JP2016012902A - Electronic data utilization system, portable terminal device, and method for electronic data utilization system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an electronic data utilization system which allows electronic data etc. to be used safely with an application program of a smart phone.SOLUTION: An electronic authentication system 1 comprises an electronic certificate distribution server 10 and a smart phone 20 with a user identification card 30. When electronic certificate data is received from the electronic certificate distribution server 10, the smart phone 20 records the electronic certificate data in the user identification card 30. In response to an instruction by a user of the smart phone 20, a process using the electronic certificate data recorded in the user identification card 30 is executed within the user identification card 30.

Description

  The present invention relates to an electronic data utilization system that uses private data including an electronic certificate and personal information that can be used on a smartphone.

  Conventionally, an electronic authentication system using an electronic certificate is known as a technique for ensuring security on a network. An electronic certificate is a personal identification certificate issued by a trusted certificate authority (certificate authority) on the network. Personal identification information such as the person's name and email address, and public key data. including. If such an electronic certificate is used, user authentication can be easily performed even when accessing the network in the organization from the outside using, for example, a VPN (Virtual Private Network). In addition, data tampering can be prevented by using a public key infrastructure (PKI) -based electronic signature.

  In addition, there exist the following prior art documents as a prior art relevant to this invention.

JP 2014-45233 A

  On the other hand, in recent years, multifunctional mobile phones called smartphones are rapidly spreading. Along with this, data communication using smartphones is also frequently performed. Although a technique for using digital certificate data on a smartphone has been put into practical use, a technique for using the digital certificate data on a smartphone more securely is required.

  In recent years, in order to connect to a net banking system or an online game, cases of processing and using data including personal information on a smartphone are increasing. Therefore, there is a need for a technique for making it possible to use not only electronic certificate data but also electronic data including such personal information on a smartphone safely.

  The present invention has been made in view of such a problem, and provides an electronic data utilization system and the like that can safely use electronic data such as private data including an electronic certificate and personal information with an application program of a smartphone. For the purpose.

  The electronic data utilization system of the present invention is an electronic data utilization system comprising a portable terminal device connected to a cellular phone communication network and an electronic data distribution server that distributes predetermined electronic data. The server manages the electronic data of each user in association with the ID data of the user identification card loaded in the mobile terminal device used by each user, and downloads the electronic data from the mobile terminal device A transmission unit that transmits corresponding electronic data based on ID data of a user identification card loaded in the portable terminal device in response to the request, the portable terminal device serving the electronic data distribution server; Downloading electronic data download request together with ID data of user identification card loaded in the portable terminal device A request output unit, an electronic data recording unit that records electronic data acquired from the electronic data distribution server on the user identification card, and electronic data stored in the user identification card that is input by a user of the mobile terminal device An instruction receiving unit that receives an instruction to execute a predetermined process using the computer, and acquires electronic data stored in the user identification card based on the execution instruction of the process received by the instruction receiving unit. An electronic data processing execution unit that executes corresponding processing, and the electronic data processing execution unit executes processing corresponding to the execution instruction in the user identification card.

  According to this configuration, the electronic data of the user is downloaded to the mobile terminal device loaded with the user identification card having the associated ID data. The downloaded electronic data is stored in the user identification card. When processing is executed on the mobile terminal device using electronic data stored in the user identification card based on a user instruction, processing corresponding to the instruction is executed in the user identification card. As described above, since the electronic data is stored in the identification card, which is a secure element, with limited access procedures, the electronic data can be safely held in the smartphone. Moreover, since the process using electronic data is executed in the user identification card, it is possible to prevent leakage of secret key data and the like included in the electronic data.

  A mobile terminal device according to the present invention is a mobile terminal device that stores electronic data in a user identification card, the first application program executed on the operating system of the mobile terminal device, and the operating of the user identification card A second application program executed on the system, and the first application program is a predetermined process using electronic data stored in the user identification card, which is input by a user of the mobile terminal device The second application program executes a process corresponding to the execution instruction received by the first application program.

  According to this configuration, the user's instruction is received by the first application program that operates on the operating system of the mobile terminal device, and the processing of the electronic data based on the instruction is performed on the operating system of the user identification card. 2 is executed by the application program. In other words, processing using electronic data is executed in a shared manner by two application programs operating on two different operating systems. In general, it is said that there are no viruses that attack two operating systems simultaneously. Therefore, with this configuration, it is possible to prevent data leakage, falsification, and the like due to viruses, and use electronic data safely. The predetermined process includes obtaining electronic data stored in the user identification card.

  The mobile terminal device of the present invention further includes a third application program executed on the operating system of the mobile terminal device, and the third application program corresponds to an execution instruction received by the first application program. An electronic data processing command to be output to the second application program, and the second application program executes processing using electronic data corresponding to the execution instruction based on the electronic data processing command You can do it.

  According to this configuration, the first application program that accepts user instructions and the third application program that is separate from the second application program that executes processing using electronic data are provided. Then, a processing command corresponding to the user instruction is output to the second application program via the third application program. Therefore, even when there are a plurality of types of first applications, processing using electronic data can be executed by the same second application program. If such a function is realized by a library or the like incorporated in the first application program, high confidentiality is required from the viewpoint of ensuring security, for example, a processing command using secret key data stored in the user identification card. The first application must hold up to the data to be processed. The user can directly operate the first application program, and such data is disclosed to unspecified developers each time the first application program is newly developed. Therefore, a third program that outputs a processing command that can be executed by the second application program is separately provided, and the specific processing content in the third program is “black box” as viewed from the first application program. Thus, processing using electronic data can be executed on the mobile terminal device more safely.

  In the mobile terminal device of the present invention, the first application program includes a common library for allowing different first application programs to access the third application program, and the third application program is an application Access to the third application program from the first application program may be permitted by authentication based on a certificate.

  According to this configuration, even when there are a plurality of types of first application programs, processing using electronic data by the second application program can be executed via the common third application program. In addition, based on the authentication by the application certificate, the first application program permits the third application program to access, thereby executing the process using the electronic certificate data on the mobile terminal device more safely. can do.

  The program of the present invention inputs and outputs data between a first application program executed on the operating system of the mobile terminal device and a second application program executed on the operating system of the user identification card. A common program executed on the operating system of the mobile terminal device, wherein the first application program uses electronic data stored in the user identification card, which is input by a user of the mobile terminal device An instruction to execute a predetermined process is received, the second application program executes a process corresponding to the execution instruction received by the first application program, and the common program is stored in the portable terminal device. First application program Acquiring an execution instruction accepted by the program, and outputting an electronic data processing command executable by the second application program to the second application program based on the acquired execution instruction. Let it run.

  The electronic data utilization system of the present invention includes a mobile terminal device connected to a mobile phone communication network, and an electronic data distribution server that distributes predetermined electronic data of each user to the mobile terminal device used by the user. A method in an electronic data utilization system provided, wherein the electronic data distribution server associates predetermined electronic data of each user with ID data of a user identification card loaded in a mobile terminal device used by each user And a step of transmitting corresponding electronic data based on ID data of a user identification card loaded in the portable terminal device in response to a download request for electronic data from the portable terminal device. The mobile terminal device sends a request for downloading electronic data to the electronic data distribution server. Transmitting together with ID data of a user identification card loaded in the device, recording electronic data acquired from the electronic data distribution server on the user identification card, and input by a user of the mobile terminal device, The step of receiving an instruction to execute a predetermined process using the electronic data stored in the user identification card, and the electronic data stored in the user identification card based on the execution instruction of the process received by the instruction receiving unit And acquiring and executing a process corresponding to the execution instruction, and the electronic certificate data process execution unit executes the process corresponding to the execution instruction in the user identification card.

