JP3757732B2 - Registration certificate storage method and system, and computer-readable recording medium - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
  The present inventionRegistration certificate storage method and system, and computer-readable recording mediumIn particular, using tamper-resistant devices such as telecommunication systems and IC cards, applications such as application programs or applications (hereinafter referred to as AP) are stored and managed in security-safe devices such as IC cards. in order toRegistration certificate storage method and system, and computer-readable recording mediumAbout.
[0002]
[Prior art]
Systems using security-safe devices (such as IC cards) are becoming widespread. Important APs such as APs are stored in these devices by the issuing organization (IC card issuing organization) when the devices are provided, and cannot be dynamically added, changed, or deleted. As a solution to these problems, a method for dynamically adding and deleting APs such as APs has been proposed.
[0003]
[Problems to be solved by the invention]
However, in the conventional AP storage method, the device administrator (card issuing organization) has the authority to download the AP to the device (IC card or the like) for security reasons. There is a problem that the user's privacy regarding the relationship between the card and the AP stored on the card cannot be secured.
[0004]
  The present invention has been made in view of the above points, and the user, the card issuing organization, and the service providing organization have agreed to each other, and the card issuing organization and the service providing organization store the AP in the IC card safely and equally. Can be deletedRegistration certificate storage method and system, and computer-readable recording mediumThe purpose is to provide.
[0006]
[Means for Solving the Problems]
FIG. 1 is a diagram for explaining the principle of the present invention.
[0007]
  The present invention (Claim 1) includes an issuing device of an issuing organization that issues, provides, and manages user devices;In a system comprising a user device of a user who registers a registration certificate and an issue registration device of an issue registration organization that registers and manages the issue organization,In the system,In the registration certificate storage method,
  When registering a real name registration certificate,
  Issuing device is
  The key information PKI used for giving the certification information is generated and stored in the first database (step 1), and the key information PKI is transmitted to the issuance registration device (step 2).
  Issuing registration device
  An issuing institution registration form LI is created for the PKI, the PKI and the LI are stored in the second database (step 3), and transmitted to the issuing device (step 4).
  Issuing device,
  The LI transmitted from the issuance registration device is verified, and if the verification result is correct, the LI is stored in the first database (step 5).
  User device
  As the real name registration information, a real name private key and a real name public key are generated and stored in the memory (step 6), and the real name public key and the real name registration information are transmitted to the issuing device (step 7).
  Issuing device is
  The real name public key and the registration certificate L signed with the real name registration information are stored in the first database (step 8) and transmitted to the user device (step 9).
  User device
  The registration certificate L is verified (step 10). If the registration certificate L is correct, the registration certificate L is stored in the memory (step 11).
  When registering an anonymous registration certificate,
  User device
  Anonymous registration information UIA including anonymous user public key and anonymous user information UIDA are generated and stored in the memory (step 12), and information BI obtained by blinding the UIA and UIDA is generated and stored in the memory. (Step 13), and transmits to the issuing device (step 14).
  Issuing device is
  Providing certification information to the BI by generating a blind signature, generating a temporary anonymous registration certificate LAB, storing it in the first database (step 15), and sending it to the user device together with the LI (step 16),
  User device
  Perform post-processing of the blind part of the LAB sent from the issuing device, take out the anonymous registration certificate LA (step 17),
  LAB and LI are verified, and if the verification result is correct, the LA is stored in the memory (step 18).
[0014]
FIG. 2 is a principle configuration diagram of the present invention.
[0015]
  The present invention (claims)2) Issuance device 100 of the issuing organization that issues, provides, and manages user devices;A system comprising a user device 300 of a user who registers a registration certificate and an issue registration device 400 of an issue registration organization that registers and manages the issue organizationBecause
  The issuing device 100
  Means for generating key information to be used for giving proof information and transmitting the key information PKI to the issuance registration apparatus 400 that stores the key information PKI in the first database 110;
  Means for verifying the issuing institution registration form LI transmitted from the issuing registration apparatus 400 and storing the LI in the first database 110 if the verification result is correct;
  Means for transmitting to the user device 300 a registration certificate L signed with the public key and real name registration information acquired from the user device 300;
  Means for storing in the first database 110 the information BI obtained by blinding the anonymous registration information UIA and the anonymous user information UIDA transmitted from the user device 300;
  Means for providing certification information to the BI by generating a blind signature, generating a provisional anonymous registration certificate LAB, and transmitting it to the user apparatus 300 together with the LI;
  The issue registration device 400
  An issuing institution registration form LI is created for the PKI, stored in the second database 410, and transmitted to the issuing device 100;
  The user device 300
  Means for generating a real name private key and a real name public key as real name registration information, and transmitting the public key and the real name registration information to the issuing device 100;
  Means for verifying the registration certificate L acquired from the issuing device 100 and storing the registration certificate L in the memory 310 if correct;
  Means for generating anonymous registration information UIA including anonymous user public key and anonymous user information UIDA and storing them in memory 310;
  Means for generating an information BI in which UIA and UIDA are blinded, storing the information BI in the memory 310, and transmitting the information BI to the issuing device 100;
  Means for performing post-processing of the LAB blind part transmitted from the issuing device 100, extracting the anonymous registration certificate LA, and verifying the LAB and LI;
  Means for storing LA in the memory 310 if the verification result is correct.
