JP2013187698A - Secret information transmission method and system for transmitting different pieces of secret information from terminal to each company server - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a secret information transmission method and system for allowing an authentication server to perform terminal authentication when a terminal transmits different pieces of secret information to multiple company servers, and allowing the authentication server not to be able to decode the different pieces of secret information to be transmitted to the respective company servers.SOLUTION: After an authentication server authenticates a terminal, the terminal generates first encryption information by encrypting first information to be transmitted to a settlement company server with the use of a settlement company key, generates second encryption information by encrypting second information to be transmitted to a delivery company server with the use of a delivery company key, and transmits the pieces of encryption information to the authentication server. The authentication server generates first signature encryption information by giving a signature to the first encryption information with the use of an authenticator key, and generates second signature encryption information by giving a signature to the second encryption information with the use of an authenticator key. Then, the first signature encryption information is transmitted to the first company server, and the second signature encryption information is transmitted to the second company server.

Description

  The present invention relates to a technique for transmitting confidential information from a terminal to a server. The confidential information is, for example, personal information of the user, and relates to a technology for transmitting the confidential information.

  Conventionally, there are TLS (Transport Layer Security) and SSL (Secure Socket Layer), for example, as protocols for transmitting and receiving encrypted data via the Internet between a terminal and a server. This is a technology for encrypting WWW (World Wide Web) and FTP (File Transfer Protocol) data. For example, personal information such as credit card numbers, addresses, and telephone numbers can be secured with confidentiality. Can be sent to. TLS and SSL are technologies that prevent data eavesdropping, falsification, and spoofing by combining security technologies such as public key cryptography, private key cryptography, digital certificates, and hash functions.

  By using such a technique, it is possible to authenticate that the connection destination server is a legitimate server as viewed from the terminal. On the other hand, as viewed from the server, it is impossible to authenticate whether or not the user operating the terminal is an authorized user. For this purpose, the server transmits a user ID and password inquiry page to the terminal after successful authentication such as TLS. The terminal causes the user to input a user ID and a password, and transmits the information to the server. Thereby, the server can authenticate the user who operates the terminal (user authentication).

  In addition, as a technology for authenticating a mobile terminal such as a mobile phone or a smartphone, there is a SIM (Subscriber Identity Module) card inserted into the mobile terminal. The SIM card is provided by a mobile phone operator and stores a “unique identification number” called IMSI (International Mobile Subscriber Identity). The authentication server of the mobile phone network facility can authenticate the mobile terminal by associating the unique identification number of the SIM card with the telephone number.

RFC 5246-The Transport Layer Security (TLS) Protocol Version 1.2, [online], [Search February 4, 2012], Internet <URL: http://tools.ietf.org/html/rfc5246>

  Here, the case where a portable terminal transmits separate confidential information to each provider server is assumed. For example, assume that the user purchases a product from a shopping site server for an online shopping system. In this case, the amount of the product is collected from the user and paid to the store to the “settlement operator server” and the “delivery operator server” for delivering the product to the user. You need to send personal information. According to the prior art, the shopping site server has registered in advance personal information necessary for settlement and delivery, and the shopping site server performs user authentication using the user ID and password transmitted from the mobile terminal. There was a need.

  In addition, when personal information is transmitted directly from the terminal to each provider server, according to the TLS authentication method, the mobile terminal establishes a communication link separately for each provider server, and separate communication links for each communication link You need to send personal information.

  In the case of the SIM card authentication method, the authentication server needs to distribute the personal information received from the mobile terminal to each business operator server after authenticating the mobile terminal. That is, although the authentication server does not require the contents of the personal information, the authentication server must decrypt the personal information received from the mobile terminal and distribute it to each business server.

  Here, it is preferable that the authentication server that relays the personal information cannot decrypt the confidential information. That is, it is necessary that the personal information transmitted from the mobile terminal can be decrypted only by the provider server. In this case, each business operator server needs to execute terminal authentication, user authentication, and decryption on the encrypted information with respect to the mobile terminal. That is, it is not possible to use terminal authentication or user authentication in an authentication server installed in a mobile phone network facility.

  Therefore, according to the present invention, when the terminal transmits different confidential information to a plurality of provider servers, the authentication server performs terminal authentication and the authentication server decrypts different confidential information to be transmitted to each provider server. It is an object of the present invention to provide a method and system for transmitting confidential information that cannot be performed.

