JP2013223171A - Public key infrastructure control system, certificate authority server, user terminal, public key infrastructure control method and program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To enable an entity which controls a public key infrastructure to perform active control.SOLUTION: A user information storage section 170 stores user information. A certificate information storage section 180 stores certificate information. A certificate storage section 250 stores a public key certificate. An information comparison section 110 determines whether or not the public key certificate should be reissued. A reissue instruction sending section 120 sends a certificate reissue instruction if the public key certificate should be reissued. An authentication request sending section 210 sends a certificate authentication request. An authentication section 130 sends an authentication result. A reissue request sending section 220 sends a certificate reissue request if the authentication is successful. A new certificate issue section 140 issues a new public key certificate. A new certificate storage section 230 stores the new public key certificate. An old certificate revocation section 150 updates the certificate information to a revocation state. A deletion instruction sending section 160 sends a certificate deletion instruction. An old certificate deletion section 240 deletes the public key certificate.

Description

  The present invention relates to a public key authentication infrastructure used in a public key cryptosystem, and more particularly, to a public key authentication infrastructure control technique for controlling the issuance state of a public key certificate.

  Various cryptographic primitives such as encryption based on public key cryptography, digital signatures, and authentication are widely used within a specific organization as a means of authenticating individual affiliations belonging to the organization and personal credential information within the organization. It has been. In the public key cryptosystem, the key for encrypting information is different from the key for decrypting the encrypted information. Usually, the key used for encryption is made public and can be used by anyone. On the other hand, the key used for decryption is kept secret. Here, a key used for encryption is called a public key, and a key used for decryption is called a secret key.

  Public key certificates are used to ensure that the public key that the user intends to use is correct. Public key certificates include basic certificates issued based on basic user information to authenticate individual users, and attribute certificates issued based on user credentials to authenticate user qualifications. Is prescribed. Many standards have been proposed as implementation examples of public key certificates. For example, there are X.509 public key certificates specified in RFC (Request for comments) 5280 of the Internet Engineering Task Force (IETF). (Non-Patent Document 1).

  A public key authentication infrastructure is used to issue and distribute these public key certificates. Public key authentication infrastructure is a general term for a mechanism in which a certificate authority controlled by a trusted third party issues and distributes public key certificates. The certificate authority carries out procedures for newly obtaining, updating, and reissuing a public key certificate based on a request from a user (Non-Patent Document 2).

RFC 5280, “Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile Dynamic Host Configuration Protocol”, [online], [Search April 10, 2012], Internet <URL: http: // www .ietf.org / rfr / rfc5280.txt> GMO GlobalSign Co., Ltd., “[Managed PKI] About Administrator Issuing | Global Sign (formerly Japan Geotrust Co., Ltd.) for SSL server certificates”, [online], [Search April 10, 2012], Internet < URL: http://jp.globalsign.com/support/epki/443.html>

  In the conventional public key authentication infrastructure, it is necessary for a user to mainly perform procedures for newly obtaining, updating, and reissuing a public key certificate. For this reason, it has not been possible to actively acquire, update, and reissue public key certificates from the entity that controls the public key authentication infrastructure to the user. As a result, the user's public key certificate has expired and the user has not received a valid public key certificate. There is a problem that a public key certificate without possession qualification may be held because the reissue procedure is not implemented.

  The present invention has been made in view of these points, and an object of the present invention is to provide a public key authentication infrastructure control technology that enables an entity that controls a public key authentication infrastructure to actively perform control.

  In order to solve the above problems, a public key authentication infrastructure control system according to the present invention includes a certificate authority server that issues a public key certificate for authenticating a user, and a user terminal that uses the public key certificate. Including. The certificate authority server includes a user information storage unit, a certificate information storage unit, an information comparison unit, a reissue command transmission unit, an authentication unit, a new certificate issue unit, an old certificate revocation unit, and a deletion command transmission unit. The user terminal includes a certificate storage unit, an authentication request transmission unit, a reissue request transmission unit, a new certificate storage unit, and an old certificate deletion unit.