[0023]
  The present invention (claims)3) Issuance device of the issuing organization that issues, provides and manages user devices,A system comprising a user device of a user who registers a registration certificate and an issue registration device of an issue registration organization that registers and manages the issue organizationIn the user deviceA computer-readable recording medium storing a program to be executed by a computer used as a computer,
  On the computer,
  When registering a user,
  Creating a real name private key and a real name public key as real name registration information, and transmitting the public key and the real name registration information to the issuing device;
  Acquiring and verifying information L signed by the issuing device from the issuing device from the issuing device, and if the verification result is correct, storing the information L in the storage means;
  Generating anonymous registration information UIA including anonymous user public key and anonymous user information UIDA;
  Generating an information BI in which UIA and UIDA are blinded and transmitting the information BI to an issuing device;
  Performing post-processing of the blind part of the provisional anonymous registration certificate LAB transmitted from the issuing device, retrieving the anonymous registration certificate LA, and verifying the issuing institution registration document LI transmitted from the LAB and the issuing registration device;
  If the verification result is correct, the computer-readable recording medium stores a program for executing the step of storing LA in the storage step.
[0044]
DETAILED DESCRIPTION OF THE INVENTION
FIG. 3 shows the configuration of the anonymous application storage system of the present invention.
[0045]
The anonymous application storage system shown in FIG. 1 provides a user device and an issuing device 100 of an organization that issues and manages a registration certificate (hereinafter referred to as an issuing organization), and an organization that provides an AP (hereinafter referred to as an AP providing organization). Data provision device 200), user device 300 that is a user device (hereinafter referred to as user device U) for storing the registration certificate and AP, and the issuing organization are registered and managed, and the registration certificate is valid. The registration / registration device 400 of the organization that guarantees the authenticity (hereinafter referred to as the “issuing / registration organization RCI”) and the organization that registers and manages the AP provider and guarantees the validity of the AP (hereinafter referred to as the “AP registration organization RCD”) The data registration device 500 is used.
[0046]
Note that these devices only need to be able to exchange some kind of AP. For example, the devices are connected via a communication line or the like. These devices may use a tamper resistant device (IC card or the like).
[0047]
Further, the issuing device 100, the data providing device 200, the issuing registration device 400, and the data registration device 500 are pre-configured with a common key encryption method, a public key encryption method, a digital signature method, a secure hash (message digest) (Ikeno, Koyama Generate and hold key information (public key, private key, shared key, etc.) for certificate creation / certificate verification that uses cryptography, “The Institute of Electronics, Information and Communication Engineers” etc.) To do.
The terms used in the present invention are described below.
[0048]
Application program AP: Application program or program:
User device U: User device storing the AP:
-Issuing device I: Issuing organization device that issues, provides, and manages U:
Data providing device D: Device of data providing organization that provides AP:
-Issuing registration device RCI: Issuing / registration organization device that registers and manages I:
Data registration device RCD: Data providing organization device that registers and manages D:
Anonymous registration information UIA: Anonymous user public key:
・ Anonymous user information UIDA: Information that cannot be linked to real name or real name registration information (anonymous user ID, nickname, etc.)
・ Information that blinded UIA and UIDA BI: Information stirred by random numbers etc .:
Temporary anonymous registration certificate LAB: Information given certification information (blind signature generation) to BI:
・ Anonymous registration certificate LA: Information obtained by performing a process of returning stirring with a random number used when the blind part of LAB is brideed:
Key information PKI: Information (key information) used to give certification information is generated, and the information (key information or part of key information):
・ Issuing agency registration certificate LI:
Storage permission request DR: Information for requesting storage permission with proof information attached to AID:
Deletion permission request DER: Information for requesting deletion permission with certification information attached to AID:
Deletion permit DEL: Information with certification information attached to L and AID:
Registration information UI: Information about a key such as a user public key (public key, shared key in a common key method, etc.):
User information UID: Information consisting of a user identifier and the like:
Registration certificate L: Digital signature of the issuing organization for the UI and UID (or encrypted AP or secure hash):
Information PKI for granting certification information by the issuing institution (issuing apparatus 100): Information relating to the key such as the issuing institution public key (exchange key / shared key in the common key method):
Information PKD for granting certification information by the AP providing organization (data providing apparatus 200): Information relating to the key such as the issuing organization public key (public key / shared key in the common key method):
Issuing institution (issuing apparatus 100) registration certificate LI: Digital signature (or encrypted AP or secure hash) of the issuing registration institution (issuing registration apparatus 400) for PKI:
AP providing organization (data providing apparatus 200) registration certificate LTD: Digital signature (or encrypted AP or secure hash) of the AP registration organization for PKD:
-Stored AP information AID: Information consisting of stored AP identifier, etc .:
Storage permission request DR: Digital signature for L and AID (or encrypted AP or secure hash):
Storage permit DL: Digital signature for DR, AID (or encrypted AP or secure hash):
Storage APD: Information consisting of an AP program for storing in a user device, uniquely determined by AID:
-Stored APDS with certification information: Digital signature of AP provider (or encrypted AP or secure hash) for APD and AID:
Certificate creation unit: Digital signature (or encrypted AP or secure hash) creation unit for proving that the institution created the input AP:
Certificate verification unit: Digital signature (or encrypted AP or secure hash) verification unit for verifying the validity of the AP against the input AP:
Hereinafter, various operations will be described based on the above configuration.
[0049]
First, a case where user registration is performed anonymously as a first operation will be described.
[0050]
FIG. 4 is a sequence chart showing the first operation of the present invention.