  A mobile terminal device according to another aspect of the present invention is a mobile terminal device using electronic data, the first application program executed on the operating system of the mobile terminal device, and the operating system of the user identification card A second application program executed above, wherein the electronic data is stored in a user identification card loaded in the portable terminal and is accessible only by the first application program having received a predetermined permission. The mobile terminal device further includes a third application program executed on an operating system of the mobile terminal device, and the third application program includes data included in the first application program. 2 application pros Based on the data obtained by processing by the ram, the first application program to determine whether the first application program that has received the permission.

  According to this configuration, private data including personal information and electronic data such as an electronic certificate are stored in the user identification card that is a secure element, and access is permitted only to a smartphone application program that has received a predetermined permission. Therefore, even in a mobile terminal, electronic data can be stored and used safely.

  A mobile terminal device according to another aspect of the present invention is a mobile terminal device using electronic data, the first application program executed on the operating system of the mobile terminal device, and the operating system of the user identification card A second application program executed above, wherein the electronic data is stored in a user identification card loaded in the portable terminal, and the first application program is based on a predetermined public key certificate The license data is signed and generated using a predetermined encryption key based on the public key certificate, and the second application program uses a decryption key corresponding to the encryption key. The permit data is decrypted, and the mobile terminal device operates on the operating system of the mobile terminal device. A third application program to be executed, wherein the third application program includes data decrypted by the second application program using the decryption key, and a signature of the first application program Based on the value data, it is determined whether or not the first application program can access the electronic data.

  According to this configuration, electronic data such as private data including personal information and electronic certificate data is stored in the user identification card, which is a secure element, and access is permitted only to a smartphone application program that has received a predetermined permission. . Therefore, even in a mobile terminal, electronic data can be stored and used safely. In addition, since the decryption key of the permit data is also stored in the user identification card and decryption processing is performed in the card, it is possible to safely determine access permission.

  In the mobile terminal device of the present invention, the third application program may permit access to the third application program from the first application program by authentication based on an application certificate.

  According to this configuration, connection with the third application program that determines access permission is permitted only for the first application that has been authenticated based on the application certificate. That is, in the two stages of access to the third application program and access to the electronic data in the user identification card, access permission / rejection is determined by different methods, so that the electronic data can be made more secure. Can be managed and used.

  In the mobile terminal device of the present invention, the electronic data includes at least electronic certificate data, and the third application program imports at least a part of the electronic certificate data stored in the user identification card. A store to be stored may be generated for each user identification card.

  According to this configuration, electronic certificate data that is not so high in confidentiality requirements can be stored in a program executed on the smartphone operating system in the store, enabling high-speed access. The electronic certificate data can be used efficiently. Since the store is generated for each user identification card, the electronic certificate data can be used efficiently even if the user identification card is exchanged.

  In the portable terminal device of the present invention, the third application program may generate a store for importing and storing data relating to electronic data stored in the user identification card for each user identification card.

  According to this configuration, it is possible to easily confirm, for example, what kind of electronic data is stored while holding the content of the electronic data that is highly required to be confidential in the user identification card. Further, since the store is generated for each user identification card, electronic data can be used efficiently even if the user identification card is exchanged.

  The server of the present invention issues, for each first application program executed on the operating system of the portable terminal device, a permit indicating that access to the electronic data stored in the user identification card is permitted. A receiving unit that acquires public key certificate data for signature of the first application program, a key generation unit that generates a key used for data encryption and decryption, and the public key certificate A license data generation unit that generates license data using a key for encryption generated by the key generation unit based on a certificate, and the license data is the first application program And the key used for the decryption is stored in the user identification card, and the decryption key stored in the user identification card is used. The first application program accesses the electronic data based on the license data incorporated in the first application and the signature value data of the first application program. Judgment is made.

  The electronic data utilization system of the present invention is an electronic data utilization system comprising a portable terminal device connected to a cellular phone communication network and a server, wherein the server stores electronic data stored in a user identification card. Is a server that issues a permit indicating that access to the first application program is executed for each first application program executed on the operating system of the portable terminal device, and is disclosed for signature of the first application program A receiving unit for acquiring key certificate data; a key generating unit for generating a key for data encryption and decryption; and an encryption generated by the key generating unit based on the public key certificate. Based on ID data of a user identification card loaded in the portable terminal device, and a permit data generating unit that generates permit data using a key for A transmission unit that transmits a decryption key generated by the key generation unit to a user identification card in which the electronic data is stored, and the portable terminal device is an operating system of the portable terminal device. A first application program executed on the system; and a second application program executed on the operating system of the user identification card, wherein the first application program is based on a predetermined public key certificate And the second application program decrypts the permit data using the key for decryption, and the portable terminal device is an operating system of the portable terminal device. And further comprising a third application program executed above. The application program is configured to add the first data to the electronic data based on the data decrypted using the decryption key by the second application program and the signature value data of the first application program. To determine whether access is permitted by the application program.

  A method in an electronic data utilization system of the present invention is a method in an electronic data utilization system comprising a mobile terminal device connected to a cellular phone communication network and a server, wherein the server is stored in a user identification card. A server that issues a permit indicating that access to electronic data is permitted for each first application program executed on the operating system of the mobile terminal device, the server including: Obtaining a public key certificate data for signature, generating a key for encrypting and decrypting the data, and encryption generated by the key generation unit based on the public key certificate Generating permit data using a key for the user ID of the user identification card loaded in the portable terminal device And a step of transmitting a decryption key generated by the key generation unit to a user identification card in which the electronic data is stored based on the data, A first application program is provided with the permit data and is signed on the basis of the public key certificate, and the portable terminal device includes a first application program that is executed on the operating system of the portable terminal device. The portable terminal device decrypts the permit data using a key for the decryption by a second application program executed on an operating system of the user identification card; and By a third application program executed on the operating system of the mobile terminal device Access to the private data by the first application program based on the data decrypted by the second application program using the decryption key and the signature value data of the first application program Determining whether or not to permit.

  A mobile terminal device according to another aspect of the present invention is a mobile terminal device that generates data using time data, the first application program executed on the operating system of the mobile terminal device, and a user identification card A second application program executed on the operating system, and the second application program receives time data transmitted from a predetermined time server and signed using a predetermined secret key. The first application program decrypts the time data decrypted in the second application program by decrypting it using a public key corresponding to the secret key stored in the identification card. A mobile terminal device that uses it to generate data.

  According to this configuration, the key for decrypting the signed time data is stored in the user identification card, which is a secure element, and the decryption process is also performed in the card. Can be generated.

  In the mobile terminal device of the present invention, private data that is personal information data is stored in the user identification card, the first application program is signed based on a predetermined public key certificate, and is made public. A license data generated using a predetermined encryption key based on a key certificate, and the second application program decrypts the license data using a decryption key corresponding to the encryption key; The mobile terminal device further includes a third application program executed on an operating system of the mobile terminal device, and the third application program uses the decryption key in the second application program. Decrypted data and signature value data of the first application program Accordingly, it is determined whether or not the first application program is allowed to access the private data, and the first application program, when the access to the private data is permitted, Data using the time data decrypted in the application program may be generated.