According to the present invention, in the secret information transmission method in the system in which the authentication server, the first operator server, the second operator server, and the terminal are connected via the network,
The terminal holds a first business key that can be decrypted by the first business server and a second business key that can be decrypted by the second business server,
The authentication server holds an authenticator key whose signature can be verified by the first operator server and the second operator server,
A first step in which the authentication server authenticates the terminal based on the unique identification information of the terminal;
The terminal encrypts the first information to be transmitted to the first operator server with the first operator key to generate the first encrypted information, and the terminal to be transmitted to the second operator server A second step of generating the second encrypted information by encrypting the information of 2 with the second operator key;
A third step in which the terminal transmits the first encrypted information and the second encrypted information to the authentication server;
The authentication server generates the first signature encryption information by giving a signature to the first encrypted information by the authenticator key, and also adds the signature to the second encryption information by the authenticator key and the second A fourth step of generating the signature encryption information of
A fifth step in which the authentication server transmits the first signature encryption information to the first operator server and transmits the second signature encryption information to the second operator server;
A sixth step in which the first operator server verifies and decrypts the signature from the first signature encryption information and obtains the first information;
The second operator server has a seventh step of obtaining the second information by verifying and decrypting the signature from the second signature encryption information.

According to another embodiment of the secret information transmission method of the present invention,
The first operator key held by the terminal is a first operator public key for the first operator private key of the first operator server,
The second operator key held by the terminal is a second operator public key for the second operator private key of the second operator server,
The certifier key held by the authentication server is the certifier private key of the authentication server itself,
The first operator server holds the first operator private key of the first operator server itself and the certifier public key for the certifier private key of the authentication server,
The second operator server also preferably holds the second operator private key of the second operator server itself and the certifier public key.

According to another embodiment of the secret information transmission method of the present invention,
The authentication server further holds a first operator key that can be decrypted by the first operator server,
For the fourth step, the authentication server generates third encrypted information by encrypting the third information related to the user of the terminal with the first operator key, and the third encrypted information is used as the authenticator. Generating a third signature encryption information by giving a signature by a key;
For the fifth step, the authentication server sends the third signature encryption information to the first operator server,
For the sixth step, the first operator server that has received the third signature encryption information verifies and decrypts the signature from the third signature encryption information to obtain the third information, and / or Or
The authentication server further holds a second operator key that can be decrypted by the second operator server,
For the fourth step, the authentication server encrypts the fourth information related to the user of the terminal with the second operator key to generate fourth encrypted information, and the fourth encrypted information is used as the authenticator. A signature is given by a key to generate fourth signature encryption information,
For the fifth step, the authentication server sends the fourth signature encryption information to the second operator server,
Regarding the seventh step, it is also preferable that the second operator server that has received the fourth signature encryption information verifies and decrypts the signature from the fourth signature encryption information to obtain the fourth information. .

According to another embodiment of the secret information transmission method of the present invention,
The first operator key held by the authentication server is a first operator public key with respect to the first operator private key of the first operator server,
The second operator key held by the authentication server is also preferably a second operator public key for the second operator private key of the second operator server.

According to another embodiment of the secret information transmission method of the present invention,
The authentication server is provided as a mobile phone network business facility.
The terminal is a mobile terminal that communicates with an authentication server via a mobile phone network,
About a 1st step, it is also preferable that a portable terminal transmits the user authentication information based on a user input to an authentication server, and an authentication server authenticates the said user based on user authentication information.

According to another embodiment of the secret information transmission method of the present invention,
The terminal has a contactless communication function,
It is also preferable that the terminal receives first information and second information transmitted wirelessly from a reader / writer device equipped with a non-contact communication function.

According to another embodiment of the secret information transmission method of the present invention,
The reader / writer device transmits a shopping company identifier, an amount, a payment company identifier and a delivery company identifier designated by the shopping company to the mobile terminal,
The first operator server corresponds to the payment operator identifier,
The second carrier server corresponds to the delivery carrier identifier,
The terminal has registered the user name, address, phone number and card number in advance as user information,
It is also preferable that the terminal includes the shopping company identifier, name, amount, and card number as the first information, and includes the shopping company identifier, name, address, and telephone number as the second information.