[0051]
Step 101) The user apparatus U300 generates UIA (anonymous registration information) and UIDA (anonymous user information), and generates BI that blinds UIA and UIDA.
[0052]
Step 102) The user apparatus U300 transmits a BI to the issuing apparatus I100.
[0053]
Step 103) The issuing device I100 stores the received BI, gives certification information (blind signature generation) to the BI, and generates LAB (provisional anonymous registration certificate).
[0054]
Step 104) The issuing device I100 transmits the LAB to the user device U300.
[0055]
Step 105) The user apparatus U300 performs post-processing of the blind portion of the LAB (returns stirring by the random number used at the time of the blind), and takes out LA (anonymous registration certificate).
[0056]
Step 106) The user apparatus U300 verifies the LAB.
[0057]
Step 107) If the verification result is correct, LA is stored in the storage device.
[0058]
Next, as a second operation, an operation for performing user registration using an issuing registration organization will be described.
[0059]
FIG. 5 is a sequence chart showing the second operation of the present invention.
[0060]
Step 201) The issuing device I100 generates information (key information) used for granting certification information.
[0061]
Step 202) The information (key information or part of the key information) PKI is transmitted to the issuance registration apparatus RCI400.
[0062]
Step 203) The issuance registration apparatus RCI400 creates an LI (Issuing Authority Registration Form) for the PKI.
[0063]
Step 204) The LI is transmitted to the issuing device I100.
[0064]
Step 205) The issuing device I100 verifies the LI, and stores the LI if the verification result is correct.
[0065]
Step 206) The user apparatus U300 generates UIA (anonymous registration information (anonymous user public key)) and UIDA (anonymous user information).
[0066]
Step 207) The user apparatus U300 transmits information BI (blinded form with random numbers) obtained by blinding UIA and UIDA to the issuing apparatus I100.
[0067]
Step 208) The issuing device I100 adds certification information (blind signature generation) to the BI, and generates a LAB (provisional anonymous registration certificate).
[0068]
Step 209) LAB and LI are transmitted to the user apparatus U300.
[0069]
Step 210) The user apparatus U300 performs post-processing of the blind portion of the LAB (returns stirring by the random number used at the time of the blind) and takes out LA (anonymous registration certificate).
[0070]
Step 211) The user apparatus U300 verifies the received LAB and LI.
[0071]
Step 212) If the verification result is correct, the LA is stored in the storage device.
[0072]
Next, as a third operation, an operation for storing the AP in the user device U300 via the data providing device D200 will be described.
[0073]
FIG. 6 is a sequence chart showing the third operation of the present invention.
[0074]
Step 301) The user apparatus U300 transmits L (anonymous registration certificate) and AID (stored AP information) to the data providing apparatus D200.
[0075]
Step 302) The data providing apparatus D200 verifies the received L and AID.
[0076]
Step 303) If the verification result is correct, certification information is assigned to the AID and a DR (storage permission request) is created.
[0077]
Step 304) Transmit L, AID, and DR to the issuing device I100.
[0078]
Step 305) The issuing device I100 verifies DR (storage permission request). Step 306) If the verification result is correct, certification information is given to DR and AID, and DL (storage permit) is generated.
[0079]
Step 307) The DL is transmitted to the data providing apparatus D200.
[0080]
Step 308) The data providing apparatus D200 verifies the DL.
[0081]
Step 309) If the verification result is correct, DL and DR are transmitted to the user apparatus U300.
[0082]
Step 310) The user apparatus U300 verifies the received DL and DR.
[0083]
Step 311) If the verification result is correct, the association between the received APD and the AID transmitted first is verified by some method, and if the verification result is correct, the APD is stored.
[0084]
Next, as a fourth operation, an operation in which only an AP provider provides an AP anonymously will be described.
[0085]
FIG. 7 is a sequence chart showing the fourth operation of the present invention.
[0086]
Step 401) The user apparatus U300 transmits L (anonymous registration certificate) and AID (stored AP information) to the data providing apparatus D200.
[0087]
Step 402) The data providing apparatus D200 verifies the received L.
[0088]
Step 403) If the verification result is correct, certification information is assigned to L and AID, and DL (storage permit) is generated.
[0089]
Step 404) The data providing apparatus D200 transmits DL and DR to the user apparatus U300.
[0090]
Step 405) The user apparatus U300 verifies the received DL and DR.
[0091]
  Step406) If the verification result is correct, the association between the received APD and the AID transmitted first is verified by some method.
[0092]
  Step407) If the verification result is correct, store the APD.
[0093]
Next, an operation for deleting an AP via the data providing apparatus D200 will be described as a fifth operation.
[0094]
FIG. 8 is a sequence chart showing the fifth operation of the present invention.
[0095]
Step 501) The user apparatus U300 transmits L (anonymous registration certificate) and AID (deleted AP information) to the data providing apparatus D200.
[0096]
Step 502) The data providing apparatus D200 verifies the received L and AID.
[0097]
Step 503) If the verification result is correct, the data providing apparatus D200 adds certification information to the AID and creates a DER (deletion permission request).
[0098]
Step 504) The data providing apparatus D200 transmits L, AID, and DER to the issuing apparatus I100.
[0099]
Step 505) The issuing device I100 verifies the DER.
[0100]
Step 506) If the verification result is correct, proof information is given to DER and AID, DEL (deletion permit) is generated, and transmitted to the data providing apparatus D200.
