JP4469129B2 - Electronic application system - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention enables encryption communication on a network using a public key cryptosystem to be performed by a facsimile terminal. Electronic application system About.
[0002]
[Prior art]
In recent years, it has become important to ensure the confidentiality of information when transmitting and receiving information over a network. As a technique for ensuring confidentiality, there is encryption communication in which information is encrypted and transmitted. Cryptographic communication is used to transmit information secretly only to a specific party. In this encrypted communication, when information is encrypted by a specific algorithm, a parameter called a key is set in the algorithm, and the key is kept secret between the sender and the receiver, thereby ensuring confidentiality. There is technology to ensure the sex.
[0003]
For example, when the information “This is a pen” is encrypted with an algorithm “shift each letter of the alphabet by a specific number”, if the “specific number” in the algorithm is “3 characters”, The information is encrypted to “Wklp lv d shq”. Here, the parameter “3 characters” is the key, and confidentiality is ensured by keeping it secret between the sender and the receiver. On the receiver side, the encrypted information is decrypted using “3 characters” which is the same key, and information “This is a pen.” Is obtained.
[0004]
The encryption communication is called a common key encryption method because a common key is used for encryption and decryption.
[0005]
In this common key cryptosystem, the problem is how to securely transmit the common key.
[0006]
There is a public key cryptosystem as a method for solving this problem.
[0007]
The public key cryptosystem is a scheme that performs encryption and decryption of information using two keys. One of these two keys is called a public key, and the other is called a secret key. A combination of two keys is called a key pair. The information encrypted with one key is decrypted with the other key.
[0008]
For example, Mr. A acquires a public key and a secret key. Mr. A keeps the secret key secret, but the public key is made public on the network so that anyone can obtain it. Assume that Mr. B obtains the public key. When Mr. B performs encrypted communication with Mr. A, Mr. B encrypts the information using the public key, while Mr. A decrypts the information using the private key owned by himself. At this time, since the encrypted information can be decrypted only with the private key and cannot be decrypted with the public key, only Mr. A having the private key can decrypt the information, and the confidentiality of the information is ensured. The
[0009]
In this public key cryptosystem, assuring the key owner is a problem.
[0010]
That is, Mr. C obtains his / her private key and public key, Mr. C impersonates Mr. A, and releases his / her public key as Mr. A's public key. In this case, Mr. B may think that the other party is Mr. A and encrypt the information using Mr. C's public key and send it to Mr. C. As a result, Mr. B's confidential information leaks to Mr. C who is not a related person.
[0011]
As a method for solving this problem, there is a method in which a third party guarantees the owner of the key as a certificate authority. In this method, the certificate authority confirms the identity of the owner of the key and issues a certificate that guarantees the key and its owner. Then, when transmitting information by encrypted communication, the certificate is transmitted to the recipient. This allows the receiver to confirm that the sender is the correct owner of the key based on the certificate. There are some certificate authorities that are operated by government agencies.
[0012]
As described above, a trusted third-party organization guarantees the owner of the key used for the public key cryptosystem as a certificate authority, thereby ensuring the confidentiality in the cryptographic communication using the public key cryptosystem. (For example, refer nonpatent literature 1.).
[0013]
[Non-Patent Document 1]
Information processing promotion business association, PKI related technical commentary, [online], July 19, 2002, [search August 7, 2002], Internet <http://www.ipa.go.jp/security/pki/index.html>
[0014]
[Problems to be solved by the invention]
However, according to the conventional technique, the following problems have occurred.
[0015]
That is, since the system for encrypted communication using the public key cryptosystem is performed by the sender and the receiver by operating the PC terminal, there is a problem that a person who cannot operate the PC terminal cannot use the system. It was.
[0016]
The present invention has been made in view of such a problem, and enables an encryption communication system using a public key cryptosystem to be used by a facsimile terminal even for a person who cannot operate a PC terminal. Electronic application system The purpose is to provide.
[0017]
[Means for Solving the Problems]
The present invention includes a facsimile machine on the applicant side, a server apparatus of a certificate authority that issues a certificate upon receipt of an application from the facsimile apparatus, an electronic application server that issues predetermined documents via the Internet by electronic application, An electronic application system comprising a communication control device that receives an application from the facsimile device and obtains a predetermined document from the electronic application server via the Internet and transmits the document to the facsimile device. Receiving means for receiving a person's certificate issuance request and identification document from the facsimile apparatus, a pair key composed of a secret key and a public key used for encryption communication by a public key cryptosystem based on the request contents, and the public Generating means for generating a public key certificate which is a key certificate, and each of the pair key and the public key certificate A certificate sheet issuing means for issuing a certificate sheet in which the barcode is arranged and the barcode is disposed; and a transmission means for transmitting the certificate sheet to the facsimile apparatus. Receiving means for receiving the application form and the certificate paper, and decoding the barcode from the certificate paper The private key, the public key, and the public key certificate are extracted, and the public key and the public key certificate are extracted. And transmitting means for transmitting the application form to the electronic application server via the Internet and encrypting a hash value generated from data received from the electronic application server so far with the secret key and transmitting the encrypted application to the electronic application server And a transmission unit that transmits the predetermined document to the facsimile device when the predetermined document that has been applied for from the facsimile device is acquired from the electronic application server, the electronic application server received from the communication control device A comparison unit that decrypts the encrypted hash value with the public key and compares the hash value generated from the data transmitted to the communication control device so far with the decrypted hash value, and matches with the comparison And transmitting means for recognizing the validity of the pair key and transmitting a predetermined document to the communication control device. It is intended.
[0018]
According to this, since encrypted communication by the public key cryptosystem can be performed based on the barcode information in the certificate paper, even a person who cannot operate the PC terminal can use the public key encryption using the facsimile terminal. Encrypted communication using the method can be performed.