  According to this configuration, private data is stored in a user identification card that is a secure element, and access is permitted only to a smartphone application program that has received a predetermined permission. Therefore, private data, which is personal information, can be stored and used safely in a mobile terminal. In addition, since the decryption key of the permit data is also stored in the user identification card and decryption processing is performed in the card, it is possible to safely determine access permission.

  According to the present invention, electronic data can be stored and used in a user identification card, which is a secure element, so that electronic data can be safely used by an application program of a smartphone.

The block diagram which shows the structure of the electronic authentication system in the 1st Embodiment of this invention The block diagram which shows the structure of the smart phone in the 1st Embodiment of this invention. Illustration for explaining the concept of the store Operation flow diagram in the electronic certificate data storage phase of the electronic authentication system according to the first embodiment of the present invention Operation flow diagram in the electronic certificate data utilization phase of the electronic authentication system according to the first embodiment of the present invention The figure for demonstrating the application example using the 1st electronic authentication system of this invention The figure for demonstrating the outline | summary of the mechanism of the access permission to the private data in the 2nd Embodiment of this invention. Block diagram showing the configuration of the certificate issuing server The block diagram which shows the structure of the smart phone in the 2nd Embodiment of this invention. Operation flow diagram of permit issuing server in electronic data utilization system in second embodiment of the present invention Operation flow diagram in the private data utilization phase of the electronic data utilization system according to the second embodiment of the present invention The block diagram which shows the structure of the electronic data utilization system in the 3rd Embodiment of this invention. The block diagram which shows the structure of the smart phone in the 3rd Embodiment of this invention. Operational flow diagram of electronic data utilization system in the third embodiment of the present invention

<First Embodiment>
Hereinafter, an electronic authentication system according to a first embodiment of the present invention will be described with reference to the drawings.

[System configuration]
(overall structure)
FIG. 1 is a diagram showing the configuration of the electronic authentication system according to the first embodiment of this invention. As shown in FIG. 1, the electronic authentication system 1 according to the first exemplary embodiment of the present invention includes an electronic certificate distribution server 10 and a smartphone 20.

  The electronic certificate distribution server 10 includes an electronic certificate management unit 11, a user identification card ID data acquisition unit 12, and an electronic certificate data transmission unit 13. The electronic certificate management unit 11 includes the electronic certificate data transmitted from the certificate authority server 21 and an ICCID (IC Card Identifier) which is a unique number of a UIM (User Identity Module) card loaded in a smartphone used by each user. ) In association with each other. The certificate authority registers a public key used for electronic authentication based on the user's application, and issues an electronic certificate in association with the public key data, user data, and data indicating the certificate authority. This electronic certificate data also includes private key data corresponding to the registered public key.

  The user identification card ID data acquisition unit 12 acquires an ICCID loaded in the smartphone 20 in response to a download request for electronic certificate data from the smartphone 20. The electronic certificate data transmission unit 13 refers to the data managed by the electronic certificate management unit 11 and identifies the electronic certificate corresponding to the ICCID acquired by the user identification ID card data acquisition unit 12. It transmits to the smart phone 20 via a telephone communication network. The electronic certificate data transmitted to the smartphone 20 is recorded in the UIM card 30 loaded in the smartphone 20 as will be described later.

(Smart phone configuration)
FIG. 2 is a diagram illustrating the configuration of the smartphone 20. As shown in FIG. 2, the smartphone 20 includes a smartphone application program 21, a communication unit 22, a store service 23, and a UIM card 30. The UIM card 30 includes a card application program 31 and an electronic certificate data storage unit 32. The smartphone application program 21 includes an instruction receiving unit 211 and an access library 212. In addition, the store service 23 includes an access reception unit 231 and a command conversion unit 232. The card application program 31 includes a process execution unit 311.

  The smartphone application program 21 is an application program executed on the operating system of the smartphone 20 and is an application program for using stored electronic certificate data. The user instructs execution of various processes using the electronic certificate data via the smartphone application program 21. That is, in the present embodiment, the smartphone application program 21 mainly serves as a user interface.

  The instruction receiving unit 211 receives an instruction to execute processing using electronic certificate data from the user. When the UIM card 30 includes a plurality of electronic certificate data, the user selects electronic certificate data used for processing. In this case, the execution instruction includes data for identifying the selected electronic certificate data. The access library 212 is a library commonly used by a plurality of smartphone application programs 21 and provides an interface for the smartphone application program 21 to access the store service 23.

  The store service 23 is an application program that operates on the operating system of the smartphone 20, and mediates data between the smartphone application program 21 and the card application program 31. The store service 23 includes an access reception unit 231 and a command conversion unit 232.

  The access receiving unit 231 connects the access library 212 and the store service 23. The store service 23 holds ID data of a smartphone application program that permits connection, and the access reception unit 231 is based on application ID data included in the application certificate in response to a connection request from the access library 212. Authenticate. As a result, if it is determined that the smartphone application program 21 including the access library 212 is a valid application program that can use the processing result using the electronic certificate data by the card application program 31, the store service 23 is allowed to connect. The access receiving unit 231 further verifies the validity of the selected electronic certificate. In the validity verification, the access receiving unit 231 confirms whether the electronic certificate data has expired by connecting to the server of the certificate authority. In the present embodiment, the revocation data of the electronic certificate is centrally managed and stored in the store service within the validity period indicated by the revocation data or a period close thereto. Therefore, it is not necessary for the store service 23 to repeatedly confirm whether or not the electronic certificate data has been revoked within the retention period.

  The command conversion unit 232 converts the instruction data received by the instruction reception unit 211 into a command that can be executed by the card application program 31.

  The card application program 31 is an application program that operates on the UIM operating system, and includes a process execution unit 311. The process execution unit 311 acquires necessary electronic certificate data from the electronic certificate data storage unit 32 in accordance with the processing command output from the store service 23, and uses the electronic certificate data, for example, a private key Processing such as encryption / decryption using data is executed.

  In the present embodiment, the store service 23 further includes a database (store) for managing electronic certificate data stored in the UIM card 30 and also functions as a certificate store. Since the content of the private key data is highly confidential information among the electronic certificate data, the decryption process using the private key is executed in the UIM card 30 as described above. However, for example, when verifying the validity and reliability of the specified electronic certificate data, when displaying a list of root certificates registered in the UIM card, the processing using a secret key is more confidential. High information is not used. Until such a case, it is complicated and time-consuming to acquire the electronic certificate data from the UIM card every time. Therefore, for a predetermined process such as verification of an electronic certificate, the store service 23 reads data from the store in accordance with an instruction from the access library 212 and executes the process, or reads the read data into the access library 212. Output to.

  FIG. 3 is a diagram for explaining the concept of the store. As shown in FIG. 3, the store is configured for each UIM card, and manages what kind of electronic certificate data each UIM card has. When the store service 23 is activated, it acquires the ICCID of the UIM card inserted in the smartphone 20 and specifies the corresponding store. Further, if newly downloaded electronic certificate data exists in the UIM card, the electronic certificate data is added to the corresponding store.

  If there is no corresponding store, the store service 23 imports the electronic certificate data from the inserted UIM card through the card application program, and generates a new store corresponding to the acquired ICCID. In the present embodiment, the UIM card 30 can store a root certificate, an intermediate certificate, and an end entity certificate for a private certificate, and an end entity certificate for a public certificate. Since the purpose of the store service is to provide a store function while ensuring security, highly confidential digital certificate data such as private key data is not imported. When the card application program 31 is deleted, the electronic certificate data imported from the card application program 31 is also deleted. The electronic certificate data imported into the store service 23 is classified into a root certificate, an intermediate certificate, and an end entity certificate.