[0101]
Step 507) The data providing apparatus D200 verifies DEL.
[0102]
Step 508) If the verification result is correct, DEL and DER are transmitted to the user apparatus U300.
[0103]
  Step 509) The user apparatus U300 verifies the received DEL and DER, andInThe association between the APD and the AID transmitted first is verified.
[0104]
Step 510) If the verification result is correct, the APD is deleted.
[0105]
Finally, AP deletion by only the data providing apparatus D200 will be described as a sixth operation.
[0106]
FIG. 9 is a sequence chart showing the sixth operation of the present invention.
[0107]
Step 601) The user apparatus U300 transmits L (anonymous registration certificate) and AID (deleted AP information) to the data providing apparatus D200.
[0108]
Step 602) The data providing apparatus D200 verifies the received L.
[0109]
Step 603) If the verification result is correct, proof information is given to the AID, and a DEL (deletion permit) is generated.
[0110]
Step 604) DEL and DER are transmitted to user apparatus U300.
[0111]
  Step 605) The user apparatus U300 receives the received DEL and DER.TheValidate.
[0112]
Step 606) If the verification result is correct, the association between the APD in the apparatus and the AID transmitted first is verified.
[0113]
Step 607) If the verification result is correct, the user apparatus U300 deletes the stored APD.
[0114]
【Example】
Embodiments of the present invention will be described below with reference to the drawings.
[0115]
[First embodiment]
In this embodiment, a case where user registration is performed will be described.
[0116]
First, the case of registering with a real name will be described.
[0117]
FIG. 10 shows a system configuration at the time of first user registration according to the first embodiment of this invention.
[0118]
The system shown in the figure includes an issuing device I100 and a user device U300. The issuing device I100 includes a database 110 and a certificate creation unit 120. The user device U300 includes a memory 310, a registration information generation unit 320, and a certificate verification unit 330.
[0119]
  The user apparatus U300 uses the registration information generation unit 320 to register the registration information UI to the registration apparatus I100, the userinformationThe UID is generated and stored in the memory 310, and the UI and UID are transmitted to the issuing device 100.
[0120]
The issuing device I100 uses the received UI and UID to create a registration certificate L in the certificate creation unit 120, stores it in the database 110, and transmits the registration certificate L to the user device U300.
[0121]
The user apparatus U300 verifies the registration certificate L by the certificate verification unit 330, and stores the registration certificate L in the memory 310 if the verification result is correct.
[0122]
Next, the case of anonymous user registration will be described.
[0123]
FIG. 11 shows a system configuration for second user registration according to the first embodiment of this invention. The system shown in the figure includes an issuing device I100 and a user device U300. The issuing device I100 includes a database 110 and a certificate creation unit 120. The user apparatus U300 includes a memory 310, a registration information generation unit 320, a blind generation unit 321, a certificate verification unit 330, and a blind post-processing unit 331.
[0124]
The user device U300 generates the anonymous registration information UIA and anonymous user information UID to the issuing device I100 using the registration information generation unit 320, stores the information in the memory 310, and uses the UIA and UID to generate the blind generation unit 321. Then, the random number information R is generated, and the information EI blinded by using the R and the random number information R are stored in the memory 310.
[0125]
The user device U300 transmits the EI to the issuing device I100.
[0126]
The issuing device I100 uses the received EI to create a blind anonymous registration certificate LAB by blind signature in the certificate creation unit 120, stores the EI and LAB in the database 110, and transmits the LAB to the user device U300. To do.
[0127]
The user apparatus U300 verifies the blind anonymous registration certificate LAB by the certificate verification unit 330. If the verification result is correct, the user apparatus U300 stores the LAB in the memory 310 and uses the R used when blinded with the LAB. The brand post-processing unit 331 performs blind post-processing to extract the signature registration certificate LA that has been blinded (returned the stirring by the random number) and stores it in the memory 310.
[0128]
In addition, blind processing and blind signatures in the above shall use blind signatures by D. Chaum, S. Brands, etc., partial brand signatures by Abe and Fujisaki, etc. (CRYPRO • 93 S. Brands, “ untraceable off-line cashin wallet with obserbers ". Asiacrypl, 96 AL Abe, E. Fujisaki," How to Date Blind signatures ", etc.).
[0129]
[Second Embodiment]
In this embodiment, a case where user registration is performed via the issue registration apparatus RCI400 will be described.
[0130]
FIG. 12 shows a system configuration at the time of user registration including the issuing and registering organization of the second embodiment of the present invention.
[0131]
The system shown in the figure includes an issue registration device RCI400, an issue device I100, and a user device U300.
[0132]
The issue / registration device RCI 400 includes a database 410 and a certificate creation unit 420. The issuing device I100 includes a database 110, a certificate creation unit 120, a certificate verification unit 130, and a key information generation unit 150. The user device U300 includes a memory 310, a registration information generation unit 320, and a certificate verification unit 330.
[0133]
The issuing device I100 generates information (key information) (used in the certificate creation unit 120) used to give certification information using the key information generation unit 150, and the information (key information or key information). A part of) PKI is transmitted to the issuance registration apparatus RCI400.
[0134]
The issuance registration apparatus RCI400 creates an LI (Issuing Authority Registration Form) using the certificate creation unit 420 for the PKI, stores the PKI and LI in the database 410, and transmits the LI to the issuance apparatus I100.