[0019]
DETAILED DESCRIPTION OF THE INVENTION
An electronic application system according to a first aspect of the present invention includes an applicant-side facsimile apparatus, a certificate authority server apparatus that issues a certificate upon receipt of an application from the facsimile apparatus, and an electronic application via the Internet. An electronic application system comprising: an electronic application server that issues predetermined documents; and a communication control device that receives an application from the facsimile apparatus and acquires the predetermined documents from the electronic application server via the Internet and transmits the predetermined documents to the facsimile apparatus The server device includes: a receiving unit that receives the request contents of the applicant's certificate issuance and the identity confirmation document from the facsimile apparatus; and a secret key used for encryption communication by a public key cryptosystem based on the request contents. Generating means for generating a public key certificate which is a pair key composed of a public key and a public key certificate; A certificate paper issuing means for converting each of the key and the public key certificate into a barcode and issuing a certificate paper on which the barcode is arranged; and a transmission means for transmitting the certificate paper to the facsimile apparatus. The control device receives a predetermined application form and the certification sheet from the facsimile machine, and decodes the barcode from the certification sheet. The private key, the public key, and the public key certificate are extracted, and the public key and the public key certificate are extracted. And transmitting means for transmitting the application form to the electronic application server via the Internet and encrypting a hash value generated from data received from the electronic application server so far with the secret key and transmitting the encrypted application to the electronic application server And a transmission unit that transmits the predetermined document to the facsimile device when the predetermined document that has been applied for from the facsimile device is acquired from the electronic application server, the electronic application server received from the communication control device A comparison unit that decrypts the encrypted hash value with the public key and compares the hash value generated from the data transmitted to the communication control device so far with the decrypted hash value, and matches with the comparison And transmitting means for recognizing the validity of the pair key and transmitting a predetermined document to the communication control device. A configuration.
[0020]
According to this configuration, when the server device as the certificate authority receives an application for a pair key used for encryption communication by the public key cryptosystem from the facsimile terminal and a certificate for the public key constituting the pair key, the server device receives the pair key. And issue a certificate paper bar code of the public key certificate and send it to the applicant. As a result, when encryption communication using the public key cryptosystem is performed by a facsimile terminal, if a certificate sheet is used, it becomes unnecessary to input a pair key or attach a public key certificate. Even in such a case, using a facsimile terminal, it is possible to perform encrypted communication using a public key cryptosystem in which the guarantee of the key owner is secured by a third party.
[0021]
Further, by using a certificate sheet obtained by converting a pair key and a public key certificate constituting the pair key into a barcode, it is impossible to determine what is written just by looking at the certificate sheet. Therefore, even if the certificate paper is stolen, the certificate information of the pair key and the public key is not stolen. As a result, confidentiality can be reliably ensured by a simple method even when encryption communication is performed by a facsimile terminal using certificate paper.
[0024]
Further, when performing encryption, a certification paper is used in which a pair key used for encryption communication by a public key cryptosystem and information obtained by bar-coding a public key certificate constituting the pair key are used. For this reason, it is not necessary for the facsimile terminal to input a pair key used for encryption communication by the public key cryptosystem or to attach a certificate of the public key, and simply transmits a certificate sheet with information to be communicated. Just do it. Thereby, even a person who cannot operate the PC terminal can perform encrypted communication very easily using the facsimile terminal.
[0035]
Hereinafter, an embodiment of the present invention will be described in detail with reference to the drawings.
[0036]
FIG. 1 is a diagram illustrating a configuration example of a network to which a server device and a communication control device according to an embodiment of the present invention are connected.
[0037]
As shown in FIG. 1, a facsimile apparatus (hereinafter referred to as “FAX”) 100 is capable of performing facsimile communication with a server apparatus 300 and a communication control apparatus 400 via a public line network (hereinafter referred to as “PSTN”) 200. It has become. In addition, the communication control device 400 is communicable with an electronic application server 600 that accepts electronic applications via the Internet 500.
[0038]
Note that encrypted communication using a public key cryptosystem is performed between the communication control device 400 and the electronic application server 600 in order to ensure the confidentiality of information. In the present embodiment, the electronic application server 600 will be described using a wireless worker license electronic application server (hereinafter referred to as “wireless license application server”) 600 of the Ministry of Internal Affairs and Communications.
[0039]
The present invention realizes a cryptographic communication system using a public key cryptosystem using the FAX 100. In addition, when performing cryptographic communication using the public key cryptosystem using the FAX 100, a key pair composed of a public key and a private key, and proof that it is the owner of the public key in this key pair The public key certificate to be used is the same as in the case of performing cryptographic communication using a public key cryptosystem using a personal computer (hereinafter referred to as “PC”).
[0040]
The server device 300 is operated under the management of a certificate authority that performs public key certificate issuance procedures. Under the direction of the person in charge of the certificate authority, the above key pair and public key certificate are generated in response to an application from a FAX 100 user, and the generated key pair and public key certificate are each arranged as a bird image. Issue paper (hereinafter referred to as “certification paper”).
[0041]
The communication control device 400 performs cryptographic communication using the public key cryptosystem with the wireless license application server 600 based on the barcode image arranged on the certificate paper issued by the server device 300. That is, information from the FAX 100 user is encrypted and transmitted to the wireless license application server 600, while information from the wireless license application server 600 is encrypted and received.
[0042]
Here, a rough flow of information when the FAX 100 applies to the wireless license application server 600 for issuance of a wireless worker license (hereinafter referred to as “wireless license”) and the applicant receives the wireless license with the FAX 100. Will be described.
[0043]
The applicant first requests the server apparatus 300 to issue a certificate sheet and receives the certificate sheet from the server apparatus 300. Then, the certificate sheet is sent to the communication control apparatus 400 by facsimile as the first sheet and the wireless license application form as the second sheet.
[0044]
The communication control device 400 performs encrypted communication with the wireless license application server 600 based on the barcode image arranged on the certification sheet, and receives the wireless license file from the wireless license application server 600. Then, the reception notification is transmitted to the FAX 100.
[0045]
The applicant who has received the reception notification transmits the certification sheet from the FAX 100 to the communication control device 400 again. The communication control device 400 authenticates the applicant based on the barcode image of the certification sheet, and transmits the wireless license image to the FAX 100 by facsimile.
