JP2015015646A - Id information generation device, secret key issuing device, public key generation device, public key encryption system, electronic signature generation device, electronic signature system, id information generation method, secret key issuing method, and computer program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To enable a user to specify a type of authentication to be performed when a secret key issuing station issues a secret key, in an ID based encryption method.SOLUTION: An ID information generation device 1 which generates ID information to be used in an ID based encryption method, comprises: an input unit 11 which receives input of authentication type specification information for specifying a type of authentication to be performed on issuing a secret key to be used in the ID based encryption method; an ID information generation unit 12 which generates ID information including the input authentication type specification information; and an output unit 13 which outputs the ID information generated by the ID information generation unit.

Description

  The present invention relates to an ID information generating device, a secret key issuing device, a public key generating device, a public key cryptosystem, an electronic signature generating device, an electronic signature system, an ID information generating method, a secret key issuing method, and a computer program.

  Conventionally, an ID-based encryption method that is a kind of public key encryption method is known (see, for example, Non-Patent Document 1). In the ID-based encryption method, a public key is generated using arbitrary ID information such as a communication partner's name and mail address and public information called a system parameter. On the other hand, the secret key is generated using the master key. The master key is kept secret by a secret key issuing authority that is a trusted third party. The secret key issuing authority authenticates the user who requests the issuance of the secret key, and generates and issues a secret key corresponding to the ID information of the user when the authentication is successful.

  Non-Patent Document 2 discloses a technique for determining the key expiration date by including the date and time in the ID information.

Adi Shamir, Identity-Based Cryptosystems and Signature Schemes.Advances in Cryptology: Proceedings of CRYPTO 84, Lecture Notes in Computer Science, 7: 47--53, 1984 Dan Boneh, Matthew K. Franklin, Identity-Based Encryption from the Weil Pairing Advances in Cryptology-Proceedings of CRYPTO 2001 (2001)

  However, in the above-described conventional ID-based encryption method, it is not possible to specify what authentication is performed to authenticate a user who obtains a secret key from a secret key issuing authority and decrypts the encrypted message. . Authentication methods that authenticate users include authentication using a PIN, authentication using an ID and password, authentication using a one-time password, authentication using SIM or UIM such as a mobile phone, property authentication, biometrics authentication There are various authentication methods with different authentication strengths and certainty. Among these authentication methods, as an authentication method used by the secret key issuing authority, it is desirable that the sender of the encrypted message can specify an appropriate authentication method for security. Similarly, it is desirable to be able to specify what authentication is performed by the secret key issuing authority for a user who acquires the secret key used for the electronic signature from the secret key issuing authority.

  The present invention has been made in consideration of such circumstances, and it is an object of the present invention to specify what authentication is performed when a secret key issuing authority issues a secret key in an ID-based encryption method. .

(1) An ID information generation device according to the present invention is performed when an ID information generation device that generates ID information used in an ID-based encryption method issues a secret key used in the ID-based encryption method. An input unit for inputting authentication type specifying information for specifying an authentication type, an ID information generating unit for including the input authentication type specifying information in ID information, and outputting ID information generated by the ID information generating unit And an output unit.

(2) A secret key issuing device according to the present invention is a secret key issuing device that issues a secret key used in an ID-based encryption method. ID information including authentication type designation information as information on the secret key issue request When inputting the input unit and issuing the secret key in response to the issue request, authentication is performed using an authentication method corresponding to the authentication type specified by the authentication type designation information included in the input ID information. And an authenticating unit to perform.

(3) A public key generation device according to the present invention is a public key generation device that generates a public key used in an ID-based encryption method, and outputs the ID information generation device according to (1) above and the ID information generation device. And a public key generation unit that generates the public key using the ID information thus obtained and the system parameters of the ID-based encryption method.

(4) A public key cryptosystem according to the present invention includes the secret key issuing device (2) and the public key generating device (3).