[0135]
The issuing device I100 verifies the LI using the certificate verification unit 130, and stores the LI in the database 110 if the verification result is correct.
[0136]
Next, a case where a real name registration certificate is used in user registration will be described.
[0137]
The user device U300 uses the registration information generation unit 320 to generate a UI (registration information) and UID (user information) for the issuing device I100, store them in the memory 310, and store the UI and UID in the issuing device I100. Send.
[0138]
  The issuing device 100 creates L (registration certificate) in the certificate creation unit 120 using the received UI and UID,The database110, and L and LI (issuing authority registration form) are transmitted to the user apparatus U300.
[0139]
The user apparatus U300 verifies L and LI by the certificate verification unit 330, and stores the L and LI in the memory 310 if the verification result is correct.
[0140]
Next, a case where an anonymous registration certificate is used in user registration will be described.
[0141]
FIG. 13 shows a system configuration at the time of user registration (anonymous) including the issuance registration organization of the present invention.
[0142]
The system shown in the figure includes an issue registration device RCI400, an issue device I100, and a user device U300.
[0143]
The issue / registration device RCI 400 includes a database 410 and a certificate creation unit 420. The issuing device I100 includes a database 110, a certificate creation unit 120, a certificate verification unit 130, and a key information generation unit 150. The user apparatus U300 includes a memory 310, a registration information generation unit 320, a blind generation unit 321, a certificate verification unit 330, and a blind post-processing unit 331.
[0144]
The user apparatus U300 generates a UIA (anonymous registration information) and UID (anonymous user information) to the issuing apparatus I100 using the registration information generation unit 320, stores the generated information in the memory 310, and uses the UIA and UID. The blind generation unit 321 generates R (random number information), and stores the information BI and R (random number information) blinded using the R in the memory 310.
[0145]
User device U300 transmits BI to issuing device I100.
[0146]
Issuing apparatus I100 creates a LAB (blind anonymous registration certificate) by blind signature in certificate creation unit 120 using the received BI, stores it in database 110, and transmits LAB and LI to user apparatus U300. To do.
[0147]
The user apparatus U300 verifies the LAB and LI using the certificate verification unit 330. If the verification result is correct, the user apparatus U300 stores the LAB and LI in the memory 310 and uses the R used when blinded with the LAB. The brand post-processing unit 331 performs post-blind processing, thereby taking out the LA (anonymized registration certificate) from which the blind has been removed (returning the stirring with the random number) and storing it in the memory 310.
[0148]
The blind processing and blind signature described above use blind signatures by D. Chaum and S. Brands, and partial blind signatures by Abe and Fujisaki.
[0149]
[Third embodiment]
In this embodiment, a case where an AP is stored via an issuing organization will be described.
[0150]
FIG. 14 shows a system configuration at the time of storing data via the issuing organization according to the third embodiment of the present invention.
[0151]
The system shown in the figure includes an issuing device I100, a data providing device D200, and a user device U300.
[0152]
The issuing device I100 includes a certificate creation unit 120, a certificate verification unit 130, and a stored data verification unit 140. The data providing apparatus D200 includes a database 210, a certificate creation unit 220, a certificate verification unit 230, and a stored data verification unit 240. The user device U300 includes a memory 310, a certificate verification unit 330, and a data confirmation unit 340.
[0153]
User apparatus U300 transmits L and AID (stored AP information) to issuing apparatus I100.
[0154]
The issuing apparatus I100 verifies L using the certificate verification unit 130, verifies the AID using the stored data verification unit 140, and if both verification results are correct, The certificate creation unit 120 is used to create a DR (storage permission request), and L, AID, and DR are transmitted to the data providing apparatus D200.
[0155]
The data providing apparatus D200 verifies the DR using the certificate verification unit 230, verifies the AID using the stored data verification unit 240, and if both verification results are correct, the certificate creation unit for the DR and AID. A DL (storage permit) is generated using 220, and the DL is transmitted to the issuing device I100.
[0156]
The issuing device I100 verifies the DL (storage permit) using the certificate verification unit 130, and transmits the DL and DR to the user device U300 if the verification result is correct.
[0157]
The user apparatus U300 verifies the DL and DR using the certificate verification unit 330, verifies the correspondence between the APD (stored AP) and the AID received by some method, using the data confirmation unit 340, and the verification result Is correct, the APD is stored in the memory 310.
[0158]
[Fourth embodiment]
In the present embodiment, a case where data (AP) is stored anonymously via a data providing organization will be described.
[0159]
FIG. 15 shows a system configuration when storing data via a data provider according to the fourth embodiment of the present invention.
[0160]
The system shown in the figure includes an issuing device I100, a data providing device D200, and a user device U300.
[0161]
The issuing device I100 includes a certificate creation unit 120, a certificate verification unit 130, and a stored data verification unit 140. The data providing apparatus D200 includes a database 210, a certificate creation unit 220, a certificate verification unit 230, and a stored data verification unit 240. The user device U300 includes a memory 310, a certificate verification unit 330, and a data confirmation unit 340.
[0162]
User apparatus U300 transmits LA (anonymous registration certificate) and AID (stored AP information) to data providing apparatus D200.
[0163]
The data providing apparatus D200 verifies the LA using the certificate verification 230 and verifies the AID using the stored data verification unit 240. If both verification results are correct, the data providing apparatus D200 responds to the sent LA and AID. A DR (storage permission request) is created using the certificate creation unit 220, and LA, AID, and DR are transmitted to the issuing device I100.