According to another embodiment of the secret information transmission method of the present invention,
The reader / writer device is connected to a user-operable personal computer,
It is also preferable that the personal computer accesses the electronic commerce site server in response to a user operation and transmits information from the reader / writer device to the portable terminal when checking out from the shopping cart.

According to the present invention, in the confidential information transmission system in which the authentication server, the first operator server, the second operator server, and the terminal are connected via a network,
The terminal
A company key holding means for holding a first company key that can be decrypted by the first company server and a second company key that can be decrypted by the second company server;
The first information to be transmitted to the first operator server is encrypted with the first operator key to generate the first encrypted information, and the second information to be transmitted to the second operator server Encrypted information generating means for generating the second encrypted information by encrypting with the second business operator key,
Encryption information transmitting means for transmitting the first encrypted information and the second encrypted information to the authentication server,
The authentication server
Certifier key holding means for holding a certifier key whose signature can be verified by the first provider server and the second provider server;
Terminal authentication means for authenticating the terminal based on the terminal's unique identification information;
The first encrypted information is signed by an authenticator key to generate first signature encrypted information, and the second encrypted information is signed by an authenticator key and second signature encryption is performed Signature encryption information generating means for generating information;
Signature encryption information transmitting means for transmitting the first signature encryption information to the first operator server and transmitting the second signature encryption information to the second operator server;
The first operator server verifies and decrypts the signature from the first signature encryption information, obtains the first information,
The second service provider server obtains the second information by verifying and decrypting the signature from the second signature encryption information.

According to another embodiment of the secret information transmission system of the present invention,
The authentication server
A provider key holding means for holding a first provider key that can be decrypted by the first provider server;
The signature encryption information generation means generates third encryption information by encrypting the third information about the user of the terminal with the first operator key, and the third encryption information with the authenticator key. Generate a third signature encryption information by giving a signature;
The signature encryption information transmitting means transmits the third signature encryption information to the first operator server,
The first operator server that receives the third signature encryption information verifies and decrypts the signature from the third signature encryption information to obtain the third information,
And / or
The authentication server
A provider key holding means for holding a second provider key that can be decrypted by the second provider server;
The signature encryption information generation unit generates fourth encryption information by encrypting the fourth information related to the user of the terminal with the second operator key, and the fourth encryption information with the authenticator key. A signature is added to generate fourth signature encryption information,
The signature encryption information transmitting means transmits the fourth signature encryption information to the second operator server,
It is also preferable that the second operator server that receives the fourth signature encryption information obtains the fourth information by verifying and decrypting the signature from the fourth signature encryption information.

According to another embodiment of the secret information transmission system of the present invention,
The authentication server is provided as a mobile phone network business facility.
The terminal is a mobile terminal that communicates with an authentication server via a mobile phone network,
It is also preferable that the mobile terminal transmits user authentication information based on the user input to the authentication server, and the authentication server authenticates the user based on the user authentication information.

  According to the secret information transmitting method and system of the present invention, when the terminal transmits different secret information to a plurality of provider servers, the authentication server performs terminal authentication and is different to be transmitted to each provider server. It is possible to prevent the secret information from being decrypted by the authentication server.

It is a system configuration diagram in the present invention. It is a basic sequence diagram in the present invention. It is explanatory drawing showing the user interface screen and confidential information of a portable terminal. FIG. 3 is a sequence diagram capable of transmitting information of an authentication server in addition to FIG. 2. It is a block diagram in which a portable terminal can receive confidential information from a reader / writer device. It is a functional block diagram of each apparatus in the secret information transmission system of this invention.

  Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.

  FIG. 1 is a system configuration diagram according to the present invention.

  According to FIG. 1, the mobile terminal 1 can be connected to the Internet via a mobile phone network. In the following description, the user-operable terminal is assumed to be a mobile terminal such as a mobile phone or a smartphone. An authentication server 2 is installed as a part of the mobile phone network facility, and the authentication server 2 can authenticate the mobile terminal 1 connected to the mobile phone network (terminal authentication).

  Further, the first business server 31 and the second business server 32 as the business server 3 and the shopping site server 4 are connected to the Internet. The mobile terminal 1 can communicate with these servers only through the authentication server 2 of the mobile phone network facility. That is, the authentication server 2 routes the data packet between the mobile terminal 1 and the business server 3. The portable terminal 1 transmits a data packet toward the URL (Uniform Resource Locator) of the business server 3, and the authentication server 2 controls the route.

