ID (1), and a reference destination. A reference identifier to be identified (institution side ID (2) in FIG. 8) is acquired from the qualification information database 300.

  The credential certification server 200 requests the certification server 500 identified by the institution ID (2) via the second network 30 to query the combination of the publisher identifier and the certificate number (3). . The certification server 500 inquires of the certificate information database 600 whether or not the combination of the qualification holder identifier and the certificate identifier corresponding to the combination of the publisher identifier and the certificate number (3) is registered. The certificate information database 600 replies to the certification server 500 with an inquiry result indicating whether or not the combination of the corresponding qualification holder identifier and certificate identifier is registered. The certification server 500 transmits the inquiry result to the credential certification server 200 via the second network 30. The credential certification server 200 generates a certification response based on the inquiry result, and transmits it to the credential disclosure server 102 via the interface 103. The qualification information disclosure server 102 provides the received certification response to the viewer 101 via the first network 20. This completes the proof providing process in the proof system according to the present embodiment.

  As described above, the certification system according to the present embodiment converts the certification of the credential information published on the first network 20 into the inquiry result on the second network 30 different from the first network 20. On the basis of offering. In the credential certification server 200 connected to the second network 30, the combination of the publisher identifier and the declaration identifier pre-declared by the publisher is connected to the inquiry destination (the certification server 500 on the second network 30). The certification of the qualification information is realized by inquiring of the inquiry destination whether or not it is registered in the certificate information database 600. Therefore, according to the proof system concerning this embodiment, proof of qualification information currently opened on the 1st network 20 is performed based on the inquiry on the 2nd network 30, and the proof result is the 1st Provided on the network 20. In other words, according to the certification system according to the present embodiment, the proof of the qualification information published by the publisher 100 on the first network 20 can be provided to the viewer 101 via the first network 20. It becomes possible. Therefore, the viewer 101 can easily confirm the authenticity of the credential information online without going through a complicated offline procedure such as actually obtaining a certificate of the credential information.

  Further, in the certification system according to the present embodiment, a network for browsing the qualification information (first network 20), and a network for performing an inquiry for providing proof of the authenticity of the qualification information (second network) 30). That is, the viewer 101 can confirm the authenticity of the credential information on the first network 20, but the personal information (declaration identifier, public information) of the publisher 100 used for the inquiry on the second network 30. (Certificate identifier etc.) cannot be viewed. Therefore, safety (confidentiality) is ensured with respect to the personal information of the publisher 100, and positive publication of qualification information by the publisher 100 can be expected.

  In addition, in the inquiry performed by the certification system according to the present embodiment, a report identifier that is previously reported by the publisher 100 is used. Therefore, the structure of the certificate information database 600 conventionally used at the reference destination is changed by causing the publisher 100 to declare a declaration identifier having the same format as the certificate identifier held in each certificate information database 600. Inquiry can be made without adding.

  Further, in the certification system according to the present embodiment, the certification application for starting the certification provision process is activated by the browser 101 active operation. Therefore, the viewer 101 can recognize that the provided certification result is obtained based on his / her operation and reflects the latest information.

  Furthermore, the following effects can be expected by implementing the certification system according to the present embodiment. First, since the proof of qualification information can be provided online, the viewer 101 can reduce the cost for confirming the authenticity of the qualification information and save work. In addition, since it is possible to quickly confirm the authenticity of the published credential information, business contracts such as recruitment to the publisher 100 and product ordering (and various contacts with the publisher 100 including this) may be promoted. unknown. Further, while it becomes difficult for the publisher 100 to falsify the qualification information, the authenticity can be easily verified online, which contributes to the improvement of the reliability of the qualification itself.

(Second Embodiment)
The certification system according to the second embodiment of the present invention differs from the certification system according to the first embodiment described above in the activation mode of the certification application. In the first embodiment, the certification application is activated by an active operation of the viewer 101. On the other hand, in this embodiment, the qualification information disclosure server 102 activates the certification application prior to the disclosure of the qualification information to the viewer 101. In the following description, different parts between the present embodiment and the first embodiment will be mainly described, and the same or similar parts will be omitted.