  The user information storage unit includes a user identifier that uniquely identifies the user, user qualification information that is qualification information for authenticating the user, and user attribute information that is information that supplements the user. Store user information. The certificate information storage unit supplements the user identifier, the certificate serial number uniquely identifying the public key certificate, the certificate validity period indicating the validity period of the public key certificate, and the public key certificate. The certificate information including the certificate attribute information is stored. The information comparison unit determines whether or not the public key certificate is to be reissued based on the certificate validity period, user qualification information, user attribute information, and certificate attribute information. The reissue command transmission unit transmits a certificate reissue command to the user terminal when the public key certificate is to be reissued. The authentication unit verifies the certificate authentication request received from the user terminal, and transmits an authentication result indicating either successful authentication or unauthenticated to the user terminal. The new certificate issuing unit issues a new public key certificate based on the user information in response to the certificate reissue request received from the user terminal, and uses the certificate information corresponding to the new public key certificate. Certain new public key certificate information is stored in the certificate information storage unit. The old certificate revocation unit updates the certificate information corresponding to the public key certificate stored in the certificate information storage unit to a revoked state. The deletion command transmission unit transmits a certificate deletion command to the user terminal.

  The certificate storage unit stores a public key certificate. The authentication request transmission unit transmits a certificate authentication request to the certificate authority server in response to the certificate reissue command received from the certificate authority server. The reissue request transmission unit transmits a certificate reissue request to the certificate authority server when the authentication result received from the certificate authority server indicates a successful authentication. The new certificate storage unit stores the new public key certificate received from the certificate authority server in the certificate storage unit. The old certificate deletion unit deletes the public key certificate stored in the certificate storage unit in response to a certificate deletion command received from the certificate authority server.

  According to the public key authentication infrastructure control technology of the present invention, the certificate authority server actively detects a change in user information or user qualification information or the expiration date of the public key certificate and makes it public to the user. The procedure for reissuing the key certificate can be implemented. As a result, it is possible to prevent an unsuccessful authentication failure due to a change in user information or user qualification information or an expiration of the public key certificate.

The block diagram which shows the structural example of a public key authentication infrastructure control system. (A) The figure which shows the structural example of a user information storage part. (B) The figure which shows the structural example of a certificate information storage part. The flowchart 1 which shows the operation example of a public key authentication infrastructure control system. The flowchart 2 which shows the operation example of a public key authentication infrastructure control system. The flowchart 3 which shows the operation example of a public key authentication infrastructure control system.

  Hereinafter, embodiments of the present invention will be described in detail. In addition, the same number is attached | subjected to the component which has the same function in drawing, and duplication description is abbreviate | omitted.

[First Embodiment]
With reference to FIG. 1, a configuration example of a public key authentication infrastructure control system 1 according to the first embodiment of the present invention will be described in detail. The public key authentication infrastructure control system 1 includes a certificate authority server 10, a user terminal 20, and a network 90. There may be a plurality of user terminals 20. The certificate authority server 10 and the user terminal 20 are connected to the network 90. The network 90 only needs to be configured so that the certificate authority server 10 and the user terminal 20 can communicate with each other. For example, the network 90 can be configured with the Internet, LAN, WAN, or the like.

  The certificate authority server 10 includes an information comparison unit 110, a reissue command transmission unit 120, an authentication unit 130, a new certificate issuance unit 140, an old certificate revocation unit 150, a deletion command transmission unit 160, a user information storage unit 170, and a certificate. A document information storage unit 180 is provided. The user information storage unit 170 and the certificate information storage unit 180 are, for example, an auxiliary storage device configured by a semiconductor memory device such as a hard disk, an optical disk, or a flash memory, or middleware such as a relational database or a key value store. Can be configured. In this embodiment, a case where the user information storage unit 170 and the certificate information storage unit 180 are configured by a relational database will be described as an example.