  The root certificate and intermediate certificate store also stores the private root certificate and private intermediate certificate imported from the UIM card 30, and also holds the certificate store provided by the operating system of the smartphone 20. Public root certificates and public intermediate certificates are also stored. Therefore, when the end entity certificate of another user acquired by the smartphone application program 21 is verified, it is sufficient to construct an authentication path using the root certificate and intermediate certificate in the store. There is no need to manage certificates and intermediate certificates. Thus, according to the store provided by the store service 23, the electronic certificate data on the smartphone can be managed centrally.

  The user can classify the untrusted certificate into the “untrusted certificate” in the electronic certificate data imported to the store service 23 in this way. For example, when a certain certificate authority cannot be trusted, such as when a certain certificate authority is compromised due to theft or leakage of the private key or related security information, the certificate issued by the certificate authority is They can be grouped together as “untrusted certificates”.

  The electronic certificate classified as “untrusted certificate” is excluded from the construction of the certification path when the selected electronic certificate is verified. By excluding from certification path construction, all digital certificates that contain “untrusted certificate” at the top of the path cannot be verified, and as a result, the verification target certificate is invalid. To be judged. When the store service 23 determines that the electronic certificate is invalid as a result of the verification performed using the store in this way, the card application program 31 of the UIM card 30 is notified of the fact. When execution of a predetermined process using electronic certificate data that is invalid (such as an electronic signature using a public key proved by an invalid public key certificate) is selected in the smartphone application program 21 The card application program 31 outputs a message indicating that the electronic certificate data is invalid and cannot be used to the smartphone application program 21 via the store service 23.

  As described above, a store is generated for each UIM card. In recent years, not only UIM cards of specific communication companies, but also “SIM lock-free” smartphone terminals that can be used by inserting UIM cards of respective communication companies are spreading. By generating a store for each UIM card in the store service 23 and switching the store according to the inserted card, the electronic certificate data can be easily used even in such a SIM lock-free smartphone. be able to.

  The store service 23 also generates a temporary store (session store) that is used only during connection with the access library 212 based on the data stored in the store. In the smart phone application program 21, for example, when acquiring an end entity certificate of another user, an intermediate certificate used only by a specific user including the other user may be attached. If such an intermediate certificate is stored in the store, the user who has received the intermediate certificate may be able to use the intermediate certificate even though the user is not able to use the intermediate certificate. Therefore, electronic certificates of other users acquired through the smartphone application program 21 are temporarily stored in the session store. The session store disappears when the connection with the access library is disconnected.

[Operation flow]
(Electronic certificate storage phase)
Next, an operation flow of the electronic authentication system 1 according to the first embodiment of this invention will be described with reference to the drawings. FIG. 4 is an operation flowchart until the electronic certificate data is stored in the UIM card of the smartphone 20. First, when the smartphone 20 transmits a download request to the electronic certificate distribution server 10 (step S1), the electronic certificate distribution server 10 transmits electronic certificate data to the smartphone 20 (step S2). If it is confirmed by the smartphone 20 that there is no problem in the download state of the electronic certificate data (step S3), the electronic certificate data is stored in the UIM card 30 (step S4).

(Electronic certificate usage phase)
FIG. 5 is an operation flowchart when the electronic certificate data stored by the processing up to step S4 in FIG. First, the smartphone application program 21 receives a user instruction (step S11). Then, in response to the user instruction received in step S11, the electronic certificate to be processed is specified, and command conversion executable by the card application program 31 is performed (step S12). The UIM card 30 acquires the electronic certificate data (step S13), executes the command, and performs processing such as encryption / decryption using the secret key data (step S14).

  As described above, in the electronic authentication system according to the first embodiment of this invention, the electronic certificate issued by the certificate authority is transmitted to the smartphone 20 via the electronic certificate distribution server 10. The smartphone 20 stores the received electronic certificate data in the electronic certificate data storage unit 32 on the UIM card 30. The UIM card is a type of secure element that can erase internal data by physical destruction and has limited procedures for accessing the inside. Moreover, the UIM card or other user identification card is a storage medium originally provided in the smartphone 20 in order to identify the phone number of the smartphone. Therefore, by storing the electronic certificate data in the UIM card, the electronic certificate data can be safely held without requiring a new medium.

  In the present embodiment, a process using the electronic certificate data is executed by the card application program 31 in the UIM card 30 separately from the smartphone application program 21. In this way, the electronic certificate data read from the electronic certificate data storage unit 32 is stored in the UIM card 30 by an application program operating in the UIM card, which is separate from the smartphone application program that plays the role of a user interface. Therefore, data such as a secret key can be prevented from leaking outside the card.

  Furthermore, the smartphone 20 of the present embodiment includes a store service 23 that operates on the operating system of the smartphone. Then, a processing command corresponding to the user instruction is output to the card application program 21 via the store service. Therefore, even when there are a plurality of types of smartphone application programs 21, the same card application program 31 can execute processing using electronic certificate data. In the store service 23, the processing request from the smartphone application program 21 is converted into a command that can be executed by the card application program 31. That is, the specific command content of the card application program 31 output from the store service 23 is “black box” as viewed from the smartphone application program 21. Therefore, the process using the electronic certificate data can be executed on the smartphone more safely.

[Application example]
A specific application example using the electronic authentication system according to the embodiment of the present invention is as follows.
(Electronic identification card)
As described above, the electronic certificate data includes personal information such as a name, and has a function as a personal identification card. Therefore, the smartphone 20 can be used instead of the identification card using the electronic certificate downloaded to the UIM card 30. The personal information downloaded to the UIM card 30 is not limited to an electronic certificate. For example, when applying for issuance of an electronic certificate at a certificate authority, employee ID data such as company name, department, employee number, etc. can be registered in association with each other. Thereby, when necessary, the smartphone can be used immediately as the employee ID card by transmitting the employee ID data to the registered smartphone. The transmitted employee ID data is recorded on the UIM card and displayed on the smartphone display as shown in FIG. 6 by the employee ID display smartphone application program and the card application program corresponding to the certificate authority. By using the electronic authentication system according to the embodiment of the present invention, the employee ID data stored in the smartphone can be safely and repeatedly read from the UIM card and displayed on the smartphone screen when necessary. it can.

(Card authentication)
In recent years, smartphones that comply with the NFC (Near Field Communication) standard have become widespread. If a smart phone provided with a smart phone application program having an NFC emulation function is applied to the electronic authentication system according to the embodiment of the present invention, the smart phone terminal is stored on the UIM card only by holding it over an NFC-compatible reader / writer device. Card authentication using the electronic certificate data can be performed. Also in this case, reading of the electronic certificate data is performed in the UIM card by the card application program.

  Thus, according to the electronic authentication system of the embodiment of the present invention, various authentication technologies can be used on one smartphone without cost.

[Modification]
In the above embodiment, the case where the electronic certificate data is stored in the UIM card has been described. However, the medium is not limited to the UIM card as long as it is a medium for identifying the user of the smartphone or mobile phone. Needless to say, the store service, the card application program, and the like may have functions other than those described in the present embodiment.

  For example, when the execution of processing using a secret key is instructed by the user, the store service pops up an input screen and performs PIN (Personal Identity Number Number) authentication to determine whether the processing can be executed. Also good. Since the store service 23 commonly used by the smartphone application program acquires the PIN information from the UIM card and performs authentication, it is not necessary to disclose the PIN information to each smartphone application program. Thereby, leakage of PIN information can be prevented and processing using electronic certificate data can be executed more safely.