  As described above, in the certification system according to the present embodiment, the certification of qualification information is provided when the qualification information disclosure server 102 starts the certification application prior to the disclosure of the qualification information to the viewer 101. Specifically, as illustrated in FIG. 9A, the qualification information disclosure server 102 receives a browsing request for the public profile 10 from the viewer 101 on the first network 20. The reception of this browsing request triggers the credential information disclosure server 102 to activate the certification application. The credential information disclosure server 102 transmits the proof request generated by the proof application to the credential information proof server 200 via the interface 103. The credential certification server 200 obtains the inquiry destination and inquiry contents corresponding to the received certification request from the credential information database 300, makes an appropriate inquiry to an appropriate inquiry destination via the second network 30, and obtains an inquiry result. Get. In this embodiment, since the certification request is for all the qualification information corresponding to the publisher 100, a plurality of sets of inquiry destinations and inquiry contents may be acquired according to the number of items of the qualification information. The credential certification server 200 generates a certification response that displays the authenticity of all the credential information corresponding to the publisher 100 according to the received inquiry result, and transmits it to the credential publication server 102 via the interface 103. The qualification information public server 102 provides the public profile 10 reflecting the received certification response to the viewer 101 via the first network 20. Based on the provided certification response (for example, the certification logo 12 in FIG. 9B), the viewer 101 can confirm the authenticity of the credential information desired to be certified. The form of the certification logo 12 is not particularly limited, but it is desirable that the display is such that the viewer 101 can easily recognize the certification result.

Hereinafter, the flow of the proof providing process in the proof system according to the present embodiment will be described with reference to FIG.
First, the viewer 101 requests the qualification information disclosure server 102 to browse the public profile 10 including the qualification information via the first network 20 using, for example, a Web browser. Upon receiving the browsing request, the credential information disclosure server 102 activates the certification application.

The certification application generates a certification request including the publisher identifier of the publisher 100 (user ID (1) in FIG. 10). The credential information disclosure server 102 transmits a certification request to the credential information certification server 200 via the interface 103.
The credential certification server 200 identifies a query destination identifier (institution ID (2) in FIG. 10) that identifies the query destination of all the qualification information corresponding to the publisher 100 identified by the publisher identifier included in the certification request. (3), (4)) and a report identifier (certificate numbers (2) ′, (3) ′, (4) ′ in FIG. 10) are acquired from the qualification information database 300, respectively.

  The credential certification server 200 sends an inquiry request including a combination of the publisher identifier and each declaration identifier to each inquiry destination (in FIG. 10, (2) the certification server, (3) To the certification server (4). Each reference destination uses the combination of the publisher identifier and the declaration identifier included in the inquiry request to each certificate information database 600 (in FIG. 10, (2) 'certificate information database, (3)' certificate information. The database (4) ′ certificate information database) is searched, and the inquiry result is returned to the credential certification server 200 via the second network 30.

  The credential certification server 200 generates a certification response based on the inquiry result from each inquiry destination, and transmits it to the credential disclosure server 102 via the interface 103. The qualification information public server 102 provides the public profile 10 reflecting the received certification response to the viewer 101 via the first network 20. This completes the proof providing process in the proof system according to the present embodiment.

  As described above, the certification system according to the present embodiment is different from the above-described first embodiment in that the qualification information disclosure server 102 instead of the viewer 101 provides the public profile 10 to the viewer 101. The certification application is running. Therefore, according to the certification system according to the present embodiment, the viewer 101 can immediately confirm the authenticity of the qualification information without performing any additional operation when browsing the qualification information. In addition, according to the proof system concerning this embodiment, the same effect as the proof system concerning a 1st embodiment is acquired.

  Note that the present invention is not limited to the above-described embodiments as they are, and can be embodied by modifying the constituent elements without departing from the scope of the invention in the implementation stage. Various inventions can be formed by appropriately combining a plurality of constituent elements disclosed in the above embodiments. Further, for example, a configuration in which some components are deleted from all the components shown in each embodiment is also conceivable. Furthermore, you may combine suitably the component described in different embodiment.

  For example, it is possible to provide a program related to the processing of each embodiment described above by storing it in a computer-readable storage medium. The storage medium may be a computer-readable storage medium such as a magnetic disk, optical disk (CD-ROM, CD-R, DVD, etc.), magneto-optical disk (MO, etc.), semiconductor memory, etc. For example, the storage format may be any form.

  Further, the program relating to the processing of each embodiment described above may be configured to be provided by being stored on a computer connected to a network such as the Internet and downloaded via the network.