[0046]
Hereinafter, the configuration of the server apparatus 300 will be described, and processing in the case where a certificate sheet is issued in the server apparatus 300 will be described. As illustrated in FIG. 1, the server device 300 includes a communication unit 301, a generation unit 302, and a certificate paper issue unit 303.
[0047]
The communication unit 301 performs facsimile communication with the FAX 100 via the PSTN 200. The communication unit 301 prepares FAX numbers for requesting certificate paper, transmitting identity verification documents, and taking out certificate paper. When an incoming call is received for each FAX number, processing corresponding to the use of the FAX number is executed. .
[0048]
The generation unit 302 generates a pair key and a public key certificate used for encryption communication by the public key cryptosystem based on information specifying the FAX 100 user described in the certificate request sheet received by the communication unit 301. To do.
[0049]
The certificate issuance unit 303 converts the pair key and public key certificate generated by the generation unit 302 into a two-dimensional barcode image (hereinafter referred to as “barcode image”) with a preset specified resolution. A certificate paper image in which an image and a timing mark are arranged is generated.
[0050]
The server device 300 is connected to a PC 304 operated by a person in charge of the certificate authority. The person in charge of the certificate authority uses this PC 304 to confirm whether the person described on the certificate request paper is the same person as the person described in the personal identification document.
[0051]
2 to 4 are flowcharts for issuing a certificate sheet in the server device 300. FIG. The processing for issuing a certificate sheet in the server apparatus 300 is divided into a process for accepting a certificate sheet issue request shown in FIG. 2, a process for issuing a certificate sheet shown in FIG. 3, and a process for taking out a certificate sheet shown in FIG. . Hereinafter, each process will be described individually.
[0052]
When requesting the server device 300 to issue a certificate sheet, the applicant first fills in the necessary items on the certificate sheet request sheet and transmits it to the FAX number for transmitting the certificate sheet (ST201). This certificate paper request sheet is distributed in advance to the users of the FAX 100, and the FAX number for transmitting the certificate sheet is described on the certificate paper request sheet.
[0053]
FIG. 5 shows the configuration of the certificate request paper. As shown in the figure, the certificate request form is provided with a field for entering information for identifying an applicant who requests to issue a certificate. In addition, the FAX number (11-222-9990) for transmitting the certification sheet is described.
[0054]
When the server unit 300 receives the certificate sheet request form from the FAX number for transmitting the certificate sheet, the server unit 300 generates a reception number. Then, a certificate request acceptance notice describing this receipt number is transmitted to the FAX 100 by the communication unit 301 (ST202).
[0055]
FIG. 6 shows the configuration of the certificate acceptance notice. As shown in the drawing, the certificate acceptance notice includes the receipt number (123456789) generated by the server device 300 and the FAX number (11-222-9991) for sending the identity confirmation document. Is transmitted.
[0056]
Upon receiving the certificate acceptance notice, the applicant connects to the FAX number for transmitting the personal identification document, and then inputs the receipt number described in the certificate acceptance notice from the input button of FAX 100 according to the voice guidance ( ST203).
[0057]
Server apparatus 300 confirms whether or not there is a certificate request that matches the input receipt number (ST204). When there is a certificate request with the same receipt number, a voice guidance is sent to notify that an identification document is to be transmitted.
[0058]
The applicant transmits an identification document according to the voice guidance (ST205). As the identity verification document, a driver's license as shown in FIG. 7 that can confirm the contents entered on the certificate request form is desirable. The applicant reads an identification document such as a driver's license with a handy scanner or the like and transmits it to the server device 300.
[0059]
In the server apparatus 300, when the identity verification document is received by the communication unit 301 from the FAX number for transmitting the identity verification document, the data of the identity verification document is stored together with the data of the certificate request form received earlier (ST206).
[0060]
Then, the server device 300 notifies the PC 304 of the person in charge of the certificate authority by e-mail that there has been a certificate request (ST207). As a result, the process of accepting the certificate issuance request is completed.
[0061]
If there is no certificate issuance request that matches the input receipt number in ST204, server apparatus 300 transmits a document (error document) to that effect to FAX 100 (ST208). In addition, it may be notified that there is no certificate issuance request matching the receipt number input in the voice guidance.
[0062]
Next, processing for issuing a certificate sheet by the server apparatus 300 will be described.
[0063]
Upon receiving an e-mail indicating that a certificate paper issuance request has been received, the person in charge of the certificate authority accesses the server device 300, and the certificate paper request form and the personal identification document stored in the server device 300 by a WWW browser or the like Display the applicant confirmation screen where is displayed.
[0064]
FIG. 8 shows an example of an applicant confirmation screen displayed on the PC 304 of the person in charge of the certificate authority. As shown in the figure, on the applicant confirmation screen, the certificate request form data and the identity confirmation document are displayed.
[0065]
The person in charge of the certificate authority visually confirms the certificate request paper and the identity confirmation document on this applicant confirmation screen, and confirms the consistency between them (ST301). After confirming the consistency between the two, the person in charge of the certificate authority displays an applicant re-input screen.
[0066]
FIG. 9 shows an example of an applicant re-input screen displayed on the PC 304 of the person in charge of the certificate authority. As shown in the figure, the applicant re-input screen is provided with a field for re-inputting information specifying the applicant, such as an address and name, and a confirmation button indicating that the re-input has been completed.
[0067]
The person in charge of the certificate authority selects the confirmation button after re-entering information for identifying the applicant. When the confirmation button is selected, the server apparatus 300 is instructed to generate a certificate for the applicant (ST302).
[0068]
Upon receiving this instruction, in the server apparatus 300, the generation unit 302 generates the applicant's key pair (private key and public key) and public key certificate (ST303). These key pairs and public key certificates are generated based on information identifying the applicant entered on the certificate request form.
[0069]
When the key pair and the public key certificate are generated, the certificate paper issuing unit 303 converts the key pair and the public key certificate into a barcode image with a preset specified resolution (ST304).
[0070]
Then, the certificate paper issuing unit 303 generates a certificate paper image in which the barcode image is arranged in the order of the secret key, the public key, and the effect key certificate (ST305). In the certificate paper image, a timing mark is arranged together with the barcode image. The certificate sheet issuing unit 303 assigns a number for managing the certificate sheet (hereinafter referred to as “certification sheet number”) when generating the certificate sheet image.