(5) An electronic signature generation apparatus according to the present invention is an electronic signature generation apparatus that generates an electronic signature. The ID information generation apparatus according to (1) and the ID information output from the ID information generation apparatus are issued with a secret key. When the authentication performed by the secret key issuing device using the authentication method corresponding to the authentication type specified by the authentication type specifying information included in the ID information is transmitted to the device, the secret key issuing device A secret key acquisition unit that acquires a secret key, and a signature generation unit that generates the electronic signature using the secret key acquired by the secret key acquisition unit.

(6) An electronic signature system according to the present invention includes the secret key issuing device according to (2) above and the electronic signature generation device according to (5) above.

(7) An ID information generation method according to the present invention is an ID information generation method of ID information used in an ID-based encryption method, wherein an input unit issues a secret key used in the ID-based encryption method. An input step for inputting authentication type designation information for designating a type of authentication performed at the time, an ID information generation unit, an ID information generation step for including the input authentication type designation information in the ID information, and an output unit, An output step of outputting the ID information generated by the ID information generation unit.

(8) A secret key issuing method according to the present invention is a secret key issuing method for issuing a secret key used in an ID-based encryption method, and an input unit designates an authentication type as information of the secret key issue request An input step of inputting ID information including information, and an authentication unit, when issuing the secret key in response to the issue request, to an authentication type specified by the authentication type designation information included in the input ID information And an authentication step of performing authentication using the corresponding authentication method.

(9) A computer program according to the present invention is a computer program for performing processing for generating ID information used in an ID-based encryption method, and is for issuing a secret key used in the ID-based encryption method. An input step for inputting authentication type designation information for designating the type of authentication performed in the step, an ID information generation step for including the input authentication type designation information in ID information, and the ID information generated by the ID information generation unit A computer program for causing a computer to execute an output step.

(10) A computer program according to the present invention is a computer program for performing a process of issuing a secret key used in an ID-based encryption method, and includes authentication type designation information as information of the secret key issue request An input method for inputting ID information and an authentication method corresponding to the authentication type specified by the authentication type specifying information included in the input ID information are used when issuing the secret key in response to the issue request. And a computer program for causing a computer to execute an authentication step of performing authentication.

  According to the present invention, in the ID-based encryption method, it is possible to specify what kind of authentication is performed when the secret key issuing authority issues a secret key by the authentication type specifying information included in the ID information. It is done.

It is a block diagram which shows the structure of ID information generation apparatus 1 which concerns on one Embodiment of this invention. It is a block diagram which shows the structure of the private key issuing apparatus 2 which concerns on one Embodiment of this invention. It is a block diagram which shows the structure of the public key generation apparatus 3 which concerns on Example 1 of this invention. It is a sequence chart which shows the flow of a process of the public key encryption system which concerns on Example 1 of this invention. It is a block diagram which shows the structure of the electronic signature production | generation apparatus 4 which concerns on Example 2 of this invention. It is a sequence chart which shows the flow of a process of the electronic signature system which concerns on Example 2 of this invention. It is a sequence chart which shows the flow of a process of the single sign-on system which concerns on Example 3 of this invention.

Hereinafter, embodiments of the present invention will be described with reference to the drawings.
FIG. 1 is a block diagram showing a configuration of an ID information generating apparatus 1 according to an embodiment of the present invention. The ID information generation device 1 generates ID information used in the ID-based encryption method. In FIG. 1, the ID information generation device 1 includes an input unit 11, an ID information generation unit 12, and an output unit 13.

  The input unit 11 inputs input information used for generating ID information. The input information includes arbitrary information and authentication type designation information. Furthermore, the input information may have a date and time. Examples of the arbitrary information include a user ID for identifying the user, the user's e-mail address, the user's telephone number, and the like. The date and time is information that specifies the expiration date of the secret key.