  The user terminal 20 includes an authentication request transmission unit 210, a reissue request transmission unit 220, a new certificate storage unit 230, an old certificate deletion unit 240, and a certificate storage unit 250. The authentication request transmission unit 210, the reissue request transmission unit 220, the new certificate storage unit 230, and the old certificate deletion unit 240 are configured as an agent program that always operates on the basic software (Operating System) that configures the user terminal 20. It is desirable to do. The certificate storage unit 250 can be configured by, for example, an auxiliary storage device configured by a semiconductor memory element such as a hard disk, an optical disk, or a flash memory, or a portable medium such as a USB memory or an IC card. . In this embodiment, a case where the certificate storage unit 250 is configured by an IC card will be described as an example.

  With reference to FIGS. 3-5, the operation example of the public key authentication infrastructure control system 1 is demonstrated in detail according to the order of the procedure actually performed. A1 and B1 in FIG. 3 indicate that the processing flow continues to A1 and B1 in FIG. 4, respectively, and A2 and B2 in FIG. 4 indicate that the processing flow continues to A2 and B2 in FIG. Also, Z in FIGS. 4 and 5 represents that the flow of processing returns to Z in FIG.

  User information is stored in the user information storage unit 170 of the certificate authority server. The user information is various pieces of information related to the user who uses the public key certificate issued by the public key authentication infrastructure control system 1. FIG. 2A shows a configuration example of user information. As described above, in this embodiment, a case where the user information storage unit 170 is configured as a relational database will be described as an example. Thus, user information is stored as a single table in a relational database. The user identifier 1701 is a value for uniquely identifying the user. Any value that does not overlap between different users may be used. The user name 1702 is the name of the user. The user terminal identification information 1703 is information for uniquely identifying the terminal used by the user. For example, if the network 90 is configured by the TCP / IP protocol, the IP address of the user terminal 20 can be used. If the certificate authority server 10 can use name resolution means such as DNS, the host name of the user terminal 20 may be used. The certificate storage device identification information 1704 is a value for uniquely identifying the device in which the certificate storage unit 250 is configured in the user terminal 20. For example, when the certificate storage unit 250 is configured as an IC card, the serial number of the IC card can be used. User qualification information 1705 is qualification information for authenticating the user. For example, in an information system that uses the public key certificate, access authority given to the user, login authority to the information system itself, authority setting for each function, and the like. User attribute information 1706 is information that supplements the user. For example, the user's email address, telephone number, department, job title, etc.

  The user information stored in the user information storage unit 170 is linked with user information held by an information system used by using a public key certificate issued by the public key authentication infrastructure control system 1. The user information held by the linked information system may be, for example, user information of the entire organization managed by a directory server such as Active Directory (registered trademark) of Microsoft Corporation (registered trademark), or specified. The business application used only by the subordinate organizations may be user information in a unique format stored in a relational database or the like. The user information is reflected in the user information stored in the user information storage unit 170 at any time when a change occurs in the information system of the cooperation destination. When the cooperation destination information system is connected to the network 90, the difference information can be transmitted and received online, and when the cooperation destination information system is not connected to the network 90, the magnetic tape is used. The difference information may be reflected off-line using a large-capacity portable medium such as. Although it is desirable that the reflection frequency is not delayed as much as possible, the information depends on the change frequency of user information in the linked information system or the public key certificate issued by the public key authentication infrastructure control system 1. The optimum reflection frequency may be set in consideration of the frequency of using the system.