DESCRIPTION OF SYMBOLS 10 ... Public profile 11 ... Qualification information to be registered 12 ... Certification logo 13 ... Start button 20 ... First network 30 ... Second network 100 ... Publisher DESCRIPTION OF SYMBOLS 101 ... Browser 102 ... Credential information disclosure server 103 ... Interface 200 ... Credential information certification server 201 ... Certification request receiving unit 202 ... Certification request analysis unit 203 ... Credential information database Operation unit 204 ... inquiry request generation unit 205 ... inquiry request transmission unit 206 ... certification result reception unit 207 ... inquiry result analysis unit 208 ... certification response generation unit 209 ... certification response transmission unit 300 ... Qualification information database 400 ... Qualification information registration server 401 ... Registration request receiving unit 402 ... Registration request analysis unit 403 ... Qualification Information database operation unit 404 ... registration response generation unit 405 ... registration response transmission unit 500 ... certification server 501 ... university 502 ... government office 503 ... qualified organization 510 ... inquiry request reception unit 520 ... Certificate information database access unit 530 ... Inquiry result transmission unit 600 ... Certificate information database 601 ... Degree holder database 602 ... National exam passer database 603 ... Qualification holder Information database

Claims (10)

A credential disclosure server that publishes qualification information indicating the qualification held by the publisher via the first network;
Assigned to a credential holder identifier for identifying a credential holder having the qualification on a second network different from the first network, and certificate information proving that the credential holder holds the qualification A certificate information database that holds the associated certificate identifier in association with each other,
A publisher identifier for identifying the publisher on the second network, and a declaration identifier previously declared by the publisher as a certificate identifier assigned to certificate information that proves the authenticity of the qualification information; A credential database that stores
A certification server connected to the second network and accessible to the certificate information database;
Upon receiving a proof request that is connected to the second network and requests proof of the credential information from the credential information public server via an interface, the credential information that is the target of the proof request by accessing the credential database Whether the combination of the qualification holder identifier and the certificate identifier corresponding to the combination of the publisher identifier and the declaration identifier is held in the certificate database via the certification server. And a credential certification server that certifies the qualification information subject to the certification request.   The certification request is generated by an active operation from a viewer of the credential information, is transmitted to the credential information disclosure server via the first network, and is transmitted to the credential certification server by the credential information disclosure server. 2. The certification system according to claim 1, wherein the certification system is transferred via the interface.   The proof according to claim 1, wherein the proof request is generated by the qualification information public server prior to publishing the credential information to a viewer and transmitted to the credential information proof server via the interface. system.   A qualification information registration server connected to the second network and registering the declaration identifier in the qualification information database in association with the publisher identifier according to a declaration from the publisher is further provided. The certification system according to claim 1.   The credential information public server receives a proof response to the proof request from the credential information proof server via the interface, and transmits the proof response to the viewer via the first network. The certification system according to claim 1. A credential disclosure server that publishes qualification information indicating the qualification held by the publisher via the first network;
Assigned to a credential holder identifier for identifying a credential holder possessing the qualification on a second network different from the first network, and certificate information proving that the credential holder possesses the qualification A certificate information database that holds the associated certificate identifier in association with each other,
A publisher identifier for identifying the publisher on the second network, and a declaration identifier previously declared by the publisher as a certificate identifier assigned to certificate information that proves the authenticity of the qualification information; A credential database that stores
A certification server connected to the second network and accessible to the certificate information database;
In a certification method performed by a system comprising a credential certification server connected to the second network,
When the credential certification server receives a certification request for requesting proof of the credential information from the credential disclosure server via the interface, the credential certification server accesses the credential database and declares the qualification information that is the subject of the certification request. An identifier is obtained, and an inquiry is made through the certification server as to whether or not the combination of the qualification holder identifier and the certificate identifier corresponding to the combination of the publisher identifier and the declaration identifier is held in the certificate database. A certification method characterized in that certification of qualification information as a target of the certification request is performed.   The certification request is generated by an active operation from a viewer of the credential information, is transmitted to the credential information disclosure server via the first network, and is transmitted to the credential certification server by the credential information disclosure server. The certification method according to claim 6, wherein the certification is transferred via the interface.   7. The certification according to claim 6, wherein the certification request is generated by the certification information disclosure server prior to the disclosure of the certification information to a viewer and transmitted to the certification information certification server via the interface. Method.   The system further includes a qualification information registration server that is connected to the second network and registers the declaration identifier in the qualification information database in association with the publisher identifier in response to a declaration from the publisher. The proving method according to claim 6, wherein:   The credential disclosure server receives a proof response to the proof request from the credential proof server via the interface, and transmits the proof response to the viewer via the first network. The proving method according to claim 6.

Images