  The authentication type designation information is information for designating the type of authentication performed when issuing a secret key used in the ID-based encryption method. The authentication type designation information includes, for example, information that directly specifies the authentication method (for example, an identifier assigned to the authentication method). Alternatively, the authentication type designation information is information for specifying the authentication strength (for example, an identifier given to the authentication strength, etc.), and the association between the authentication method and the authentication strength is defined and specified by the authentication type designation information. An authentication method associated with the authentication strength may be designated. As the authentication strength, for example, there are three levels of “weak”, “medium”, and “strong”. Authentication methods for authenticating users include, for example, authentication using personal identification numbers, authentication using IDs and passwords, authentication using one-time passwords, authentication using SIM or UIM such as mobile phones, property authentication, biometrics, etc. For example, metrics authentication.

  Further, the authentication type designation information may designate one authentication method, or may designate a plurality of authentication methods. When a plurality of authentication methods are designated, authentication is performed using the plurality of authentication methods. For example, when authentication using a personal identification number and authentication using SIM or UIM are specified, when a private key used in an ID-based encryption method is issued, authentication using a personal identification number and SIM or Authentication using UIM is performed.

  The definition of the authentication type designation information is published by the secret key issuing authority.

  The ID information generation unit 12 uses the input information input by the input unit 11 to generate ID information. Specifically, the ID information generation unit 12 concatenates information included in the input information. This connected information is ID information. In this embodiment, since the input information includes arbitrary information and authentication type designation information, the ID information is information obtained by connecting the arbitrary information and authentication type designation information. Further, when the input information has a date and time, the ID information is information in which arbitrary information, authentication type designation information, and date and time are connected. As described above, the ID information generating unit 12 includes the authentication type designation information input by the input unit 11 in the ID information.

  The output unit 13 outputs the ID information generated by the ID information generation unit 12.

  FIG. 2 is a block diagram showing a configuration of the secret key issuing device 2 according to the embodiment of the present invention. The secret key issuing device 2 issues a secret key used in the ID-based encryption method. The secret key issuing device 2 is provided in the secret key issuing authority. In FIG. 2, the secret key issuing device 2 includes an input unit 21, an authentication unit 22, a secret key generation unit 23, and an output unit 24.

  The input unit 21 inputs ID information as information on a secret key issue request. The ID information includes arbitrary information and authentication type designation information. Furthermore, the input information may have a date and time. In this way, the input unit 21 inputs ID information including authentication type designation information as secret key issue request information.

  The authentication unit 22 uses an authentication method corresponding to the type of authentication specified by the authentication type designation information included in the ID information input by the input unit 21 when issuing a secret key in response to a request for issuing a secret key. To authenticate.

  When the authentication unit 22 succeeds in authentication, the secret key generation unit 23 generates a secret key corresponding to the ID information input by the input unit 21. The output unit 24 outputs the secret key generated by the secret key generation unit 23.

  Next, an example using the ID information generating device 1 and the secret key issuing device 2 according to the present embodiment will be described below.

  Example 1 is a public key cryptosystem using the ID information generation device 1 and the secret key issuing device 2 according to the present embodiment. FIG. 3 is a block diagram illustrating a configuration of the public key generation device 3 according to the first embodiment of the present invention. The public key generation device 3 generates a public key used in the ID-based encryption method. In FIG. 3, the public key generation device 3 includes an ID information generation device 1, a public key generation unit 31, and an output unit 32.

  The public key generation unit 31 generates a public key using the ID information output from the ID information generation device 1 and the system parameters of the ID-based encryption method. The system parameters of the ID-based encryption method are disclosed by the secret key issuing authority.

  FIG. 4 is a sequence chart illustrating a processing flow of the public key cryptosystem according to the first embodiment. The operation of the public key cryptosystem according to the first embodiment will be described below with reference to FIG.

  In FIG. 4, the sender (user A) of the encrypted message has an encryption device (not shown) provided with the public key generation device 3. The secret key issuing device 2 is provided in the secret key issuing authority. The recipient (user B) of the encrypted message has a decryption device (not shown).