[0164]
The issuing device I100 verifies the DR using the certificate verification unit 130, verifies the AID using the stored data verification unit 140, and if both verification results are correct, the certificate creation unit 120 for the DR and AID. Is used to generate a DL (storage permit) and transmit the DL to the data providing apparatus D200.
[0165]
The data providing apparatus D200 verifies the DL using the certificate verification unit 230, and transmits the DL and DR to the user apparatus U300 if the verification result is correct.
[0166]
The user apparatus U300 verifies the DL and DR using the certificate verification unit 330, and verifies the correspondence between the received APD (stored AP information) and the AID using the data confirmation unit 340 by some method. If the verification result is correct, APD (stored AP information) is stored in the memory 310.
[0167]
[Fifth embodiment]
In this embodiment, a case where data (AP) is stored only by a data providing organization will be described.
[0168]
FIG. 16 shows a system configuration when data is stored by a data provider according to the fifth embodiment of the present invention.
[0169]
The system shown in the figure includes a data providing device D200 and a user device U300.
[0170]
The data providing apparatus D200 includes a database 210, a certificate creation unit 220, a certificate verification unit 230, and a stored data verification unit 240. The user device U300 includes a memory 310, a certificate verification unit 330, and a data confirmation unit 340.
[0171]
User apparatus U300 transmits LA (anonymous registration certificate) and AID (stored AP information) to data providing apparatus D200.
[0172]
The data providing apparatus D200 verifies the LA using the certificate verification unit 230, and if the verification result is correct, generates a DL (storage permit) using the certificate creation unit 220 for LA and AID, DL and DR are transmitted to the user apparatus U300.
[0173]
The user apparatus U300 verifies the DL using the certificate verification unit 330, verifies the correspondence between the APD (stored AP) received by some method and the AID using the data confirmation unit 340, and the verification result is correct. For example, the APD is stored in the memory 310.
[Sixth embodiment]
In this embodiment, a case where data (AP) is deleted through the issuing organization (issuing device I100) will be described.
[0174]
FIG. 17 shows a system configuration at the time of deletion of data via issuing authority according to the sixth embodiment of the present invention.
[0175]
The system shown in the figure includes an issuing device I100, a data providing device D200, and a user device U300.
[0176]
The issuing device I100 includes a certificate creation unit 120, a certificate verification unit 130, and a deletion data verification unit 140. The data providing apparatus D200 includes a database 210, a certificate creation unit 220, a certificate verification unit 230, and a deletion data verification unit 240. The user device U300 includes a memory 310, a certificate verification unit 330, and a data confirmation unit 340.
[0177]
User apparatus U300 transmits L and AID (deleted AP information) to issuing apparatus I100.
[0178]
The issuing device I100 verifies L using the certificate verification unit 130 and verifies the AID using the deletion data verification unit 140. If both verification results are correct, the issuing device I100 verifies the sent L and AID. The document creation unit 120 is used to create a deletion permission request DER, and L, AID, and DER are transmitted to the data providing apparatus D200.
[0179]
The data providing apparatus D200 verifies the DER using the certificate verification unit 230, verifies the AID using the deletion data verification unit 240, and if both verification results are correct, the certificate creation unit 220 for DER and AID. DEL (deletion permit) is generated using, and DEL is transmitted to the issuing device I100.
[0180]
The issuing apparatus I100 verifies the DEL using the certificate verification unit 130, and transmits the DEL and DER to the user apparatus U300 if the verification result is correct.
[0181]
The user apparatus U300 verifies the DEL using the certificate verification unit 330, verifies the association with the AID of the AP to be deleted using the AP confirmation unit 340, and deletes the APD from the memory 310 if the verification result is correct. To do.
[0182]
[Seventh embodiment]
In this embodiment, a case will be described in which data (AP) is deleted via a data providing organization (data providing apparatus D200).
[0183]
FIG. 18 shows a system configuration when deleting data via a data provider according to the seventh embodiment of the present invention.
[0184]
It comprises an issuing device I100, a data providing device D200, and a user device U300 shown in FIG.
[0185]
The issuing device I100 includes a certificate creation unit 120, a certificate verification unit 130, and a deletion data verification unit 140. The data providing apparatus D200 includes a database 210, a certificate creation unit 220, a certificate verification unit 230, and a deletion data verification unit 240. The user device U300 includes a memory 310, a certificate verification unit 330, and a data confirmation unit 340.
[0186]
User device U300 transmits LA (anonymous registration certificate) and AID (deleted AP information) to data providing device D200.
[0187]
The data providing apparatus D200 verifies the LA using the certificate verification unit 230, verifies the AID using the deletion data verification unit 240, and proves the sent LA and AID if both verification results are correct. The document creation unit 220 is used to create a DER (deletion permission request), and the LA, AID, and DER are transmitted to the issuing device I100.
[0188]
The issuing device I100 verifies the DER by using the certificate verification unit 130, verifies the AID by using the deletion data verification unit 140, and if the verification result of both is correct, the issuing device I100 uses the certificate creation unit 120 for DER and AID. The DEL (deletion permit) is generated using this, and transmitted to the DEL data providing apparatus D200.
[0189]
The data providing apparatus D200 verifies DEL (deletion permit) and DER using the certificate verification unit 230, and transmits DEL to the user apparatus U300 if the verification result is correct. The user apparatus U300 verifies the DEL using the certificate verification unit 330, verifies the association with the AID of the AP to be deleted using the data confirmation unit 340, and deletes the APD from the memory 310 if the verification result is correct. To do.