  Certificate information is stored in the certificate information storage unit 180 of the certificate authority server. The certificate information is information on a public key certificate issued by the public key authentication infrastructure control system 1. FIG. 2B shows a configuration example of certificate information. As described above, in this embodiment, a case where the certificate information storage unit 180 is configured as a relational database will be described as an example. Thus, certificate information is stored as a single table in a relational database. The user identifier 1801 is a value for uniquely identifying a user. One of the values stored in the user identifier 1701 of the user information storage unit 170 is stored and used to associate the user information with the certificate information. The certificate subject information 1802 is information related to the user who has issued the public key certificate. The certificate issuer information 1803 is information related to the certificate authority server 10 that has issued the public key certificate. The certificate serial number 1804 is a value for uniquely identifying the public key certificate. The certificate validity period 1805 indicates the validity period of the public key certificate. For example, assuming that the start date / time and end date / time are stored, the public key certificate can be valid after the start date / time and before the end date / time. The certificate revocation date 1806 is information indicating the date and time when the certificate is revoked. If the public key certificate is valid, a null value or an empty character is set for the certificate revocation date 1806. If any value is set, the public key certificate is in a revoked state. can do. Certificate attribute information 1807 is information supplementing the public key certificate. For example, the attribute information such as the user's email address, telephone number, department, job title, etc. used when issuing the public key certificate, and the information system used using the public key certificate Credential information such as access authority given to the key certificate. As described above, the public key certificate is issued based on the basic certificate issued based on the basic user information to authenticate the individual user, and based on the user qualification information to authenticate the user qualification. Attribute certificate to be present exists. The certificate information stored in the certificate information storage unit 180 can be stored in the same format regardless of whether it is information related to a basic certificate or information related to an attribute certificate.

  The certificate storage unit 250 provided in the user terminal stores a public key certificate issued by the certificate authority server 10. The stored public key certificate can store both basic certificates and attribute certificates. The certificate storage unit 250 may be configured as an auxiliary storage device such as a hard disk built in the user terminal 20, or may be configured as a portable medium such as an IC card. When configured as a portable medium such as an IC card, a unique IC card is assigned to each user, and only the public key certificate issued to the user who owns the IC card is stored. Each time the user uses the public key certificate, he / she reads the public key certificate from his IC card to the user terminal 20. The configuration of the certificate storage unit 250 may be determined in consideration of the security policy in the organization.

  A series of processing of the public key authentication infrastructure control system 1 is periodically executed. The execution interval is set to an optimum execution interval considering the number of user information, the frequency of user information change, the frequency of use of public key certificates, the length of validity period set for public key certificates, etc. do it.

  The information comparison unit 110 included in the certificate authority server 10 scans the user information stored in the user information storage unit 170, and if there is unprocessed user information, acquires one of them (S111). If all user information has been processed and unprocessed user information could not be acquired, the process ends (S112). Subsequently, the information comparison unit 110 searches the certificate information storage unit 180 using the user identifier 1701 included in the acquired user information, and acquires certificate information in which the user identifier 1801 is equal to the user identifier 1701. (S113). Based on the user qualification information 1705 and user attribute information 1706 included in the user information, and the certificate validity period 1805 and certificate attribute information 1807 included in the certificate information, the public key certificate is reissued. It is determined whether or not (S114). More specifically, the certificate attribute information 1807 includes the contents included in the user qualification information 1705 and the user attribute information 1706 when the current time has passed the end date / time included in the certificate validity period 1805. If there is a difference from the contents to be reconsidered, it is determined that the public key certificate having the certificate serial number 1804 included in the certificate information is to be reissued. In other cases, the public key certificate is determined not to be reissued. If it is determined that it is not a reissue target, the process returns to S111 again (S114).

  When the information comparison unit 110 determines that the public key certificate is to be reissued, the reissue command transmission unit 120 included in the certificate authority server 10 transmits a certificate reissue command to the user terminal 20 (S120). ). The user terminal 20 to which the certificate reissue command is transmitted can be specified by the user terminal identification information 1703 included in the user information.

  The authentication request transmission unit 210 included in the user terminal 20 transmits a certificate authentication request to the certificate authority server 20 in response to the certificate reissue command received from the certificate authority server 10 (S210).

  The authentication unit 130 included in the certificate authority server 10 verifies the certificate authentication request received from the user terminal 20, and transmits the authentication result indicating either successful authentication or unauthenticated, to the user who has transmitted the certificate authentication request. It transmits to the terminal 20 (S130). If the authentication result indicates that authentication is not possible, the process returns to S110 (S135).