(Step S1) User A inputs arbitrary information and authentication type designation information as input information used to generate ID information to the encryption device. Furthermore, the user A may add the date and time to the input information. Next, the public key generation device 3 of the encryption device generates ID information using the input information that has been input, and generates a public key using the generated ID information and system parameters of the ID-based encryption method To do. Next, the encryption device generates an encrypted message by encrypting the message using the public key generated by the public key generation device 3.

(Step S2) User A transmits the generated encrypted message and ID information corresponding to the encrypted message to user B. In this example, the ID information includes user B ID “user B”, date and time “May 1, 2013”, and authentication type designation information “one-time password” as arbitrary information. The authentication type designation information “one-time password” is information for designating “authentication using a one-time password”.

(Step S <b> 3) User B transmits a secret key issue request to the secret key issue device 2. This secret key issue request includes the ID information received from the user A.

(Step S4) Upon receiving the secret key issue request from the user B, the secret key issuing device 2 selects an authentication method based on the authentication type designation information of the ID information included in the secret key issue request. In this example, “authentication using a one-time password” is selected. Next, the secret key issuing device 2 authenticates the user B using the selected authentication method.

(Step S5) When the authentication of the user B is successful, the secret key issuing device 2 generates a secret key corresponding to the ID information included in the secret key issue request received from the user B, and uses the generated secret key. To party B.

(Step S6) User B uses the decryption device to decrypt the encrypted message received from user A using the secret key received from secret key issuing device 2.

  According to the first embodiment described above, the authentication method used for authenticating the person who desires to decrypt the encrypted message by the sender of the encrypted message is selected from various authentication methods having different authentication strengths and certainty. An authentication method having appropriate security strength and certainty for security can be designated. As a result, the decryption of the encrypted message can be performed only when the person who desires to decrypt the encrypted message is confirmed by the authentication method having the authentication strength and certainty specified by the sender of the encrypted message. Can do. For example, the encrypted message can be decrypted only by a user who has been identified by a specific authentication method (for example, biometric authentication).

  Example 2 is an electronic signature system using the ID information generating device 1 and the secret key issuing device 2 according to the present embodiment. FIG. 5 is a block diagram showing the configuration of the electronic signature generation apparatus 4 according to the second embodiment of the present invention. The electronic signature generation device 4 generates an electronic signature. In FIG. 5, the electronic signature generation device 4 includes an ID information generation device 1, a secret key acquisition unit 41, a signature generation unit 42, and an output unit 43.

  The secret key acquisition unit 41 transmits the ID information output from the ID information generating device 1 to the secret key issuing device 2, and an authentication method corresponding to the authentication type specified by the authentication type specifying information included in the ID information When the authentication performed by the secret key issuing device 2 using is successful, the secret key is acquired from the secret key issuing device 2.

  The signature generation unit 42 generates an electronic signature using the secret key acquired by the secret key acquisition unit 41. The output unit 43 outputs the electronic signature generated by the signature generation unit 42.

  FIG. 6 is a sequence chart illustrating a processing flow of the electronic signature system according to the second embodiment. Hereinafter, the operation of the electronic signature system according to the second embodiment will be described with reference to FIG.

  In FIG. 6, a message sender (user A) has an electronic signature generation device 4 (not shown). The secret key issuing device 2 is provided in the secret key issuing authority. The message recipient (user B) has an electronic signature verification device (not shown).

(Step S <b> 11) User A inputs arbitrary information and authentication type designation information to the electronic signature generation device 4 as input information used to generate ID information. Furthermore, the user A may add the date and time to the input information. Next, the electronic signature generation device 4 generates ID information using the input information that has been input. Next, the electronic signature generation device 4 transmits a secret key issue request including the generated ID information to the secret key issue device 2. In this example, the ID information includes user A's ID “user A”, date and time “May 1, 2013”, and authentication type designation information “one-time password” as optional information. The authentication type designation information “one-time password” is information for designating “authentication using a one-time password”.