Here, it is assumed that the user operating the mobile terminal 1 purchases a product from the shopping site server 4. In this case, the personal information of the user is a “settlement operator server” for collecting the amount of the product from the user and paying the store, and a “delivery operator server” for delivering the product to the user. Need to be sent to. According to FIG. 1, each provider server is assumed as follows, for example.
First operator server: settlement operator server 31
Second carrier server: delivery carrier server 32
In the following description, it is assumed that personal information is transmitted to two service servers, but of course, it is also possible to use three or more service servers.

  In such a case, the mobile terminal 1 has different contents between the first information to be transmitted to the settlement operator server 31 and the second information to be transmitted to the delivery operator server 32. For example, the first information to be transmitted to the settlement operator server 31 requires at least a credit card number for settlement. On the other hand, the second information to be transmitted to the delivery company server 32 requires at least an address (and a telephone number) for delivery.

  According to the present invention, the first information and the second information must not be decodable by the authentication server. Furthermore, the first information must be decipherable only by the settlement operator server, and the second information must be decipherable only by the delivery operator.

FIG. 2 is a basic sequence diagram in the present invention.
FIG. 3 is an explanatory diagram showing a user interface screen and confidential information of the mobile terminal.

(S20) First, the user uses the mobile terminal 1 to put the product A in the shopping cart on the site in the shopping site server 4. The user is going to purchase a product A having a price of ¥ 15,000. And it checks out according to user operation, and progresses to a cash register. Here, the user clicks a final OK button, for example, and confirms the purchase of the product A.

At this time, according to S20 of FIG. 3, the mobile terminal 1 acquires, for example, the following information from the shopping site server 4.
Shopping company ID
Payment company URL
Delivery company URL
Product ID
Amount of money

(S21) The mobile terminal 1 has inserted a SIM card storing a unique identification number. The authentication server 2 can authenticate the mobile terminal 1 by connecting the unique identification number of the SIM card and the telephone number when the mobile terminal 1 connects to the mobile phone network (terminal authentication).

  At this time, it is also preferable that the mobile terminal 1 allows the user to input a PIN (Personal Identification Number) code as in S21 of FIG. The “PIN code” is a personal identification number for user authentication, such as a four-digit number. The SIM card stores a valid user's PIN code in advance, and compares the PIN code input by the user with the PIN code stored in advance. In the SIM card, for example, if the PIN code input by the user is mistaken continuously for a predetermined number of times (for example, 3 times), the SIM card is locked and the PIN code cannot be further input. The mobile terminal 1 can authenticate the user itself with the PIN code (user authentication).

  Further, the user authentication information is not limited to PIN, and password, point touch, and biometric authentication information may be used.

(S22) The mobile terminal 1 holds the following keys in advance.
The settlement operator public key A for the settlement operator private key of the settlement operator server 31
(First provider key that can be decrypted by the first provider server)
Delivery company public key B for delivery company private key of delivery company server 32
(Second provider key that can be decrypted by the second provider server)

After the terminal authentication and / or user authentication is successful, the mobile terminal 1 encrypts the first information to be transmitted to the settlement operator server 31 with the settlement operator public key A and 1 encryption information is generated. For example, the first information is as follows.
First information to be transmitted to the settlement operator server 31:
Payment operator URL (Payment operator ID)
Shopping company ID (payee)
Product ID
Amount of money
Full name
Credit card number (and expiration date) (payment source)

Further, the mobile terminal 1 encrypts the second information to be transmitted to the delivery company server 32 with the delivery company public key B to generate second encrypted information. For example, the second information is as follows.
Second information to be transmitted to the delivery company server 32:
Delivery company URL (Delivery company ID)
Product ID
Full name
Street address
phone number

(S23) Then, the portable terminal 1 transmits the first encrypted information and the second encrypted information to the authentication server 2.

(S24) The authentication server 2 holds the following keys.
Own certifier private key (Certifier key whose signature can be verified by the first provider server and the second provider server)

  The authentication server 2 receives the first encrypted information and the second encrypted information from the mobile terminal 1, and then gives a signature to the first encrypted information with the authenticator key to obtain the first signature encrypted information. Is generated. Further, the authentication server 2 generates a second signature encryption information by giving a signature to the second encryption information with the authenticator key.