  Further, when a plurality of secret keys are stored in the UIM card, the store service pops up a list of public key certificates with secret keys as a secret key selection screen based on information stored in the store, User selection may be accepted. Since the store service used in common by the smartphone application program presents options and accepts selections, it is not necessary to disclose information on the public key certificate with a private key to the smartphone application program. Thereby, leakage of information of the public key certificate with a private key can be prevented, and processing using the electronic certificate data can be executed more safely. In this case, the public key certificate list with a private key displayed on the private key selection screen may be changed according to the ID data of the smartphone application program, and the private keys that can be selected may be limited.

<Second Embodiment>
In the first embodiment, an example has been described in which electronic certificate data is stored in a UIM card that is a secure element, and processing using the electronic certificate data is executed in the UIM card. In the second embodiment, an electronic data utilization system that stores private data in a UIM card and can securely acquire and use the stored data will be described. The private data is data including personal information, and includes various types of data such as text data and image data.

  As described in the first embodiment, the processing using the secret key is performed in the UIM card by the UIM card application program, and the processing command used by the UIM card application program is output from the store service. That is, in the case of electronic certificate data, it is sufficient to return only the processing result to the smartphone application program, and the information (electronic certificate data) that is to be protected securely by storing in the UIM card itself is stored in the smartphone application program. However, there is no need to output.

  On the other hand, as a case of using private data on a smartphone, for example, it is assumed that information including the private data itself is displayed on the smartphone. Further, even when a processing result using private data is returned to the smartphone application program, it is assumed that the processing result includes personal information indicated by the private data. In other words, the information (personal information) that is to be protected securely by storing it in the UIM card needs to be output to a smartphone application program that serves as an interface with the user. The risk of leakage is high. Therefore, when using private data, it is necessary to ensure further security than when using electronic certificate data.

  In the first embodiment, when it is determined that the store service is a valid application program by performing authentication using the application certificate, the connection between the smartphone application program and the store service is permitted. In the second embodiment, after the smartphone application program and the store service are connected based on the authentication using the application certificate, the store service further uses a permit issued to the smartphone application program. Authenticate. Then, only when it is determined that the smartphone application program is a legitimate application program having an authority to access private data in the UIM card, access to the private data is permitted. In other words, the permit is a certificate indicating that the application program has a right to access private data stored in the UIM card.

[Overview]
FIG. 7 is a diagram for explaining an outline of a mechanism for permitting access to private data using a permit according to the second embodiment. The private data management server 50 transmits private data including personal information of each user to the smartphone 20 loaded with the corresponding UIM card based on the ICCID in response to the user's transmission request, and stores it in the UIM card 30. Let When the smart phone application program developer submits a public key certificate for signing the application program to the permit issuing server 40, the permit issuing server 40 issues a permit for each type of the smart phone application program and transmits it to the program developer. To do.

  When a smartphone application program is released and distributed through a platform provided by a smartphone operating system, it is often said that the smartphone application program must be signed. For this reason, when a developer of a smartphone application program develops a new smartphone application program, it is common to create a secret key, a public key, and a public key certificate, and sign the smartphone application program. The permit is generated based on the public key certificate for signing the smartphone application program using this mechanism.

  The developer of the smartphone application program signs the smartphone application program, hard-codes the permit acquired from the permit issuance server 40 (and performs obfuscation processing as necessary), and the smartphone application program To users. The smartphone application program is signed using a secret key corresponding to the public key certified by the public key certificate submitted to the permit issuing server 40.

  When the user who downloaded the smartphone application program to the smartphone requests access to private data stored in the UIM card 30 in the smartphone application program, the store service 23 sends the smartphone application program to the smartphone application program. The built-in permit is verified to determine whether or not access to the private data is permitted. The verification of the permit is performed based on the signature value of the smartphone application program and the permit data.

[System configuration]
(Configuration of permit issuing server)
FIG. 8 is a diagram showing the configuration of the permit issuing server 40. As shown in FIG. 8, the permit issuing server 40 includes a permit generating unit 41, a permit common key generating unit 42, and a communication unit 43. The permit generation unit 41 generates a permit from the public key certificate acquired from the developer of the smartphone application program. Specifically, the public key certificate data is used as a hash value using a function such as SHA-256. Then, this hash value is encrypted using the permit common key, and further, Base64 encoding is performed to generate permit data that is text data.

  The permit common key generation unit 42 generates a permit common key for each type of smartphone application program. The generated certificate common key is output to the certificate generating unit 41 and the communication unit 43. The communication unit 43 receives the signature public key certificate from the developer of the smartphone application program, and transmits the common key output from the permit common key generation unit 42 to the UIM card 30 loaded in the smartphone.

  In the second embodiment, the permit issuing server 40 manages the ICCID of the UIM card 30 in which a card application program that can use private data is installed. Therefore, when a new permit is issued, the permit issuance server 40 can transmit it to the smartphone 20 loaded with the UIM card 30 in which the card application program that can use private data is installed.

(Smart phone configuration)
FIG. 9 is a diagram illustrating a configuration of the smartphone 20 according to the second embodiment. The configuration of the smartphone 20 according to the second embodiment is substantially the same as the configuration of the smartphone 20 according to the first embodiment. As shown in FIG. 9, in the second embodiment, the smartphone application program 21 further includes a permit data output unit 213 and a signature value data output unit 214, and the store service 23 further includes a permit verification unit. 233. The UIM card 30 further includes a private data storage unit 33 and a permit common key storage unit 34.

  When the instruction data output unit 213 receives an instruction to acquire private data or execute a process using private data from the user at the instruction reception unit 211, the license data output unit 213 is embedded and stored in the smartphone application program 21. Data is acquired and output to the access library 212. On the other hand, the signature value data output unit 214 is incorporated and stored in the smartphone application program 21 when the instruction receiving unit 211 receives an instruction from the user to acquire private data or execute a process using private data. Signature value data is acquired and output to the access library 212.

  The access library 212 specifies the permit data acquired from the permit data output unit 213 as a parameter, and outputs an instruction to acquire private data or an instruction to execute a process using private data to the store service 23. The access library 212 also outputs the signature value data acquired from the signature value data output unit 214 to the store service 23.

  The private data storage unit 33 stores private data, which is information including personal information, transmitted from the private data management server 50. The personal information includes various types of data such as text data and image data (face photograph etc.). The permit common key storage unit 34 stores the permit common key transmitted from the permit issuing server 40. The permit common key storage unit 34 may store permit common keys corresponding to some smartphone application programs 21 in advance. Further, when a smart phone application program is newly developed and a permit is issued by the permit issuing server 40, a newly generated common key may be received from the permit issuing server 40 and stored.

  The process execution unit 311 decrypts the permit data using the permit common key based on an instruction from the permit verifying unit 233 and returns the result to the permit verifying unit 233. As described above, the permit data is obtained by encrypting the hash value of the application signature public key certificate data by using the permit common key. Therefore, the decryption result is the application signature public key certificate data. The hash value of

  The process execution unit 311 also allows the private data storage unit 33 to respond to a command output from the command conversion unit 232 when the smartphone application program 21 is permitted to access private data by the permission verification unit 234. The designated private data is acquired from the data and delivered to the store service 23. When the smartphone application program 21 instructs the process execution unit 311 to use private data, the process execution unit 311 uses the acquired private data according to the command output from the command conversion unit 232 to perform the process. The result of executing is delivered to the store service 23.