[0071]
FIG. 10 shows an example of a certificate sheet image generated by the certificate sheet issuing unit 303. As shown in the figure, barcode images are arranged in the certificate paper image corresponding to the private key, public key, and public key certificate. In addition, a timing mark 1001 for specifying the position of each barcode image is disposed around the periphery.
[0072]
When the certificate sheet image is generated, in the server apparatus 300, the communication unit 301 transmits a certificate sheet issuance notification to the FAX 100 (ST306). As a result, the processing for issuing the certificate sheet in the server device 300 is completed.
[0073]
FIG. 11 shows the configuration of the certificate issuance notice. As shown in the figure, the certificate paper issuance notification indicates that the certificate paper has been issued, and also describes the certificate paper number (8888). Also, a FAX number (11-222-9992) for taking out the certification paper is described.
[0074]
Next, a process in which the applicant takes out the certification sheet from the server device 300 will be described.
[0075]
Upon receipt of the certificate issuance notice, the applicant connects to the FAX number for taking out the certificate, and then inputs the certificate sheet number described in the certificate issuance notice according to the voice guidance from the input button of FAX 100 ( ST401).
[0076]
Server apparatus 300 checks whether there is a certificate sheet image that matches the entered certificate sheet number (ST402). If there is a certificate paper image with the same certificate paper number, server apparatus 300 transmits a certificate paper image corresponding to the certificate paper number to FAX 100 using communication unit 301 (ST403). Thereby, the process of taking out the certification sheet from the server apparatus 300 is completed.
[0077]
If there is no certificate sheet image that matches the input certificate number in ST402, server apparatus 300 transmits a document (error document) indicating that fact to FAX 100 (ST404). Note that it may be notified that there is no certificate sheet image with the same certificate sheet number input in the voice guidance.
[0078]
Through such a series of processing, the user of the FAX 100 can obtain a certificate sheet on which a key pair assigned to the FAX 100 and a barcode image of a public key certificate are arranged.
[0079]
As described above, when the server apparatus 300 receives an application for a pair key used for encryption communication by the public key cryptosystem from the FAX 100 and a certificate of a public key constituting the pair key, the server apparatus 300 verifies the pair key and the public key. Issue a certificate with a bar-coded certificate and send it to the applicant. As a result, when encryption communication using the public key cryptosystem is performed by the FAX 100, if a certificate sheet is used, it is not necessary to input a pair key or attach a public key certificate. However, using the FAX 100, it is possible to perform encrypted communication using a public key cryptosystem in which the guarantee of the key owner is secured by a third party.
[0080]
Further, by using a certificate sheet obtained by converting a pair key and a public key certificate constituting the pair key into a barcode, it is impossible to determine what is written just by looking at the certificate sheet. Therefore, even if the certificate paper is stolen, the certificate information of the pair key and the public key is not stolen. Thereby, even if it is a case where encryption communication is performed by FAX100 using a certificate paper, confidentiality can be reliably ensured by a simple method.
[0081]
Next, the configuration of the communication control device 400 will be described, and the processing when information is transmitted from the FAX 100 via the communication control device 400 and the processing when information is received by the FAX 100 via the communication control device 400 will be described. To do.
[0082]
As illustrated in FIG. 1, the communication control apparatus 400 includes a first communication unit 401, a second communication unit 402, a control unit 403, a registration unit 404, and a storage unit 405.
[0083]
The first communication unit 401 performs facsimile communication with the FAX 100 via the PSTN 200. The first communication unit 401 prepares FAX numbers for FAX transmission and order document retrieval. When an incoming call is received at each FAX number, processing corresponding to the use of the FAX number is executed.
[0084]
The second communication unit 402 communicates encrypted information with the wireless license application server 600 via the Internet 500. The second communication unit 402 communicates with the wireless license application server 600 according to FTP (File Transfer Protocol).
[0085]
The control unit 403 controls the communication control apparatus 400 as a whole. Specifically, the first communication unit 401 and the second communication unit 402 are controlled to communicate with the FAX 100 and the wireless license application server 600, respectively. Further, when performing communication, information registered in the registration unit 404 is referred to, and information obtained there is stored in the storage unit 405.
[0086]
Registered in the registration unit 404 are an electronic application server management table 700 for managing information on each electronic application server on the Internet 500 and a FAX management table 800 for managing information on the applicant's FAX.
[0087]
12 shows an example of information managed by the electronic application server management table 700 registered in the registration unit 404, and FIG. 13 shows an example of information managed by the FAX management table 800.
[0088]
As shown in FIG. 12, in the electronic application server management table 700, a management number 701 is assigned to each electronic application server. The FTP IP address / SSL port 702, FTP user / password 703, and error notification mail address 704 of each electronic application server are registered in association with the management number 701. It is assumed that the management number 701 of the wireless license application server 600 is “1001”.
[0089]
As shown in FIG. 13, in the FAX management table 800, the applicant's FAX number 801 is registered, and the applicant's FTP user / password 802 and public key certificate 803 are associated with the FAX number 801. It is registered. The FAX number of the FAX 100 is “1234-56-7890”.
[0090]
The storage unit 405 stores information received from the wireless license application server 600. The information stored in the storage unit 405 is transmitted to the FAX 100 via the first communication unit 401 in response to a request from the applicant.
[0091]
Next, processing when information is transmitted from the FAX 100 via the communication control apparatus 400 will be described with reference to flowcharts shown in FIGS. 15 to 21 with reference to a sequence diagram shown in FIG. FIG. 14 is a sequence diagram in the case of transmitting information from the FAX 100, and FIGS. 15 to 21 are flowcharts thereof. Here, it is assumed that the applicant wishes to issue a wireless license from the wireless license application server 600, and the processing when the wireless worker license application (hereinafter referred to as “wireless license application”) is transmitted is described. To do.
[0092]
When transmitting a wireless license application form from the FAX 100 to the wireless license application server 600, as shown in FIG. 14, after the certificate sheet and the wireless license application form are transmitted by facsimile from the FAX 100 to the communication control apparatus 400, the communication control apparatus A wireless license application form subjected to encryption processing is transmitted from 400 to wireless license application server 600.