(S25) Then, the authentication server 2 transmits the first signature encryption information toward the settlement operator URL included in the first information. Further, the authentication server 2 transmits the second signature encryption information toward the settlement operator URL included in the second information.

(S26) The settlement operator server 31 holds the following keys.
Own payment operator private key A
(Key for decrypting the first encrypted information encrypted by the portable terminal)
Certifier public key C for certifier private key of authentication server
(Key for signature verification for the first signature encryption information signed by the authentication server)

  After receiving the first signature encryption information, the settlement operator server 31 verifies and decrypts the signature from the first signature encryption information, and acquires the first information. Thereby, the settlement operator server 31 can obtain personal information necessary for settlement for the user of the mobile terminal 1. Then, the settlement operator server 31 can withdraw a predetermined amount from the credit card number of the user and transfer it to the account of the shopping operator ID that has sold the product A.

The delivery company server 32 has the following keys.
Own delivery company private key B
(Key for decrypting the second encrypted information encrypted by the portable terminal)
Certifier public key C for certifier private key of authentication server
(Key for signature verification for the second signature encryption information signed by the authentication server)

  After receiving the second signature encryption information, the delivery company server 32 verifies and decrypts the signature from the second signature encryption information, and acquires the second information. Thereby, the delivery company server 32 can obtain personal information necessary for delivery for the user of the mobile terminal 1. Then, the delivery company server 32 can collect the product A from the shopping company with the shopping company ID and deliver the product A to the user's address.

(S27) Finally, the settlement operator server 31 transmits a settlement completion notification to the mobile terminal 1 via the authentication server 2. In addition, the delivery company server 32 transmits a delivery request completion notification to the mobile terminal 1 via the authentication server 2. Thereby, according to S27 of FIG. 3, it can be clearly shown to the user who operates the portable terminal 1 that the settlement and the delivery request for the product A are completed.

  FIG. 4 is a sequence diagram capable of transmitting authentication server information in addition to FIG.

According to FIG. 4, compared with FIG. 2, the authentication server 2 further holds the following keys.
Payment operator public key A for payment operator private key of payment operator server
(First provider key that can be decrypted by the first provider server)
Delivery company public key B for delivery company private key of delivery company server
(Second provider key that can be decrypted by the second provider server)

(S24) The authentication server 2 optionally generates third encrypted information by encrypting the third information related to the user of the mobile terminal 1 with the first operator key, and the third encryption The information is signed by the authenticator key C to generate third signature encryption information. The third information is, for example, user personal information that the authentication server 2 can know and is necessary for the settlement operator server 31.
Similarly, the authentication server 2 generates the fourth encrypted information by encrypting the fourth information related to the user of the mobile terminal 1 with the second business operator key, and uses the fourth encrypted information as the authenticator. A signature is given by the key C to generate fourth signature encryption information. The fourth information is, for example, user personal information that the authentication server 2 can know and is necessary for the delivery company server 32.

(S25) The authentication server 2 optionally transmits the third signature encryption information to the settlement operator server 31.
Further, the authentication server 2 optionally transmits the fourth signature encryption information to the delivery carrier server 32.

(S26) When receiving the third signature encryption information, the settlement operator server 31 verifies and decrypts the signature from the third signature encryption information, and acquires the third information.
Further, when receiving the fourth signature encryption information, the delivery company server 32 verifies and decrypts the signature from the fourth signature encryption information, and acquires the fourth information.

  FIG. 5 is a configuration diagram in which the portable terminal can receive confidential information from the reader / writer device.

  The portable terminal 1 is equipped with a non-contact communication function such as NFC (Near Field Communication). Then, when the user brings the mobile terminal 1 close to the external reader / writer device 5, communication is performed without contact. At this time, the portable terminal 1 can read the first information to be transmitted to the settlement operator server 31 and the second information to be transmitted to the delivery operator server 32 from the reader / writer device 5.

  According to FIG. 5A, the reader / writer device 5 is connected to a personal computer 6 that can be operated by the user. The user accesses the shopping site server 4 on the browser of the personal computer 6 and intends to purchase a product. Here, it is assumed that the user puts the product A into the shopping cart, proceeds to the cash register, and confirms the purchase of the product A. At this time, the first information and the second information, which are personal information, are transferred from the personal computer 6 to the reader / writer device 5. Thereafter, when the user brings the portable terminal 1 close to the reader / writer device 5, the portable terminal 1 can read the first information and the second information from the reader / writer device 5 by non-contact communication.