  When the authentication result received from the certificate authority server 10 indicates that authentication is not possible, the reissue request transmission unit 220 provided in the user terminal 20 ends the process (S221). If the authentication result received from the certificate authority server 10 indicates successful authentication, a certificate reissue request is transmitted to the certificate authority server 10 (S222).

  The new certificate issuing unit 140 provided in the certificate authority server 10 acquires the user information of the user indicated by the certificate reissue request received from the user terminal 20 from the user information storage unit 170 (S141). Next, a new public key certificate is issued based on the acquired user information. Subsequently, the issued new public key certificate is transmitted to the user terminal 20 that transmitted the certificate reissue request (S142). Then, the new public key certificate information, which is certificate information corresponding to the new public key certificate, is stored in the certificate information storage unit 180 (S143).

  When receiving the new public key certificate from the certificate authority server 10, the new certificate storage unit 230 provided in the user terminal 20 stores the received public key certificate in the certificate storage unit 250 (S231). Then, a reissue completion response is transmitted to the certificate authority server 10 (S232).

  When the old certificate revocation unit 150 included in the certificate authority server 10 receives the reissue completion response from the user terminal 20, the reissue completion response indicates the certificate information stored in the certificate information storage unit 180. The certificate information corresponding to the public key certificate is updated to a revoked state (S150). More specifically, the current date and time are set in the certificate expiration date 1806 included in the certificate information. As described above, since the certificate revocation date 1806 indicates that the certificate is revoked by setting some value, the public key certificate having the certificate serial number 1804 included in the certificate information is thereby revoked. It becomes a state.

  Subsequently, the deletion command transmission unit 160 included in the certificate authority server 10 transmits a certificate deletion command to the user terminal (S160).

  When the old certificate deletion unit 240 included in the user terminal 20 receives the certificate deletion instruction from the certificate authority server 10, the certificate deletion instruction is included in the public key certificate stored in the certificate storage unit 250. The public key certificate shown is deleted (S241). Then, a deletion completion response is transmitted to the certificate authority server 10 (S242).

  When the certificate authority server 10 receives the deletion completion response from the user terminal 20, the certificate authority server 10 returns to the processing of S110. Then, it is confirmed whether or not all user information stored in the user information storage unit 170 is to be reissued, and the processes from S111 to S160 are repeated until no unprocessed user information is acquired in S112. Run.

  As described above, the public key authentication infrastructure control system 1 of the present invention stores the user information of the information system to be used using the public key certificate in the user information storage unit 170 provided in the certificate authority server 10. The user information is updated from time to time. Then, the information comparison unit 110 included in the certificate authority server 10 periodically checks whether there is a change in user information or user qualification information for all user information between when the certificate is issued and now. At the same time, it is confirmed whether the validity period of the public key certificate has expired. As a result, the certificate authority server 10 actively detects a change in user information or user qualification information or the expiration of the validity period of the public key certificate, and prompts the user to reissue the public key certificate. Can be implemented. As a result, it is possible to prevent an unsuccessful authentication failure due to a change in user information or user qualification information or an expiration of the public key certificate.

[Program, recording medium]
The present invention is not limited to the above-described embodiment, and it goes without saying that modifications can be made as appropriate without departing from the spirit of the present invention. The various processes described in the above-described embodiments are not only executed in time series according to the order described, but may be executed in parallel or individually as required by the processing capability of the apparatus that executes the processes.

  When various processing functions in each device described in the above embodiment are realized by a computer, the processing contents of the functions that each device should have are described by a program. Then, by executing this program on a computer, various processing functions in each of the above devices are realized on the computer.

  The program describing the processing contents can be recorded on a computer-readable recording medium. As the computer-readable recording medium, any recording medium such as a magnetic recording device, an optical disk, a magneto-optical recording medium, and a semiconductor memory may be used.

  The program is distributed by selling, transferring, or lending a portable recording medium such as a DVD or CD-ROM in which the program is recorded. Furthermore, the program may be distributed by storing the program in a storage device of the server computer and transferring the program from the server computer to another computer via a network.