(Step S12) When receiving the private key issue request from the user A, the private key issuing device 2 selects an authentication method based on the authentication type designation information of the ID information included in the private key issue request. In this example, “authentication using a one-time password” is selected. Next, the secret key issuing device 2 authenticates the user A using the selected authentication method.

(Step S13) When the authentication of the user A is successful, the secret key issuing device 2 generates a secret key corresponding to the ID information included in the secret key issue request received from the user A, and uses the generated secret key. To user A.

(Step S14) The electronic signature generation apparatus 4 of the user A generates an electronic signature using the private key received from the private key issuing apparatus 2. Specifically, ID information corresponding to a secret key is added to a message to which an electronic signature is added, and an electronic signature is generated using the secret key for the message to which the ID information is added.

(Step S15) The user A transmits the generated signed message to which the electronic signature is added and ID information corresponding to the electronic signature to the user B.

(Step S16) The electronic signature verification apparatus of user B generates a public key using the ID information received from user A and the system parameters of the ID-based encryption method. Next, the electronic signature verification apparatus verifies the electronic signature of the signed message received from the user A using the generated public key. Further, the user B can know the authentication method used for authentication of the user A who is the creator of the electronic signature, the strength of authentication, and the certainty based on the ID information received from the user A. it can.

  According to the above-described second embodiment, the digital signature generator can select an appropriate authentication method from among various authentication methods with different authentication strengths and certainty as authentication methods used for his / her authentication. It is possible to specify an authentication method having high strength and certainty. In addition, the verifier of the electronic signature can know the authentication method used for the identity verification of the creator of the electronic signature, the strength of authentication, and the certainty. For example, the electronic signature verifier accepts only a user who has been identified by a specific authentication method required by the verifier of the electronic signature (for example, both authentication using ID and password and property authentication). You can prevent signatures from being generated.

  Example 3 is a single sign-on system using the ID information generating device 1 and the secret key issuing device 2 according to the present embodiment. As the single sign-on system, two application examples 3-1 and 3-2 will be described with reference to FIG. FIG. 7 is a sequence chart illustrating a process flow of the single sign-on system according to the third embodiment.

[Application Example 3-1]
In FIG. 7, in the application example 3-1, the service provider has an encryption device (not shown) provided with the public key generation device 3 of the first embodiment. User A has a decryption device (not shown).

(Step S21) The service provider inputs arbitrary information and authentication type designation information as input information used for generating ID information to the encryption device. Furthermore, the service provider may add the date and time to the input information. Next, the public key generation device 3 of the encryption device generates ID information using the input information that has been input, and generates a public key using the generated ID information and system parameters of the ID-based encryption method To do. Next, the encryption device generates encryption challenge data by encrypting the challenge data using the public key generated by the public key generation device 3. The challenge data is created by a random number or the like. Next, the service provider transmits the generated encryption challenge data and ID information corresponding to the encryption challenge data to the user A.

(Step S <b> 22) User A transmits a secret key issuance request including ID information received from the service provider to the secret key issuing device 2.

(Step S23) Upon receiving the private key issue request from the user A, the private key issue device 2 selects an authentication method based on the authentication type designation information of the ID information included in the private key issue request. Next, the secret key issuing device 2 authenticates the user A using the selected authentication method.

(Step S24) When the authentication of the user A is successful, the secret key issuing device 2 generates a secret key corresponding to the ID information included in the secret key issue request received from the user A, and uses the generated secret key. To user A.

(Step S25) User A uses the decryption device to decrypt the encryption challenge data received from the service provider using the secret key received from secret key issuing device 2. Next, the user A transmits the decrypted challenge data to the service provider.

(Step S26) The service provider verifies the challenge data received from the user A. If the challenge data is correctly decrypted as a result of the verification, the service provider can confirm that the user A has been correctly authenticated by the secret key issuing authority based on the ID information.