  According to FIG.5 (b), the reader / writer apparatus 5 is a tag which memorize | stored beforehand the 1st information and 2nd information which are personal information. When the user brings the portable terminal 1 close to the reader / writer device 5, the portable terminal 1 can read the first information and the second information from the reader / writer device 5 by non-contact communication.

  FIG. 6 is a functional configuration diagram of each device in the confidential information transmission system of the present invention.

  The mobile terminal 1 includes a communication interface unit 101 connected to a mobile phone network, a user interface unit 102 that functions as an input / output for a user like a touch panel display, a SIM card 103, and an NFC unit 104 in hardware. Mount. The NFC unit 104 reads each piece of information to be transmitted to each provider server from the external reader / writer device 5 by non-contact communication.

  In addition, the mobile terminal 1 includes a provider key holding unit 111, an encrypted information generation unit 112, an encrypted information transmission unit 113, and an authentication unit 114. These functional components are realized by executing a program that causes a computer mounted on the mobile terminal to function.

  The provider key holding unit 111 includes a first provider key (public key) that can be decrypted by the first provider server, and a second provider key (public key) that can be decrypted by the second provider server. And hold.

  The encrypted information generation unit 112 generates first encrypted information by encrypting the first information to be transmitted to the first operator server with the first operator key, and the second operator server. The second information to be transmitted to the server is encrypted with the second operator key to generate second encrypted information. The generated first encryption information and second encryption information are output to the encryption information transmission unit 113.

  The encryption information transmission unit 113 transmits the first encryption information and the second encryption information to the authentication server 2.

  The authentication unit 114 receives terminal authentication by transmitting the unique identification information of the SIM card 103 to the authentication server 2. In addition, when the PIN code stored in advance and the PIN code input from the user interface unit 102 match, the SIM card 103 determines that the user authentication is successful and notifies the authentication unit 114 to that effect. As a result, the authentication unit 114 determines that the user authentication is successful.

  The authentication server 2 includes a communication interface unit 20 connected to a mobile phone network, an authenticator key holding unit 21, a signature encryption information generation unit 22, a signature encryption information transmission unit 23, a terminal authentication unit 24, a business Person key holding unit 25. These functional components excluding the communication interface unit 20 are realized by executing a program that causes a computer mounted on the authentication server to function.

  The authenticator key holding unit 21 holds an authenticator key (secret key) that can be verified by the first operator server 31 and the second operator server 32.

  The signature encryption information generation unit 22 generates a first signature encryption information by giving a signature to the first encryption information with an authenticator key, and also signs the second encryption information with an authenticator key. To generate second signature encryption information. The generated first signature encryption information and second signature encryption information are output to the signature encryption information transmission unit 23.

  The signature encryption information transmission unit 23 transmits the first signature encryption information to the first operator server 31 and transmits the second signature encryption information to the second operator server 32.

  The terminal authentication unit 24 authenticates the terminal based on the unique identification information received from the terminal 1.

The first operator server 31 verifies and decrypts the signature from the first signature encryption information, and acquires the first information.
The second operator server 32 verifies and decrypts the signature from the second signature encryption information, and acquires the second information.

  Further, the authentication server 2 further includes a business operator key holding unit 25. The provider key holding unit 25 holds a first provider key and / or a second provider key that can be decrypted by the first provider server.

  In this case, the signature encryption information generation unit 22 generates the third encryption information by encrypting the third information related to the user of the terminal with the first business operator key, and the third encryption information is generated. A signature is given by the authenticator key to generate third signature encryption information. Then, the signature encryption information transmission unit 23 transmits the third signature encryption information to the first operator server. Thus, the first operator server that has received the third signature encryption information verifies and decrypts the signature from the third signature encryption information, and acquires the third information.

  In addition, the signature encryption information generation unit 22 generates the fourth encryption information by encrypting the fourth information related to the user of the terminal with the second operator key, and authenticates the fourth encryption information. A fourth signature encryption information is generated by assigning a signature with the user key. Then, the signature encryption information transmission unit 23 transmits the fourth signature encryption information to the second operator server. Accordingly, the second operator server that has received the fourth signature encryption information verifies and decrypts the signature from the fourth signature encryption information, and acquires the fourth information.