[0190]
[Eighth embodiment]
In this embodiment, a case where data (AP) deletion is performed only by a data providing organization (data providing apparatus D200) will be described.
[0191]
FIG. 19 shows a system configuration at the time of data deletion by only the data provider of the eighth embodiment of the present invention.
[0192]
The system shown in the figure includes a data providing device D200 and a user device U300. The data providing apparatus D200 includes a database 210, a certificate creation unit 220, a certificate verification unit 230, and a deletion data verification unit 240. The user device U300 includes a memory 310, a certificate verification unit 330, and a data confirmation unit 340.
[0193]
User device U300 transmits LA (anonymous registration certificate) and AID (deleted AP information) to data providing device D200.
[0194]
The data providing apparatus D200 verifies the LA using the certificate verification unit 230. If the verification result is correct, the data providing apparatus D200 generates the deletion permit DEL using the certificate creation unit 220 for LA and AID, and deletes the DEL and the deletion. The permission request DER is transmitted to the user apparatus U300.
[0195]
The user apparatus U300 verifies DEL and DER using the certificate verification unit 330, verifies the association with the AID of the deleted AP using the AP confirmation unit 340, and if the verification result is correct, the APD is stored from the memory 310. delete.
[0196]
In addition, the blind processing and blind signature used in the above-described embodiment use the following method.
[0197]
The RSA blind signature by D.Chaum is as follows when the user UI is the issuing device B, the private key of B is d (or p, q), and the public key of B is e, n: Done in the way.
[0198]
The UI generates a random number r, calculates x = r ^ eh (m) mod n, and sends it to B. m is UI registration information and user information, x is blinded registration information and user information, and the blind process itself indicates a process of calculating x from m.
[0199]
B generates y = x ^ d mod n and sends it to A. A brand signature is generated for the blinded information x, and y is the blind signature itself.
[0200]
The UI calculates s = y / r mod n. s is an anonymous registration certificate, and the process for obtaining s is the blind post-processing.
[0201]
Next, the blind Schnorr signature by Abe and Fujisaki et al. Is that the user's UI and issuing device B are B, B's private key is s, B's public key is v, g, p, q (where v = g When (^ (-s) mod p, q is the order of g), the following method is used.
[0202]
First, B generates a random number r, calculates x = g ^ r mod p, and sends x to the UI.
[0203]
The UI generates random numbers r and u,
x^*= G ^ uv ^ (-d) x mod p,
e^*= H ^ (x^*, M),
e = e^*+ D mod q
And the UI sends e to B. m is UI registration information and user information, and e is blind registration information and user information. The blind process itself refers to a series of processes for calculating e from m.
[0204]
B generates y = r + es mod q and sends it to A. This is equivalent to generating a blind signature for the blinded information x. y is the blind signature itself.
[0205]
・ UI is y^*= Y + u mod q is calculated. (E^*, Y^*) Is an anonymous registration card, y^*The processing itself that seeks out is the post-branding process.
[0206]
Moreover, although each said Example is demonstrated based on FIGS. 3-19, each operation | movement shown to each component of each block diagram and a sequence chart is constructed | assembled as a program for every apparatus, and this invention is implemented In this case, the present invention can be easily realized by installing in each device.
[0207]
The present invention is not limited to the above-described embodiments, and various modifications and applications are possible within the scope of the claims.
[0208]
【The invention's effect】
As described above, the present invention has the following effects.
[0209]
(1) A certificate issued by an issuing institution or an anonymous registration certificate guarantees the issuer (user) even in the case of anonymity, and processes such as storing and deleting APs are issued by a card issuing institution / service providing institution Both can be done safely.
[0210]
(2) Using an anonymous registration card, the user, the card issuing institution, and the service providing institution agree, and the card issuing institution and the service provider are equivalent to the IC card safely while maintaining the user's anonymity. It is possible to store and delete APs.
[0211]
(3) The card issuing organization and the service providing organization can grasp the information on the AP stored in the IC card anonymously while maintaining the anonymity of the user.
[Brief description of the drawings]
FIG. 1 is a diagram for explaining the principle of the present invention.
FIG. 2 is a principle configuration diagram of the present invention.
FIG. 3 is a block diagram of an anonymous application storage system of the present invention.
FIG. 4 is a sequence chart showing a first operation of the present invention.
FIG. 5 is a sequence chart showing a second operation of the present invention.
FIG. 6 is a sequence chart showing a third operation of the present invention.
FIG. 7 is a sequence chart showing a fourth operation of the present invention.
FIG. 8 is a sequence chart showing a fifth operation of the present invention.
FIG. 9 is a sequence chart showing a sixth operation of the present invention.
FIG. 10 is a system configuration diagram at the time of first user registration (real name registration certificate) according to the first embodiment of this invention;
FIG. 11 is a system configuration diagram of user registration (anonymous registration certificate) according to the first embodiment of this invention.
FIG. 12 is a system configuration diagram at the time of user registration including an issuance registration organization according to the second embodiment of this invention.
FIG. 13 is a system configuration diagram at the time of user registration (anonymous) including an issuance registration organization according to the second embodiment of the present invention.
FIG. 14 is a system configuration diagram at the time of storing data via the issuing organization according to the third embodiment of this invention.
FIG. 15 is a system configuration diagram when data is stored via a data provider according to a fourth embodiment of this invention.