[Application Example 3-2]
7, in the application example 3-2, the service provider has an ID information generation device 1 (not shown) and an electronic signature verification device (not shown). User A has a conventional electronic signature generation device (not shown).

(Step S21) The service provider inputs arbitrary information and authentication type designation information to the ID information generation device 1 as input information used for generating ID information. Furthermore, the service provider may add the date and time to the input information. Next, the ID information generation device 1 generates ID information using the input information that has been input. The service provider transmits the generated ID information and challenge data created by a random number or the like to the user A.

(Step S <b> 22) User A transmits a secret key issuance request including ID information received from the service provider to the secret key issuing device 2.

(Step S23) Upon receiving the private key issue request from the user A, the private key issue device 2 selects an authentication method based on the authentication type designation information of the ID information included in the private key issue request. Next, the secret key issuing device 2 authenticates the user A using the selected authentication method.

(Step S24) When the authentication of the user A is successful, the secret key issuing device 2 generates a secret key corresponding to the ID information included in the secret key issue request received from the user A, and uses the generated secret key. To user A.

(Step S25) User A uses the secret key received from secret key issuing device 2 to generate an electronic signature for the challenge data received from the service provider, using a conventional digital signature generating device. Next, the user A transmits signed challenge data to which the generated electronic signature is added to the service provider.

(Step S26) The electronic signature verification apparatus of the service provider generates a public key using the ID information corresponding to the user A and the system parameters of the ID-based encryption method. Next, the electronic signature verification apparatus verifies the electronic signature of the challenge data with signature received from the user A using the generated public key. If the electronic signature is correct as a result of the verification, the service provider can confirm that the user A is correctly authenticated by the secret key issuing authority based on the ID information.

  According to the third embodiment described above, the service provider can select an appropriate authentication method for security from various authentication methods with different authentication strengths and certainty as authentication methods used for user authentication. An authentication method having strength and certainty can be specified. As a result, the service provider can provide the service only when the user is identified by the authentication method having the specified authentication strength and certainty.

  According to the above-described embodiment, in the ID-based encryption method, it is possible to specify what authentication is performed when the secret key issuing authority issues a secret key by the authentication type specifying information included in the ID information. Is obtained.

  As mentioned above, although embodiment of this invention was explained in full detail with reference to drawings, the specific structure is not restricted to this embodiment, The design change etc. of the range which does not deviate from the summary of this invention are included.

  For example, in addition to the above-described examples, various applications using the ID information generating device 1 and the secret key issuing device 2 according to the above-described embodiment are possible. For example, it can be applied to generation and verification of an electronic signature added to a purchase order in electronic commerce. Thereby, in user authentication at the time of ordering electronic commerce, appropriate strength and certainty of authentication can be realized for security.

  Further, the present invention can be applied to generation and verification of an electronic signature to be added to various request documents (for example, a withdrawal request document from a deposit account) in online banking. Thereby, in user authentication at the time of request for online banking, it is possible to realize appropriate strength and certainty of authentication for security.

  Also, a computer program for realizing the ID information generating device 1 or the secret key issuing device 2 described above is recorded on a computer-readable recording medium, and the program recorded on the recording medium is read into a computer system and executed. You may make it do. Here, the “computer system” may include an OS and hardware such as peripheral devices.

  “Computer-readable recording medium” means a flexible disk, a magneto-optical disk, a ROM, a writable nonvolatile memory such as a flash memory, a portable medium such as a DVD (Digital Versatile Disk), and a built-in computer system. A storage device such as a hard disk.

Further, the “computer-readable recording medium” means a volatile memory (for example, DRAM (Dynamic DRAM) in a computer system that becomes a server or a client when a program is transmitted through a network such as the Internet or a communication line such as a telephone line. Random Access Memory)), etc., which hold programs for a certain period of time.
The program may be transmitted from a computer system storing the program in a storage device or the like to another computer system via a transmission medium or by a transmission wave in the transmission medium. Here, the “transmission medium” for transmitting the program refers to a medium having a function of transmitting information, such as a network (communication network) such as the Internet or a communication line (communication line) such as a telephone line.
The program may be for realizing a part of the functions described above. Furthermore, what can implement | achieve the function mentioned above in combination with the program already recorded on the computer system, and what is called a difference file (difference program) may be sufficient.