  The permit verification unit 233 verifies the permit data acquired from the access library 212. Specifically, first, Base 64 decoding of permit data is performed. Then, a decryption command for permit data that has undergone Base64 decoding is output to the process execution unit 311 of the card application program 31, and a decryption result that is a hash value is acquired from the process execution unit 311. On the other hand, the permit verification unit 233 restores the application signature public key certificate data used when the smartphone application program 21 is signed based on the signature value data acquired from the access library 212, and The hash value is calculated.

  The permit verification unit 233 compares the hash value acquired from the process execution unit 311 with the hash value of the application signature public key certificate data restored from the signature value data, and if these two values match, Allow access to private data. Therefore, when the permit data is forged, the two hash values compared by the permit verifying unit 233 do not match and access is not permitted. Even if the permit data is genuine, if the signature made to the application program is invalid, access to the private data is not permitted because these two hash values do not match.

  Note that the configuration common to the first embodiment has the same function as the function described in the first embodiment. For example, the store service 23 has a store function as in the first embodiment. However, in the second embodiment, the private data stored in the UIM card 30 generates a store for each card application program 31. In the second embodiment, only the smartphone application program 21 having a predetermined permit permits access to the private data in the UIM card 30, thereby requiring higher confidentiality than the electronic certificate data. Protect private data. For this reason, the private data store included in the store service 23 does not store the private data itself, but stores only the metadata such as the private data name and the storage location (FID = File Identifier) in the UIM card.

[Operation flow]
(License issuance phase)
Next, an operation flow of the permit issuing server 40, the smartphone 20, and the UIM card 30 according to the second embodiment of the present invention will be described with reference to the drawings. FIG. 10 is an operation flowchart until the permit is issued by the permit issuing server 40. When the certificate issuing server 40 receives and acquires the signature public key certificate of the smartphone application program (step S21), the certificate issuing server 40 generates a corresponding certificate common key (step S22). Then, the public key certificate data received in S21 is hashed with SHA-256 (step S23) and encrypted using the permit common key (step S24). Further, Base 64 encoding is performed to generate permit data (step S25), and the generated permit data is transmitted (step S26).

  The permit issuing server 40 specifies the ICCID of the UIM card having the card application program 30 (step S27), and transmits the permit common key to the smartphone 20 loaded with the specified UIM card (step S28).

(Private data usage phase)
FIG. 11 is an operation flowchart when the smartphone application program acquires private data through authentication using a permit. The smartphone 20 receives a user instruction indicating that private data should be acquired (step S31). Subsequently, the smartphone 20 obtains public key certificate data based on the signature value data of the smartphone application program, and further calculates the hash value (step S32). The smartphone 20 also outputs a permit data decryption instruction command to the UIM card (step S33). The UIM card decrypts the permit data using the permit common key (step S34), and returns a hash value as a result thereof to the smartphone.

  The smartphone 20 compares the hash value obtained by decrypting the UIM card in step S33 with the hash value calculated based on the signature value data in step S34, and determines whether the two values match. (Step S35). If the two hash values match (Yes in step S35), access to the private data in the UIM card 30 is permitted, and a private data acquisition instruction command is output to the UIM card 30. (Step S36) If the two hash values do not match (No in Step S35), access to the private data is denied and the process is terminated.

  When access to the private data in the UIM card 30 is permitted by the smartphone 20 (Yes in step S35), the UIM card 30 acquires the private data and instructs the smartphone application program 21 as necessary. Then, the private data or the processing result using the private data is returned to the smartphone (step S37). The smartphone 20 displays the acquired private data or executes a process using the acquired private data, and outputs a result corresponding to the user's instruction (step S38). In the above operation flow, the order of step S32 and step S33 may be reversed.

  As described above, in the electronic data utilization system according to the second embodiment, private data is stored in the UIM card 30. Only the smartphone application program having the permit issued by the permit server 40 can be permitted to access the private data. Therefore, it is possible to safely manage and use private data including personal information that is highly confidential.

[Modification]
In the above embodiment, a case is described in which a permit is issued based on a private key, a public key, and a public key certificate that are created when an application program is released and distributed through a platform provided by a smartphone operating system. However, even when such a platform is not used, the permit may be issued to a predetermined application program. Further, the permit issuing server may generate the permit by an arbitrary method, and the verification of the permit may be performed by an arbitrary method corresponding to the generation method. In addition, the permit issuing server may create a key for encryption / decryption instead of the common key.

  Further, in the above-described embodiment, the case where the permit data is transmitted to the smartphone application program developer and the developer incorporates the permit data into the smartphone application program has been described. Permit data may be distributed to installed smartphones. In this case, the permit data stored in the smartphone application program may be extracted and copied to the smartphone application program for which no permit has been issued. Therefore, when distributing the permit data, the permit issuing server may generate a permit common key for each ICCID and transmit it to the UIM card. Thus, by using a permit that can be used only with the UIM card, private data can be used more safely.

  In the above embodiment, the issuance of the permit and the transmission of the private data may be performed by the same server. The private data is not limited to data received by the smartphone from the server, but may be image data captured by the smartphone.

  In the above-described embodiment, the case where all the functions included in the smartphone according to the first embodiment are provided has been described. However, at least a part may not be provided. For example, in the second embodiment, the electronic certificate data may not be stored and used, and the authentication based on the application certificate does not determine whether the store service and the smartphone application can be connected. Also good.

  Further, in the second embodiment, the processing using the electronic certificate data may be authenticated by a permit as in the case of private data. Furthermore, when the store service displays a selection screen for a public key certificate with a private key, it is displayed by specifying a public key certificate with a private key that can be used by the smartphone application program as a parameter of permit data. Public key certificates with private keys may be restricted. Thereby, the process using the secret key can be executed more safely.

  In the above embodiment, the accessible private data may be further determined according to the permit data. For example, by specifying an extension or a data ID as a parameter of permit data, it is possible to limit the types of data and data IDs that can be accessed for each permit. Thereby, private data can be used more safely.

<Third Embodiment>
In the second embodiment, an example has been described in which private data is stored in a UIM card, and permission / inhibition of access to private data is determined based on permit data. In the third embodiment, an example will be described in which a card application program generates a “one-time password” that is a one-time password used for net banking using this mechanism.

  In the present embodiment, the one-time password used for net banking is generated using “seed data” including bank identification data and account number data and time data. Therefore, it can be said that the one-time password includes highly confidential information. Conventionally, a dedicated one-time password generator is used in net banking. However, it is inconvenient because the system cannot be used unless the generator is at hand. In this respect, since a smartphone is usually carried by a user at all times, such inconvenience can be eliminated by generating a one-time password with a smartphone application program.

  However, since the conventional smartphone application program stores and uses seed data on a smartphone like other data, it is difficult to safely manage and use seed data. Therefore, in the present embodiment, the seed data is stored as private data in the UIM card so that the seed data can be safely managed and used. Then, based on the permit data, the seed data is delivered to the smartphone application program permitted to access the private data.

[System configuration]
FIG. 12 is a diagram illustrating a configuration of an electronic data utilization system according to the third embodiment. As shown in FIG. 12, the electronic data utilization system 2 includes a time token distribution server 60, an NTP server 70, a time token generation server 80, a bank server 90, and a smartphone 20.