[0093]
Note that when communicating with the wireless license application server 600, the communication control device 400 first performs communication according to the SSL protocol, and then performs encrypted communication using the common key generated according to the SSL protocol. 14 and 15 to 21, communication processing according to the SSL protocol is indicated by a dotted line, and encrypted communication processing using a common key is indicated by a double line.
[0094]
When transmitting the wireless license application, the applicant first connects from the FAX 100 to the FAX number for FAX transmission of the communication control device 400 (ST1401, ST1501).
[0095]
In communication control apparatus 400, control unit 403 searches for an applicant's FTP user / password 802 from FAX management table 800 according to the FAX number of the caller, and stores it in the applicant information file (ST1502). The applicant information file is stored in a certain area of the storage unit 405. Here, “fax001” is stored as the FTP user of the applicant, and “none” is stored as the password.
[0096]
After connecting to the FAX number for FAX transmission, the applicant inputs the desired electronic application server management number in accordance with the output voice guidance (ST1402). Here, the management number (1001) of wireless license application server 600 is input (ST1403, ST1503). It is assumed that the management number of each electronic application server is recognized in advance by the applicant.
[0097]
Further, according to the voice guidance, the applicant inputs whether or not to give an electronic signature indicating whether or not to give an electronic signature when transmitting information from the communication control device 400 to the wireless license application server 600 (ST1404, ST1504). .
[0098]
Then, the applicant transmits the certification sheet obtained in advance as the first sheet and the wireless license application form in which necessary information is filled as the second sheet or later to the communication control device 400 (ST1405, ST1505). It is assumed that the wireless license application form is obtained in advance by the Ministry of Internal Affairs and Communications.
[0099]
FIG. 22 shows the configuration of the wireless license application form. As shown in the figure, the wireless license application form includes fields for entering information such as the national examination pass number and training process place in addition to the information for identifying the applicant.
[0100]
On the other hand, in the communication control device 400, the first communication unit 401 receives the designated management number “1001”, and also creates a document image (TIFF) with the first certificate sheet and the second and subsequent wireless license application forms. Image) is received (ST1506).
[0101]
The control unit 403 divides this document image into the first and second and subsequent sheets (ST1507), saves the first document image in the certificate paper image file, and wirelessly processes the second and subsequent document images. The license application form image file is saved (ST1601). Note that the certificate paper image file and the wireless license application form image file are each stored in a predetermined area of the storage unit 405.
[0102]
The control unit 403 recognizes the timing mark from the certificate paper image file by OMR and identifies the private key, public key, and public key certificate image area on the certificate paper image (ST1602), and then the private key, public key, and public key. The barcode image of the key certificate is cut out (ST1603). Further, these barcode images are decoded, and the private key and public key are converted into numerical values, while the public key certificate is converted into text data (ST1604).
[0103]
Then, control section 403 determines whether or not an electronic signature is attached (ST1605). That is, in ST1404 and ST1504, it is determined whether or not an electronic signature input from the applicant is provided. When giving an electronic signature is instructed, control section 403 calculates a hash value from the wireless license application form image file (ST1606).
[0104]
Further, control section 403 encrypts this hash value with the applicant's private key obtained in ST1604 to form an electronic signature, and stores this in an electronic signature file (ST1607). The electronic signature file is stored in a certain area of the storage unit 405.
[0105]
When the processing so far is completed, the control unit 403 determines the FTP IP address of the wireless license application server 600 from the electronic application server management table 700 registered in the registration unit 404 based on the previously received management number “1001”. / SSL port number 702 (192.168.2.1/989, 990) and FTP user / password 703 (user 1001 / none) are acquired (ST1701).
[0106]
When these pieces of information are acquired, the control unit 403 communicates with the wireless license application server 600 according to the SSL protocol. First, the second communication unit 402 connects to the FTP SSL port (989, 990) of the wireless license application server 600 (ST1406, ST1702).
[0107]
When connected to communication control device 400, wireless license application server 600 transmits its own public key certificate stored in advance to communication control device 400 (ST1407, ST1703). The wireless license application server 600 also holds its own private key and public key in advance.
[0108]
In the communication control apparatus 400, when the second communication unit 402 receives the public key certificate of the wireless license application server 600, the control unit 403 uses the public key certificate of the certificate authority that has been held in advance to perform the wireless license application server. The validity of the 600 public key certificate is confirmed (ST1704).
[0109]
Specifically, the hash value is extracted by decrypting the signature value data with the public key included in the public key certificate of the certificate authority from the contents of the public key certificate of the wireless license application server 600 shown in FIG. On the other hand, the hash value of the certificate data before signing the public key certificate of the wireless license application server 600 is calculated. Then, the validity of the public key certificate of the wireless license application server 600 is confirmed by comparing both hash values.
[0110]
When the validity of the public key certificate of the wireless license application server 600 is confirmed, in the communication control device 400, the second communication unit 402 transmits the applicant's public key certificate to the wireless license application server 600 (ST1408, ST1705). ).
[0111]
Upon receiving the applicant's public key certificate, the wireless license application server 600 uses the certificate authority's public key certificate held in advance in the same manner as the communication control device 400. Is confirmed (ST1706).
[0112]
After transmitting the applicant's public key certificate, the communication control device 400 generates a master secret that is a prime of the common key in the control unit, and encrypts the master secret with the public key of the wireless license application server 600. Thereafter, the encrypted master secret is transmitted from second communication section 402 to radio license application server 600 (ST1409, ST1801).
[0113]
Here, the reason that the master secret is encrypted with the public key of the radio license application server 600 is that only the radio license application server 600 that holds the public key certificate whose validity has been confirmed can receive the master secret. It is for doing so.
[0114]
Receiving the master secret, radio license application server 600 decrypts it with its own secret key and obtains the master secret (ST1802).
[0115]
In communication control apparatus 400, control unit 403 generates a common key (session key) from the master secret (ST1803). On the other hand, radio license application server 600 generates a common key (session key) from the master secret acquired in ST1802 (ST1804).