  A computer that executes such a program first stores, for example, a program recorded on a portable recording medium or a program transferred from a server computer in its own storage device. When executing the process, the computer reads a program stored in its own recording medium and executes a process according to the read program. As another execution form of the program, the computer may directly read the program from a portable recording medium and execute processing according to the program, and the program is transferred from the server computer to the computer. Each time, the processing according to the received program may be executed sequentially. Also, the program is not transferred from the server computer to the computer, and the above-described processing is executed by a so-called ASP (Application Service Provider) type service that realizes the processing function only by the execution instruction and result acquisition. It is good. Note that the program in this embodiment includes information that is used for processing by an electronic computer and that conforms to the program (data that is not a direct command to the computer but has a property that defines the processing of the computer).

  In this embodiment, the present apparatus is configured by executing a predetermined program on a computer. However, at least a part of these processing contents may be realized by hardware.

DESCRIPTION OF SYMBOLS 1 Public key authentication infrastructure control system 10 Certification authority server 20 User terminal 90 Network 110 Information comparison part 120 Reissue command transmission part 130 Authentication part 140 New certificate issue part 150 Old certificate revocation part 160 Deletion command transmission part 170 User Information storage unit 180 Certificate information storage unit 210 Authentication request transmission unit 220 Reissue request transmission unit 230 New certificate storage unit 240 Old certificate deletion unit 250 Certificate storage unit

Claims (7)