  The time token distribution server 60 uses the current time data acquired from the NTP server 70 to adjust the internal clock to the correct time. The time token distribution server 60 transmits time data and a time token generation instruction to the time token generation server 80 in response to a request from the smartphone 20. In response to an instruction from the time token distribution server 60, the time token generation server 80 signs the current time data using the time token secret key, generates a time token, and uses the generated time token as the time token distribution server 60. To send to. The time token distribution server 60 transmits the received time token to the smartphone. Thus, in this embodiment, the secret key can be managed safely by separating the time token generation server and the time token distribution server.

  The bank server 80 collates the one-time password transmitted from the smartphone 20 and determines whether or not access to the net banking system is permitted.

  FIG. 13 shows a configuration of the smartphone 20 according to the third embodiment. In the third embodiment, the smartphone application program 21 is an application program that generates a one-time password, and includes a time token acquisition unit 215 and a one-time password generation unit 216. The UIM card 30 also includes a time token public key storage unit 35. Other configurations are the same as the configuration of the smartphone 20 in the second embodiment. The time token public key storage unit 35 stores a time token public key that is paired with a time token private key. In this embodiment, the time token public key is installed with a card application program that manages private keys, a card application program that can use private data, and a smartphone application program that generates a one-time password. It is transmitted to the UIM card 30 based on the ICCID of the UIM card loaded in the smartphone.

  The time token acquisition unit 215 acquires the time token received from the time token distribution server 50 in the communication unit 22 and outputs the time token to the access library 212.

  The process execution unit 311 verifies the signature of the time token acquired through the access library 212 and the store service 23 and detects the presence or absence of falsification. The process execution unit 311 also decrypts using the time token public key to obtain time data. The process execution unit 311 further obtains the specified seed data from the private data storage unit 33 when the permit verification unit 233 permits the smartphone application program 21 to access the seed data. The process execution unit 311 outputs the time data and seed data obtained by decryption to the store service 23.

  The one-time password generation unit 216 generates a one-time password based on the time data and seed data received from the UIM card 30 via the store service.

  Note that the configuration common to the second embodiment has the same function for authentication based on permit data. Further, the store generation by the store service 23 is performed in the same manner as in the second embodiment.

[Operation flow]
FIG. 14 is an operation flow of the electronic data utilization system according to the third embodiment. Here, it is assumed that it is confirmed that the smartphone application program can access the private data as a result of authentication based on the permit described in the second embodiment.

  First, the smartphone 20 transmits a time token issuance request to the time token distribution server 60 (step S41). The time token distribution server 60 that has received the time token issue request transmits time data and a time token generation instruction to the time token generation server 80 (step S42). The time token generation server 80 generates a time token based on the received time data in response to an instruction from the time token distribution server 60 (step S43), and transmits the time token to the time token distribution server 60. The time token distribution server 60 transmits the received time token to the smartphone 20 (step S44).

  The UIM card 30 acquires the time token received by the smartphone 20 from the time token distribution server 60 (step S45), decrypts it using the time token public key, and obtains time data (step S46). Subsequently, the UIM card 30 acquires seed data stored in the card as private data (step S47), and outputs it to the smartphone application program 21 together with the time data acquired in step S45 (step S48).

  The smartphone 20 generates a one-time password using the time data and seed data acquired from the UIM card 30 (step S49). The smartphone 20 displays the generated one-time password and prompts the user to input (step S50), and transmits the one-time password input by the user to the bank server 90 (step S51).

  As described above, in the electronic data utilization system of the third embodiment, seed data that is private data is stored in the UIM card 30. And only the smart phone application program 21 having the permit issued by the permit issuing server 40 can acquire seed data and generate a one-time password. Therefore, it is possible to safely manage and use seed data including personal information that is highly required to be confidential, such as an account number.

  In the electronic data utilization system according to the third embodiment, the key for decrypting the time token is also stored in the UIM card 30, and the decryption processing for obtaining the time data used for generating the one-time password is also performed by the UIM. This is done in the card 30. Therefore, it is possible to securely acquire time data and generate a one-time password.

[Modification]
In the above-described embodiment, the case where the smartphone application program acquires time data and seed data to generate a one-time password has been described, but the one-time password may be generated by the card application program 31. When the card application program 31 generates the one-time password, the seed data is used only in the UIM card that is the secure element, so that authentication based on the permit may not be performed. Alternatively, the permit data may be used for authentication when the card application program performs a predetermined process such as generation of a one-time password. Thereby, private data can be used more safely. For example, the specification of a predetermined function (such as generation of a one-time password) of a card application program may be permitted only for a smartphone application program having a specific type of permit. Thereby, according to the kind of permit, the function of a smart phone application program can be expanded / restricted flexibly.

  In the above embodiment, a case has been described in which a time token is acquired from a time token distribution server and a one-time password is generated. However, a one-time password may be generated using time data inside a smartphone. . In the above embodiment, the case where the time token is generated by the time token generation server has been described. However, the time token distribution server may perform the generation.

  Furthermore, although said embodiment demonstrated the case where all the functions with which the smart phone of 2nd Embodiment is provided were demonstrated, it is not necessary to provide at least one part.

  In the above embodiment, generation of a one-time password for net banking has been described. However, a one-time password may be generated for other purposes such as connection to an online game. Then, arbitrary data may be used as seed data according to the purpose of the one-time password.

  INDUSTRIAL APPLICABILITY The present invention is an application program for a smartphone and has an effect that an electronic certificate, private data, and the like can be safely used, and is useful as an electronic data utilization system.

DESCRIPTION OF SYMBOLS 1 Electronic authentication system 10 Electronic certificate delivery server 11 Electronic certificate management part 12 User identification card ID acquisition part 13 Electronic certificate data transmission part 20 Smartphone 21 Smartphone application program 211 Instruction reception part 212 Access library 213 Permit data output part 214 Signature value data output unit 215 Time token acquisition unit 216 One-time password generation unit 22 Communication unit 23 Store service 231 Access reception unit 232 Command conversion unit 233 Permit verification unit 30 UIM card 31 Card application program 311 Processing execution unit 32 Electronic certificate Data storage unit 33 Private data storage unit 34 Permit common key storage unit 35 Time token public key storage unit 40 Permit issuance server 50 Private data management server Bas 60 time token distribution server 70 NTP server 80 time token generation server 90 bank server

Claims (16)