DESCRIPTION OF SYMBOLS 1 ... ID information generation apparatus, 2 ... Secret key issuing apparatus, 3 ... Public key generation apparatus, 4 ... Digital signature generation apparatus, 11, 21 ... Input part, 12 ... ID information generation part, 13, 24, 32, 43 ... Output unit, 22 ... authentication unit, 23 ... secret key generation unit, 31 ... public key generation unit, 41 ... secret key acquisition unit, 42 ... signature generation unit

Claims (10)

In an ID information generation device that generates ID information used in an ID-based encryption method,
An input unit for inputting authentication type designation information for designating a type of authentication performed when issuing a secret key used in the ID-based encryption method;
An ID information generation unit that includes the input authentication type designation information in the ID information;
An output unit that outputs the ID information generated by the ID information generation unit;
An ID information generating device comprising: In a secret key issuing device that issues a secret key used in an ID-based encryption method,
An input unit for inputting ID information including authentication type designation information as information on the request for issuing the secret key;
An authentication unit that performs authentication using an authentication method corresponding to an authentication type specified by authentication type designation information included in the input ID information when issuing the secret key in response to the issue request;
A secret key issuing device comprising: In a public key generation device that generates a public key used in an ID-based encryption method,
The ID information generation device according to claim 1;
A public key generating unit that generates the public key using ID information output from the ID information generating device and system parameters of the ID-based encryption method;
A public key generation device comprising:   A public key cryptosystem comprising the secret key issuing device according to claim 2 and the public key generating device according to claim 3. In an electronic signature generation device that generates an electronic signature,
The ID information generation device according to claim 1;
The ID information output from the ID information generating device is transmitted to the secret key issuing device, and the secret key issuance is performed using an authentication method corresponding to the authentication type specified by the authentication type specifying information included in the ID information. When authentication performed by the device is successful, a secret key acquisition unit that acquires a secret key from the secret key issuing device;
A signature generation unit that generates the electronic signature using a secret key acquired by the secret key acquisition unit;
An electronic signature generation apparatus comprising:   An electronic signature system comprising: the secret key issuing device according to claim 2; and the electronic signature generation device according to claim 5. An ID information generation method for ID information used in an ID-based encryption method,
An input step for inputting authentication type designation information for designating a type of authentication performed when issuing a secret key used in the ID-based encryption method;
An ID information generation step in which the ID information generation unit includes the input authentication type designation information in the ID information;
An output unit that outputs the ID information generated by the ID information generation unit;
ID information generation method characterized by including. A secret key issuing method for issuing a secret key used in an ID-based encryption method,
An input step in which the input unit inputs ID information including authentication type designation information as information on the secret key issue request;
Authentication in which the authentication unit performs authentication using an authentication method corresponding to the authentication type specified by the authentication type designation information included in the input ID information when issuing the secret key in response to the issue request Steps,
A secret key issuing method comprising: A computer program for performing processing for generating ID information used in an ID-based encryption method,
An input step of inputting authentication type designation information for designating a type of authentication performed when issuing a secret key used in the ID-based encryption method;
An ID information generation step of including the input authentication type designation information in the ID information;
An output step of outputting the ID information generated by the ID information generation unit;
A computer program for causing a computer to execute. A computer program for performing processing for issuing a secret key used in an ID-based encryption method,
An input step for inputting ID information including authentication type designation information as information on the request for issuing the secret key;
An authentication step of performing authentication using an authentication method corresponding to an authentication type designated by authentication type designation information included in the input ID information when issuing the secret key in response to the issue request;
A computer program for causing a computer to execute.

Images