A public key authentication infrastructure control system including a certificate authority server that issues a public key certificate for authenticating a user, and a user terminal that uses the public key certificate,
The certificate authority server is
User information including a user identifier that uniquely identifies the user, user qualification information that is qualification information for authenticating the user, and user attribute information that is information that supplements the user A user information storage unit for storing
The user identifier, a certificate serial number that uniquely identifies the public key certificate, a certificate validity period indicating the validity period of the public key certificate, and a certificate that is information supplementing the public key certificate A certificate information storage unit for storing certificate information including certificate attribute information;
An information comparison unit for determining whether or not the public key certificate is a reissue target based on the certificate validity period, the user qualification information, the user attribute information, and the certificate attribute information; ,
When the public key certificate is to be reissued, a reissue command transmitter for transmitting a certificate reissue command to the user terminal;
An authentication unit that verifies the certificate authentication request received from the user terminal and transmits an authentication result indicating either authentication success or authentication failure to the user terminal;
In response to a certificate reissue request received from the user terminal, a new public key certificate is issued based on the user information and is certificate information corresponding to the new public key certificate. A new certificate issuing unit for storing certificate information in the certificate information storage unit;
An old certificate revocation unit that updates the certificate information corresponding to the public key certificate stored in the certificate information storage unit to a revoked state;
A deletion command transmission unit for transmitting a certificate deletion command to the user terminal;
With
The user terminal is
A certificate storage unit for storing the public key certificate;
In response to the certificate reissue command received from the certificate authority server, an authentication request transmission unit that transmits the certificate authentication request to the certificate authority server;
A reissuance request transmitter for transmitting the certificate reissue request to the certificate authority server when the authentication result received from the certificate authority server indicates successful authentication;
A new certificate storage unit for storing the new public key certificate received from the certificate authority server in the certificate storage unit;
In response to the certificate deletion instruction received from the certificate authority server, an old certificate deletion unit that deletes the public key certificate stored in the certificate storage unit;
A public key authentication infrastructure control system characterized by comprising: The public key authentication infrastructure control system according to claim 1,
The public key authentication infrastructure control system, wherein the public key certificate is a basic certificate for authenticating the identity of the user. The public key authentication infrastructure control system according to claim 1,
The public key authentication infrastructure control system, wherein the public key certificate is an attribute certificate for authenticating the user qualification of the user. A certificate authority server that issues public key certificates to authenticate users,
User information including a user identifier that uniquely identifies the user, user qualification information that is qualification information for authenticating the user, and user attribute information that is information that supplements the user A user information storage unit for storing
The user identifier, a certificate serial number that uniquely identifies the public key certificate, a certificate validity period indicating the validity period of the public key certificate, and a certificate that is information supplementing the public key certificate A certificate information storage unit for storing certificate information including certificate attribute information;
An information comparison unit for determining whether or not the public key certificate is a reissue target based on the certificate validity period, the user qualification information, the user attribute information, and the certificate attribute information; ,
When the public key certificate is to be reissued, a reissue command transmission unit that transmits a certificate reissue command to a user terminal that the user uses the public key certificate;
An authentication unit that verifies the certificate authentication request received from the user terminal and transmits an authentication result indicating either authentication success or authentication failure to the user terminal;
In response to a certificate reissue request received from the user terminal, a new public key certificate is issued based on the user information and is certificate information corresponding to the new public key certificate. A new certificate issuing unit for storing certificate information in the certificate information storage unit;
An old certificate revocation unit that updates the certificate information corresponding to the public key certificate stored in the certificate information storage unit to a revoked state;
A deletion command transmission unit for transmitting a certificate deletion command to the user terminal;
A certificate authority server comprising: A user terminal that uses a public key certificate to authenticate a user,
A certificate storage unit for storing the public key certificate;
An authentication request transmitting unit that transmits a certificate authentication request to the certificate authority server in response to a certificate reissue command received from the certificate authority server that issues the public key certificate;
A reissue request transmitter for transmitting a certificate reissue request to the certificate authority server when an authentication result received from the certificate authority server indicates successful authentication;
A new certificate storage unit for storing the new public key certificate received from the certificate authority server in the certificate storage unit;
An old certificate deletion unit that deletes the public key certificate stored in the certificate storage unit in response to a certificate deletion command received from the certificate authority server;
A user terminal comprising: A user identifier that uniquely identifies the user in the user information storage unit, user qualification information that is qualification information for authenticating the user, and user attribute information that is information that supplements the user User information including
In the certificate information storage unit, the user identifier, a certificate serial number that uniquely identifies the public key certificate for authenticating the user, a certificate validity period indicating the validity period of the public key certificate, Certificate information including certificate attribute information which is information supplementing the public key certificate is stored;
The public key certificate is stored in a certificate storage unit,
The certificate authority server that issues the public key certificate has the public key certificate based on the certificate validity period, the user qualification information, the user attribute information, and the certificate attribute information. An information comparison step for determining whether or not to be reissued;
A reissuing command transmission step in which the certificate authority server transmits a certificate reissuing command to a user terminal that uses the public key certificate when the public key certificate is to be reissued; ,
An authentication request transmitting step in which a user terminal using the public key certificate transmits a certificate authentication request to the certificate authority server in response to the certificate reissue command received from the certificate authority server;
An authentication step in which the certificate authority server verifies the certificate authentication request received from the user terminal and transmits an authentication result indicating either successful authentication or unauthenticated to the user terminal;
A reissue request sending step for sending a certificate reissue request to the certificate authority server when the authentication result received by the user terminal from the certificate authority server indicates successful authentication;
The certificate authority server issues a new public key certificate based on the user information in response to the certificate reissue request received from the user terminal, and a certificate corresponding to the new public key certificate A new certificate issuance step for storing new public key certificate information as information in the certificate information storage unit;
A new certificate storage step in which the user terminal stores the new public key certificate received from the certificate authority server in the certificate storage unit;
An old certificate revocation step in which the certificate authority server updates the certificate information corresponding to the public key certificate stored in the certificate information storage unit to a revoked state;
The certificate authority server sends a delete command sending step for sending a certificate delete command to the user terminal;
An old certificate deleting step in which the user terminal deletes the public key certificate stored in the certificate storage unit in response to the certificate deletion instruction received from the certificate authority server;
A public key authentication infrastructure control method characterized by including:   A program that causes a computer to function as the certificate authority server according to claim 4 or the user terminal according to claim 5.

Images