An electronic data utilization system comprising a portable terminal device connected to a cellular phone communication network and an electronic data distribution server for distributing predetermined electronic data,
The electronic data distribution server is
An electronic data management unit for managing electronic data of each user in association with ID data of a user identification card loaded in a mobile terminal device used by each user;
In response to a download request for electronic data from a mobile terminal device, a transmission unit that transmits corresponding electronic data based on ID data of a user identification card loaded in the mobile terminal device;
With
The mobile terminal device transmits a download request for electronic data to the electronic data distribution server together with ID data of a user identification card loaded in the mobile terminal device;
An electronic data recording unit for recording electronic data acquired from the electronic data distribution server on the user identification card;
An instruction receiving unit that receives an instruction to execute a predetermined process using electronic data stored in the user identification card, which is input by a user of the mobile terminal device;
An electronic data processing execution unit that acquires electronic data stored in the user identification card based on an execution instruction of the process received by the instruction reception unit, and executes a process corresponding to the execution instruction;
With
The electronic data processing execution unit is an electronic data utilization system that executes processing corresponding to the execution instruction in the user identification card. A portable terminal device for storing predetermined electronic data in a user identification card,
A first application program executed on the operating system of the mobile terminal device; and a second application program executed on the operating system of the user identification card,
The first application program receives an instruction to execute a predetermined process using electronic data stored in the user identification card, which is input by a user of the mobile terminal device.
The second application program is a portable terminal device that executes processing corresponding to an execution instruction received by the first application program. A third application program executed on the operating system of the portable terminal device;
The third application program outputs an electronic data processing command corresponding to the execution instruction received by the first application program to the second application program,
The portable terminal device according to claim 2, wherein the second application program executes processing using electronic data corresponding to the execution instruction based on the electronic data processing command. The first application program includes a common library for allowing different first application programs to access the third application program,
The portable terminal device according to claim 3, wherein the third application program permits access to the third application program from the first application program by authentication based on an application certificate. The operating of the mobile terminal device that inputs and outputs data between the first application program executed on the operating system of the mobile terminal device and the second application program executed on the operating system of the user identification card A common program executed on the system,
The first application program receives an instruction to execute a predetermined process using electronic data stored in the user identification card, which is input by a user of the mobile terminal device.
The second application program executes processing corresponding to the execution instruction received in the first application program,
The common program is stored in the mobile terminal device.
Obtaining an execution instruction received by the first application program;
A common program that executes an electronic data processing command that can be executed by the second application program based on the obtained execution instruction, and outputs the electronic data processing command to the second application program. A method in an electronic data utilization system comprising: a mobile terminal device connected to a mobile phone communication network; and an electronic data distribution server that distributes predetermined electronic data of each user to a mobile terminal device used by the user. And
The electronic data distribution server is
Managing predetermined electronic data of each user in association with ID data of a user identification card loaded in a mobile terminal device used by each user;
In response to a download request for electronic data from the mobile terminal device, transmitting corresponding electronic data based on ID data of a user identification card loaded in the mobile terminal device;
With
The portable terminal device transmits a download request for electronic data together with ID data of a user identification card loaded in the portable terminal device to the electronic data distribution server;
Recording the electronic data acquired from the electronic data distribution server on the user identification card;
Receiving an instruction to execute a predetermined process using electronic data stored in the user identification card, which is input by a user of the mobile terminal device;
Acquiring electronic data stored in the user identification card based on an execution instruction of the process received by the instruction reception unit, and executing a process corresponding to the execution instruction;
With
The electronic data processing execution unit is a method in an electronic data utilization system that executes processing corresponding to the execution instruction in the user identification card. A portable terminal device using electronic data,
A first application program executed on the operating system of the mobile terminal device; and a second application program executed on the operating system of the user identification card,
The electronic data is stored in a user identification card loaded in the portable terminal and is accessible only by the first application program that has received a predetermined permission,
The mobile terminal device further includes a third application program executed on an operating system of the mobile terminal device,
The third application program is based on data obtained by processing data included in the first application program by the second application program, and the first application program receives the permission from the first application program. A mobile terminal device that determines whether it is an application program. A portable terminal device using electronic data,
A first application program executed on the operating system of the mobile terminal device; and a second application program executed on the operating system of the user identification card,
The electronic data is stored in a user identification card loaded in the mobile terminal,
The first application program includes permit data signed based on a predetermined public key certificate and generated using a predetermined encryption key based on the public key certificate,
The second application program decrypts the permit data using a decryption key corresponding to the encryption key,
The mobile terminal device further includes a third application program executed on an operating system of the mobile terminal device,
The third application program, based on the data decrypted using the decryption key by the second application program and the signature value data of the first application program, A portable terminal device that determines whether access is permitted by the first application program.   The portable terminal device according to claim 7 or 8, wherein the third application program permits access to the third application program from the first application program by authentication based on an application certificate. The electronic data includes at least electronic certificate data,
The portable terminal device according to claim 3, wherein the third application program generates, for each user identification card, a store that imports and stores at least a part of the electronic certificate data stored in the user identification card. .   The portable terminal device according to claim 7 or 8, wherein the third application program generates a store for storing data related to electronic data stored in the user identification card for each user identification card. A server that issues a permit stored in a user identification card indicating that access to electronic data is permitted for each first application program executed on the operating system of the mobile terminal device,
A receiving unit that acquires public key certificate data for signing the first application program;
A key generation unit for generating a key used for data encryption and decryption;
Based on the public key certificate, a permit data generating unit that generates permit data using a key for encryption generated by the key generating unit;
With
The permit data is incorporated into the first application program,
The key used for the decryption is stored in the user identification card,
Based on the permit data decrypted using the decryption key stored in the user identification card and embedded in the first application, and signature value data of the first application program, A server for determining whether or not the electronic data can be accessed by the first application program. An electronic data utilization system comprising a portable terminal device connected to a cellular phone communication network and a server,
The server
A server that issues a permit stored in a user identification card indicating that access to electronic data is permitted for each first application program executed on the operating system of the mobile terminal device,
A receiving unit that acquires public key certificate data for signing the first application program;
A key generation unit for generating a key for data encryption and decryption;
Based on the public key certificate, a permit data generating unit that generates permit data using a key for encryption generated by the key generating unit;
Based on the ID data of the user identification card loaded in the portable terminal device, the decryption key generated by the key generation unit is transmitted to the user identification card storing the private data. A transmission unit,
The portable terminal device
A first application program executed on the operating system of the mobile terminal device; and a second application program executed on the operating system of the user identification card,
The first application program is signed based on a predetermined public key certificate and includes the permit data,
The second application program decrypts the permit data using the decryption key,
The mobile terminal device further includes a third application program executed on an operating system of the mobile terminal device,
The third application program, based on the data decrypted using the decryption key by the second application program and the signature value data of the first application program, An electronic data utilization system that determines whether access is permitted by the first application program. A method in an electronic data utilization system comprising a mobile terminal device connected to a mobile phone communication network and a server,
The server
A server that issues a permit stored in a user identification card indicating that access to electronic data is permitted for each first application program executed on the operating system of the mobile terminal device,
Obtaining public key certificate data for signing the first application program;
Generating a key for data encryption and decryption;
Generating permit data using a key for encryption generated by the key generation unit based on the public key certificate;
Based on the ID data of the user identification card loaded in the portable terminal device, the decryption key generated by the key generation unit is transmitted to the user identification card storing the electronic data. With steps,
The portable terminal device
The first application program is provided with the permit data and is signed on the basis of the public key certificate and is provided with a first application program executed on the operating system of the portable terminal device. A device,
The portable terminal device
Decrypting permit data using a key for decryption by a second application program executed on an operating system of the user identification card;
Data decrypted by the second application program using the decryption key by the third application program executed on the operating system of the portable terminal device, and the signature value of the first application program And determining whether to permit access by the first application program to the electronic data based on the data. A mobile terminal device that generates data using time data,
A first application program executed on the operating system of the portable terminal device, and a second application program executed on the operating system of the user identification card,
The second application program uses a public key corresponding to the secret key stored in the user identification card, the time data transmitted from a predetermined time server and signed using a predetermined secret key. To obtain the time data by decoding,
The first application program is a portable terminal device that generates data using time data decrypted by the second application program. Private data that is personal information data is stored in the user identification card,
The first application program includes license data signed based on a predetermined public key certificate and generated using a predetermined encryption key based on the public key certificate,
The second application program decrypts the permit data using a decryption key corresponding to the encryption key,
The mobile terminal device further includes a third application program executed on an operating system of the mobile terminal device,
Based on the data decrypted by the second application program using the decryption key and the signature value data of the first application program, the third application program Determining whether to permit access by the first application program;
The said 1st application program produces | generates the data using the time data decoded in the said private data and the said 2nd application program, when the access to the said private data is permitted. Mobile terminal device.

Images