[0116]
After generating the common key, the communication control apparatus 400 generates a hash value from the data received so far from the wireless license application server 600 by the control unit 403 and encrypts it with the applicant's private key. Thereafter, the second communication unit 402 transmits the encrypted hash value to the wireless license application server 600 (ST1410, ST1805).
[0117]
Upon receiving this encrypted hash value, the wireless license application server 600 decrypts it with the applicant's public key. On the other hand, a hash value is generated from the data transmitted to communication control apparatus 400 so far and compared with the decrypted hash value (ST1901).
[0118]
This confirms the validity of the applicant's key pair. The confirmation of the validity of the applicant's key pair here and the confirmation of the validity of the applicant's public key certificate performed earlier proves that the applicant holds an appropriate key pair. That is, at this time, the applicant is authenticated.
[0119]
Subsequently, communication control apparatus 400 generates a hash value from the data received from wireless license application server 600 so far by control section 403, and encrypts it with the common key generated in ST1803. Thereafter, the second communication unit 402 transmits the encrypted hash value to the wireless license application server 600 (ST1411, ST1902).
[0120]
Upon receiving this encrypted hash value, wireless license application server 600 decrypts it with the common key generated in ST1804. On the other hand, a hash value is generated from the data transmitted to communication control apparatus 400 so far, and compared with the decrypted hash value (ST1903). As a result, the validity of the common key generated by the communication control device 400 is confirmed.
[0121]
This time, the wireless license application server 600 generates a hash value from the data received from the communication control apparatus 400 so far, and encrypts it with the common key generated in ST1804. Thereafter, the encrypted hash value is transmitted to communication control apparatus 400 (ST1412, ST1904).
[0122]
When this encrypted hash value is received by second communication section 402, communication control apparatus 400 uses control section 403 to decrypt this with the common key generated in ST1803. On the other hand, a hash value is generated from the data transmitted so far to the wireless license application server 600 and compared with the decrypted hash value (ST1905). As a result, the validity of the common key generated by the wireless license application server 600 is confirmed. At this point, it is confirmed that the correct common key is shared, and authentication of the wireless license application server 600 is established.
[0123]
When authentication of wireless license application server 600 is established, communication control apparatus 400 determines whether all processes performed so far by control unit 403 are normal (ST2001). If everything is normal, the process shifts to encrypted communication using a shared common key. All subsequent communications are encrypted and transmitted using the common key at the transmission source (communication control device 400), and decrypted using the common key at the transmission destination (wireless license application server 600).
[0124]
Communication control apparatus 400 first logs in to FTP of wireless license application server 600 using second communication section 402 (ST1413, ST2002). At this time, the second communication unit 402 logs in using the FTP user / password (user 1001 / none) of the wireless license application server 600 of the electronic application server management table 700 registered in the registration unit 404.
[0125]
Subsequently, the second communication unit 402 FTP-transmits the wireless license application form image file stored in a certain area of the storage unit 405 to the wireless license application server 600 (ST1414, ST2003).
[0126]
Furthermore, the second communication unit 402 transmits the applicant information file stored in a certain area of the storage unit 405 to the wireless license application server 600 by FTP (ST1415, ST2004).
[0127]
Communication control apparatus 400 determines whether or not there is an instruction to give an electronic signature from the applicant in control unit 403 (ST2005). When giving an electronic signature has been instructed, the second communication unit 402 FTP-transmits an electronic signature file stored in a predetermined area of the storage unit 405 to the wireless license application server 600 (ST1416, ST2006).
[0128]
When the transmission of the electronic signature file is completed, the communication control apparatus 400 logs out the FTP of the wireless license application server 600 using the second communication unit 402 (ST1417, ST2101).
[0129]
Further, second communication section 402 disconnects the connection with SSL port (989, 990) of wireless license application server 600 that was connected in ST1406 (ST1418, ST2102).
[0130]
After disconnecting the SSL license application server 600 from the SSL port, in the communication control device 400, the control unit 403 discards the applicant's private key, public key, and public key certificate stored in the storage unit 405. (ST2103).
[0131]
Finally, the communication control apparatus 400 disconnects the connection with the applicant's FAX 100 by the first communication unit 401 (ST1419, ST2104). In this manner, the process of transmitting the wireless worker license application form from the FAX 100 to the wireless license application server 600 via the communication control device 400 is completed.
[0132]
If it is determined in ST2001 that the processing performed so far has not been completed normally, the communication control apparatus 400 transmits a document indicating that to the FAX 100 using the first communication unit 401. (ST2105), the process proceeds to ST2103.
[0133]
As described above, according to the communication apparatus of the present embodiment, the image data transmitted from the FAX 100 converts the pair key used for the encryption communication by the public key cryptosystem and the certificate of the public key constituting the pair key into a barcode. It is divided into the certificate paper in which the information is arranged and the information to be communicated, and the communication target information is encrypted using the common key generated based on the barcode information in the certificate paper, and then the destination It is transmitted to the wireless license application server 600. For this reason, even a person who cannot operate the PC terminal can perform encrypted communication using the public key cryptosystem using the FAX 100.
[0134]
Further, when performing encryption, a certification paper is used in which a pair key used for encryption communication by a public key cryptosystem and information obtained by bar-coding a public key certificate constituting the pair key are used. For this reason, in the FAX 100, there is no need to perform an operation of inputting a pair key used for encryption communication by the public key cryptosystem or attaching a certificate of the public key, and simply transmit a certificate sheet with information to be communicated. Just do it. Thereby, even a person who cannot operate the PC terminal can perform encrypted communication very easily using the FAX 100.
[0135]
Furthermore, since a certificate sheet in which a pair key and public key certificate is converted into a barcode is used, it is impossible to determine what is written just by looking at the certificate sheet. For this reason, even if the certificate paper is stolen, the certificate information of the pair key and the public key is not stolen, and even if encryption communication is performed by a facsimile terminal using the certificate paper, a simple method Can ensure confidentiality.