FIG. 16 is a system configuration diagram when data is stored only by a data provider according to a fifth embodiment of the present invention;
FIG. 17 is a system configuration diagram at the time of deleting data via an issuing organization according to the sixth example of this invention.
FIG. 18 is a system configuration diagram when deleting data via a data provider according to a seventh exemplary embodiment of the present invention.
FIG. 19 is a system configuration diagram when data is deleted only by a data provider according to an eighth embodiment of the present invention;
[Explanation of symbols]
100 issuing device
110A first database,The database
120TestimonySecretariat preparation department
130 Certificate Verification Unit
140 Stored data verification unit
150 Key information generator
200 Data providing device
210 Database
220 Certificate generator
230 Certificate Verification Unit
240 Stored data verification unit
300 User device
310MeMori
320ClimbRecording information generator
321 Blind stationary part
330TestimonyCertificate verification department
331 Blind post-processing section
340 Data confirmation part
400 Issue registration device
410A second database,The database
420 Certificate generator
500 Data registration device

Claims (3)

In a system comprising an issuing device of an issuing organization that issues, provides and manages user devices, a user device of a user who registers a registration certificate, and an issue registration device of an issuing registration organization that registers and manages the issuing organization, In the registration certificate storage method,
When registering a real name registration certificate,
The issuing device is:
Generating key information PKI to be used for giving certification information, storing it in the first database, and transmitting the key information PKI to the issuance registration device;
The issue registration device includes:
Create an issuing institution registration form LI for the PKI, store the PKI and the LI in a second database, and send to the issuing device;
The issuing device is :
The LI transmitted from the issuance registration device is verified, and if the verification result is correct, the LI is stored in the first database,
The user device is
As the real name registration information, a real name private key and a real name public key are generated and stored in the memory, and the real name public key and the real name registration information are transmitted to the issuing device,
The issuing device is:
The real name public key and the registration certificate L signed with the real name registration information are stored in the first database and transmitted to the user device,
The user device is
The registration certificate L is verified, and if it is correct, the registration certificate L is stored in the memory.
When registering an anonymous registration certificate,
The user device is
Anonymous registration information UIA including anonymous user public key and anonymous user information UIDA are generated, stored in the memory, the UIA and UIDA blinded information BI are generated, stored in the memory, Send to the issuing device,
The issuing device is:
Providing certification information to the BI by generating a blind signature, generating a temporary anonymous registration certificate LAB, storing it in the first database, and sending it to the user device together with the LI,
The user device is
Perform post-processing of the blind part of the LAB sent from the issuing device, take out the anonymous registration certificate LA,
The registration certificate storing method, wherein the LAB and the LI are verified, and if the verification result is correct, the LA is stored in the memory. And issuing device for issuing authority that issues and providing and managing a user equipment, a user device of the user to register a registration card, in the system consisting of shelf registration apparatus issues registrar that registers and manages the issuing authority There,
The issuing device is:
Means for generating key information used to give the certification information, storing the key information in a first database, and transmitting the key information PKI to the issuance registration device;
Means for verifying the issuing institution registration form LI transmitted from the issuing registration device, and storing the LI in the first database if the verification result is correct;
Means for transmitting a public key acquired from the user device and a registration certificate L signed with registration information to the user device;
Wherein the blind signature generated for anonymous registration information UIA and blinding information BI anonymous user information UIDA sent from the user device to grant certification information to generate a provisional anonymous registration Rokusho LAB, together with the LI Means for transmitting to the user device;
The issue registration device includes:
A means for creating an issuing institution registration form LI for the PKI, storing it in a second database, and transmitting it to the issuing device,
The user device is
Means for generating a real name private key and a real name public key as real name registration information, and transmitting the public key and the real name registration information to the issuing device;
Means for verifying the registration certificate L acquired from the issuing device and storing the registration certificate L in a memory if correct.
Means for generating anonymous registration information UIA and anonymous user information UIDA including an anonymous user public key and storing them in the memory;
Means for generating a blind information BI of the UIA and UIDA, storing the information BI in the memory, and transmitting the information BI to the issuing device;
Means for performing post-processing of the LAB blind part transmitted from the issuing device, retrieving the anonymous registration certificate LA, and verifying the LAB and the LI;
If the verification result is correct, means for storing the LA in the memory;
A registration certificate storage system characterized by comprising: In a system comprising an issuing device of an issuing organization that issues, provides and manages user devices, a user device of a user who registers a registration certificate, and an issue registration device of an issuing registration organization that registers and manages the issuing organization, in systems, a computer-readable recording medium storing a program to be executed by a computer is used as the user apparatus,
In the computer,
When registering a user,
Creating a real name private key and a real name public key as real name registration information, and transmitting the public key and the real name registration information to the issuing device;
Acquiring and verifying information L signed from the issuing device by the issuing device from the issuing device, and storing the information L in a storage means if the verification result is correct;
Generating anonymous registration information UIA including anonymous user public key and anonymous user information UIDA;
Generating an information BI in which the UIA and UIDA are blinded and transmitting the information BI to the issuing device;
Performing post-processing of the blind part of the provisional anonymous registration certificate LAB transmitted from the issuing device, taking out the anonymous registration certificate LA, and verifying the issuing organization registration document LI transmitted from the LAB and the issuing registration device;
A computer-readable recording medium storing a program for executing the step of storing the LA in a storage means if the verification result is correct.

Images