  As described above in detail, according to the confidential information transmission method and system of the present invention, when the terminal transmits different confidential information to a plurality of provider servers, the authentication server performs terminal authentication, Different confidential information to be transmitted to each provider server can be prevented from being decrypted by the authentication server.

  According to the present invention, by separating terminal / user authentication and authentication of personal information in the authentication server 2, the authentication server (authentication company) avoids the risk of decrypting personal information and The server (operator) reduces the processing burden of terminal / user authentication. Also, as a user, the user authentication is performed only by inputting a PIN code instead of inputting a user ID and a password, so that the operation load is reduced.

  In addition, according to the secret information transmission method and system of the present invention, application to an O2O (Online to Offline) business is assumed. “O2O” is mainly in the field of e-commerce (electronic commerce), where online and offline purchasing activities are linked, or online activities affect purchasing at actual stores, Means. According to the present invention, an actual settlement business operator and a delivery business operator can simultaneously start a business transaction by a business transaction between the shopping site server and the terminal.

  Various changes, modifications, and omissions of the above-described various embodiments of the present invention can be easily made by those skilled in the art. The above description is merely an example, and is not intended to be restrictive. The invention is limited only as defined in the following claims and the equivalents thereto.

DESCRIPTION OF SYMBOLS 1 Mobile terminal 101 Communication interface part 102 User interface part 103 SIM card 104 NFC part 111 Provider key holding part 112 Encrypted information generation part 113 Encrypted information transmission part 114 Authentication part 2 Authentication server 20 Communication interface part 21 Certifier key holding Unit 22 signature encryption information generation unit 23 signature encryption information transmission unit 24 terminal authentication unit 25 operator key holding unit 31 settlement operator server, first operator server 32 delivery operator server, second operator server 4 Shopping site server 5 Reader / writer device 6 Personal computer

Claims (11)