[0136]
Next, processing when information is received by the FAX 100 via the communication control device 400 will be described using the flowcharts shown in FIGS. 25 to 33 with reference to the sequence diagram shown in FIG. FIG. 24 is a sequence diagram when information is received by the FAX 100 via the communication control device 400, and FIGS. 25 to 33 are flowcharts thereof. Here, a process in the case where a wireless license applied in advance is received from the wireless license application server 600 by the FAX 100 will be described.
[0137]
In the process of receiving the wireless license from the wireless license application server 600 via the communication control device 400, a communication notification is received from the wireless license application server 600 to notify that the communication control device 400 has received the wireless license. Processing received from control device 400 (processing (1) shown in FIG. 24) and processing for receiving a radio license from communication control device 400 in accordance with this reception notification (processing (2) shown in FIG. 24) And divided.
[0138]
First, the process of receiving from the communication control device 400 a reception notification form for notifying that the communication control device 400 has received a wireless license from the wireless license application server 600 will be described.
[0139]
When communicating with the communication control apparatus 400, the wireless license application server 600 first performs communication according to the SSL protocol, and then performs encrypted communication using the common key generated according to the SSL protocol. 24 and 25 to 33, communication processing according to the SSL protocol is indicated by a dotted line, and encrypted communication processing using a common key is indicated by a double line.
[0140]
When transmitting the wireless license to the FAX 100 via the communication control device 400, the wireless license application server 600 communicates with the communication control device 400 according to the SSL protocol. First, the wireless license application server 600 connects to the FTP SSL port (989, 990) of the communication control device 400 (ST2401, ST2501).
[0141]
When connected to wireless license application server 600, communication control device 400 transmits its own public key certificate to wireless license application server 600 through second communication unit 402 (ST2402, ST2502).
[0142]
When receiving the public key certificate of the communication control device 400, the wireless license application server 600 confirms the validity of the public key certificate of the communication control device 400 using the public key certificate of the certificate authority that is held in advance. (ST2503).
[0143]
Specifically, the hash value is extracted by decrypting the signature value data from the contents of the public key certificate of the communication control device 400 with the public key included in the public key certificate of the certificate authority. On the other hand, the hash value of the certificate data before signing the public key certificate of the communication control device 400 is calculated. Then, the validity of the public key certificate of the communication control device 400 is confirmed by comparing both hash values.
[0144]
When the validity of the public key certificate of the communication control device 400 is confirmed, the radio license application server 600 transmits the public key certificate of the radio license application server 600 to the communication control device 400 (ST2403, ST2504).
[0145]
When receiving the public key certificate of the wireless license application server 600, the communication control device 400 uses the public key certificate of the certificate authority previously held by the control unit 403 in the same manner as the wireless license application server 600. The validity of the public key certificate of radio license application server 600 is confirmed (ST2505).
[0146]
After transmitting the public key certificate of the wireless license application server 600, the wireless license application server 600 generates a master secret that is a prime of the common key, and encrypts the master secret with the public key of the communication control device 400. Thereafter, the encrypted master secret is transmitted to communication control apparatus 400 (ST2404, ST2601).
[0147]
Here, the master secret is encrypted with the public key of the communication control apparatus 400 so that only the communication control apparatus 400 holding the public key certificate whose validity has been confirmed can receive the master secret. It is to do.
[0148]
When receiving the master secret, communication control apparatus 400 decrypts it with its own secret key, and acquires the master secret (ST2602).
[0149]
Radio license application server 600 generates a common key (session key) from the master secret (ST2603). On the other hand, communication control apparatus 400 generates a common key (session key) from the master secret acquired in ST2602 by control section 403 (ST2604).
[0150]
After generating the common key, the wireless license application server 600 generates a hash value from the data received so far from the communication control device 400 and encrypts it with the private key of the wireless license application server 600. Thereafter, the encrypted hash value is transmitted to communication control apparatus 400 (ST2405, ST2605).
[0151]
Upon receiving this encrypted hash value, the communication control device 400 decrypts it with the public key of the wireless license application server 600. On the other hand, a hash value is generated from the data transmitted to the wireless license application server 600 so far and compared with the decrypted hash value (ST2701).
[0152]
As a result, the validity of the key pair of the wireless license application server 600 is confirmed. By checking the validity of the key pair of the wireless license application server 600 here and the validity of the public key certificate of the wireless license application server 600 previously performed, the wireless license application server 600 selects an appropriate key pair. Proven to hold. That is, at this point, authentication of the wireless license application server 600 is established.
[0153]
Subsequently, communication radio license application server 600 generates a hash value from the data received from communication control apparatus 400 so far, and encrypts it with the common key generated in ST2603. Thereafter, the encrypted hash value is transmitted to communication control apparatus 400 (ST2406, ST2702).
[0154]
Upon receiving this encrypted hash value, communication control apparatus 400 decrypts it with the common key generated in ST2604. On the other hand, a hash value is generated from the data transmitted so far to the wireless license application server 600 and compared with the decrypted hash value (ST2703). As a result, the validity of the common key generated by the wireless license application server 600 is confirmed.
[0155]
This time, communication control apparatus 400 generates a hash value from the data received from wireless license application server 600 so far, and encrypts it with the common key generated in ST2604. Thereafter, the encrypted hash value is transmitted to the wireless license application server 600 (ST2407, ST2704).
[0156]
Upon receiving this encrypted hash value, wireless license application server 600 decrypts it with the common key generated in ST2603. On the other hand, a hash value is generated from the data transmitted to communication control apparatus 400 so far, and compared with the decrypted hash value (ST2705). As a result, the validity of the common key generated by the communication control device 400 is confirmed. At this time, it is confirmed that the correct common key is shared, and authentication of the communication control device 400 is established.
[0157]
After the authentication of the communication control device 400 is established, the wireless license application server 600 shifts to encrypted communication using the shared common key. All subsequent communications are encrypted and transmitted using the common key at the transmission source (wireless license application server 600), and decrypted using the common key at the transmission destination (communication control device 400).
[0158]
Wireless license application server 600 first logs in to FTP of communication control device 400 (ST2408, ST2801). At this time, wireless license application server 600 logs in using the FTP user / password (fax001 / none) in the applicant information file received in ST1417 (ST2004) of the process of receiving the wireless license application form from FAX 100. .