In the method for transmitting confidential information in a system in which an authentication server, a first operator server, a second operator server, and a terminal are connected via a network,
The terminal holds a first business key that can be decrypted by a first business server, and a second business key that can be decrypted by a second business server,
The authentication server holds an authenticator key whose signature can be verified by the first operator server and the second operator server,
A first step in which the authentication server authenticates the terminal based on the unique identification information of the terminal;
The terminal should generate first encrypted information by encrypting the first information to be transmitted to the first operator server with the first operator key, and transmit the first information to the second operator server A second step of generating second encrypted information by encrypting the second information with a second operator key;
A third step in which the terminal transmits the first encryption information and the second encryption information to the authentication server;
The authentication server generates a first signature encryption information by giving a signature to the first encryption information by the certifier key, and adds a signature to the second encryption information by the certifier key. A fourth step of generating second signature encryption information,
A fifth step in which the authentication server transmits the first signature encryption information to the first operator server and transmits the second signature encryption information to the second operator server;
A sixth step in which the first operator server verifies and decrypts the signature from the first signature encryption information and obtains the first information;
A secret information transmission method, comprising: a seventh step in which the second operator server verifies and decrypts the signature from the second signature encryption information and acquires the second information. The first operator key held by the terminal is a first operator public key for the first operator private key of the first operator server,
The second operator key held by the terminal is a second operator public key for the second operator secret key of the second operator server,
The certifier key held by the authentication server is the certifier private key of the authentication server itself,
The first operator server holds the first operator private key of the first operator server itself and an authenticator public key for the authenticator private key of the authentication server,
The secret information transmission method according to claim 1, wherein the second operator server holds the second operator secret key of the second operator server itself and the authenticator public key. . The authentication server further holds a first operator key that can be decrypted by the first operator server,
For the fourth step, the authentication server generates third encrypted information by encrypting the third information related to the user of the terminal with the first operator key, and the third encrypted information is A signature is given by the certifier key to generate the third signature encryption information,
For the fifth step, the authentication server sends third signature encryption information to the first operator server,
For the sixth step, the first operator server that has received the third signature encryption information verifies and decrypts the signature from the third signature encryption information to obtain the third information, and / or Or
The authentication server further holds a second operator key that can be decrypted by the second operator server,
For the fourth step, the authentication server generates fourth encrypted information by encrypting the fourth information related to the user of the terminal with the second business operator key, and the fourth encrypted information is A signature is given by the certifier key to generate the fourth signature encryption information,
For the fifth step, the authentication server transmits the fourth signature encryption information to the second operator server,
Regarding the seventh step, the second operator server that has received the fourth signature encryption information verifies and decrypts the signature from the fourth signature encryption information, and acquires the fourth information The method for transmitting confidential information according to claim 1 or 2. The first operator key held by the authentication server is a first operator public key for the first operator private key of the first operator server,
The secrecy according to claim 3, wherein the second operator key held by the authentication server is a second operator public key for the second operator private key of the second operator server. Information transmission method. The authentication server is provided as a mobile phone network business facility,
The terminal is a mobile terminal, and communicates with the authentication server via a mobile phone network;
The first step is characterized in that the portable terminal transmits user authentication information based on a user input to the authentication server, and the authentication server authenticates the user based on the user authentication information. 5. The secret information transmission method according to any one of 1 to 4. The terminal has a non-contact communication function,
6. The device according to claim 1, wherein the terminal receives first information and second information transmitted wirelessly from a reader / writer device equipped with a non-contact communication function. Secret information transmission method. The reader / writer device transmits, to the mobile terminal, a shopping business operator identifier, an amount, a settlement business operator identifier specified by the shopping business operator and a delivery business operator identifier,
The first operator server corresponds to the settlement operator identifier,
The second carrier server corresponds to the delivery carrier identifier,
The terminal has registered in advance the user name, address, telephone number and card number as user information,
The terminal includes the shopping provider identifier, name, amount, and card number as first information, and includes the shopping provider identifier, name, address, and telephone number as second information. The method for transmitting confidential information according to claim 6. The reader / writer device is connected to a user-operable personal computer,
8. The personal computer transmits information to the portable terminal from the reader / writer device when accessing the electronic commerce site server according to a user operation and checking out from a shopping cart. The method for transmitting confidential information as described in 1. In a secret information transmission system in which an authentication server, a first operator server, a second operator server, and a terminal are connected via a network,
The terminal
A company key holding means for holding a first company key that can be decrypted by the first company server and a second company key that can be decrypted by the second company server;
The first information to be transmitted to the first operator server is encrypted with the first operator key to generate the first encrypted information, and the second information to be transmitted to the second operator server Encrypted information generating means for generating the second encrypted information by encrypting with the second business operator key,
Encryption information transmitting means for transmitting the first encrypted information and the second encrypted information to the authentication server;
The authentication server is
Certifier key holding means for holding a certifier key whose signature can be verified by the first provider server and the second provider server;
Terminal authentication means for authenticating the terminal based on the unique identification information of the terminal;
The first encrypted information is signed by the certifier key to generate first signature encrypted information, and the second encrypted information is signed by the certifier key and the second signature A signature encryption information generating means for generating encryption information;
Signature encryption information transmitting means for transmitting the first signature encryption information to the first operator server and transmitting the second signature encryption information to the second operator server;
The first operator server verifies and decrypts the signature from the first signature encryption information, obtains the first information,
A secret information transmission system, wherein the second operator server verifies and decrypts the signature from the second signature encryption information and obtains the second information. The authentication server is
A provider key holding means for holding a first provider key that can be decrypted by the first provider server;
The signature encryption information generation unit generates third encryption information by encrypting third information related to a user of the terminal using a first operator key, and the third encryption information is generated by the authenticator. Generating a third signature encryption information by giving a signature by a key;
The signature encryption information transmission means transmits the third signature encryption information to the first operator server,
The first operator server that receives the third signature encryption information verifies and decrypts the signature from the third signature encryption information to obtain the third information,
And / or
The authentication server is
A provider key holding means for holding a second provider key that can be decrypted by the second provider server;
The signature encryption information generation unit generates fourth encryption information by encrypting the fourth information related to the user of the terminal with a second operator key, and the fourth encryption information is generated by the authenticator. A signature is given by a key to generate fourth signature encryption information,
The signature encryption information transmitting means transmits the fourth signature encryption information to the second operator server,
The second provider server that has received the fourth signature encryption information verifies and decrypts the signature from the fourth signature encryption information, and acquires the fourth information. The confidential information transmission system described. The authentication server is provided as a mobile phone network business facility,
The terminal is a mobile terminal, and communicates with the authentication server via a mobile phone network;
The mobile terminal transmits user authentication information based on user input to the authentication server, and the authentication server authenticates the user based on the user authentication information. Secret information transmission system.

Images