[0159]
Subsequently, the wireless license application server 600 FTP-transmits a wireless worker license file (hereinafter referred to as “wireless license file”) generated in advance according to the wireless license application to the communication control device 400 (ST2409, ST2802). ). The wireless license file is created by a word processor or the like. Communication control apparatus 400 receives this wireless license file by FTP at second communication section 402 (ST2803).
[0160]
Subsequently, the wireless license application server 600 transmits the electronic signature file by FTP to the communication control device 400 (ST2410, ST2804). Communication control apparatus 400 receives this electronic signature file by FTP using second communication section 402 (ST2805).
[0161]
Here, communication control apparatus 400 determines the presence or absence of an electronic signature file (ST2806). If there is an electronic signature file, the control unit 403 obtains a hash value by decrypting the data of the electronic signature file with the public key of the wireless license application server 600. On the other hand, a hash value is generated from the wireless license file received in ST2803 and compared with the decrypted hash value (ST2807).
[0162]
It is determined whether or not the data of the electronic signature file has been successfully decrypted by confirming whether or not the hash value comparison results match (ST2808). As a result, it can be confirmed that the digital signature is valid for the wireless license file. If the decryption has been successful, the process proceeds to ST2901. If there is no electronic signature file in ST2806, the process of ST2807 and ST2808 is skipped and the process proceeds directly to ST2901.
[0163]
In ST2901, the communication control apparatus 400 generates a hash value file by the control unit 403 encrypting the hash value of the wireless license file with the applicant's public key. Then, the hash value file, the wireless license file, and the IP address of the wireless license application server 600 are stored in the storage unit 405. At this time, the control unit 403 assigns a reception number, which will be described later, as a file name, and stores it in the directory of the FAX number of the destination applicant.
[0164]
When the wireless license application server 600 completes the FTP transmission of the electronic signature file, it logs out the FTP of the communication control device 400 (ST2411, ST2902).
[0165]
Furthermore, the wireless license application server 600 disconnects the connection with the SSL port (989, 990) of the communication control apparatus 400 connected in ST2401 (ST2412, ST2903).
[0166]
After disconnecting the connection with the wireless license application server 600, the communication control device 400 calls and connects to the FAX 100 using the first communication unit 401 (ST2413). Then, a reception notification indicating that there is reception data addressed to the applicant is faxed (ST2414, ST2904).
[0167]
FIG. 34 shows the structure of the reception notice. As shown in the figure, the notification with reception includes a reception number (6666) and a FAX number (11-222-7771) for taking out the received document, faxing the certification sheet, and taking out the received document. Is described.
[0168]
When transmission of the reception notification is completed, communication control apparatus 400 disconnects the line connection with FAX 100 (ST2415). In this way, the process of receiving from the communication control device 400 the reception notification form for notifying that the communication control device 400 has received the wireless license from the wireless license application server 600 ends.
[0169]
If it is determined in ST2808 that the digital signature file data cannot be decrypted normally, the communication control apparatus 400 notifies the FTP logout (ST2902) from the wireless license application server 600 of an error. (ST2905). The communication control apparatus 400 notifies the error to the wireless license application server 600 by returning, for example, “501 Syntax error in parameters or arguments”.
[0170]
As described above, according to the communication control apparatus 400 of the present embodiment, the encrypted information from the wireless license application server 600 that is the transmission source PC terminal is stored in the public key cryptosystem held by the communication control apparatus 400. Decrypt using the common key generated based on the pair key and public key certificate used for encrypted communication, and encrypt using the public key held by the destination (FAX 100) specified from the wireless license application server 600 The FAX 100 notifies the FAX 100 that there is a received document. As a result, information can be communicated with the wireless license application server 600 in an encrypted state, and a reception operation can be prompted by notifying the FAX 100 that there is a received document.
[0171]
In addition, since it is encrypted with the public key held by the designated transmission destination and stored in the storage unit 405, this information can be presented only to those who hold the secret key that is the decryption key. As a result, illegal acquisition by a third party who does not hold the secret key can be prevented, and the confidentiality of the information can be ensured.
[0172]
Next, processing for receiving a wireless license from the communication control apparatus 400 according to the reception notification will be described.
[0173]
When receiving a wireless license from the communication control device 400 according to the reception notification, the applicant first connects to the received document retrieval FAX number (11-222-7771) described in the reception notification ( ST2416, ST3001).
[0174]
After connecting to the received document retrieval FAX number, the applicant inputs the reception number (6666) described in the reception notification in accordance with the output voice guidance (ST2417) (ST2418, ST3002). Further, the applicant faxes the certification sheet to communication control device 400 according to the voice guidance (ST2419, ST3003).
[0175]
Communication control apparatus 400 receives the reception number and certificate paper document image (TIFF image) at first communication section 401 (ST3004). Of these, the control unit 403 saves the document image of the certification sheet in the certification sheet image file (ST3005).
[0176]
Next, the control unit 403 recognizes the timing mark from the certificate paper image file and identifies the private key, public key, and public key certificate image area on the certificate paper image (ST3006), and then the private key, public key. The bar code image of the key and public key certificate is cut out (ST3007). Further, these barcode images are decoded and the private key and public key are converted into numerical values, while the public key certificate is converted into text data (ST3101).
[0177]
On the other hand, control section 403 obtains the wireless license file and hash value file saved in ST2901 from the applicant's FAX number and the received reception number (ST3102).
[0178]
Next, the control unit 403 obtains a hash value by decrypting the hash value file with the applicant's private key. Then, the hash value generated from the wireless license file is compared with the decrypted hash value (ST3103).
[0179]
Control section 403 determines whether or not both hash values match (ST3104). If they match, the file format is discriminated from the extension of the wireless license file and converted into a FAX image (ST3105). As a result, a FAX image of the wireless license file as shown in FIG. 35 is obtained.
[0180]
After conversion to a FAX image, control unit 403 determines whether or not an electronic signature file is attached (ST3106). When an electronic signature file is provided, the hash value generated from the wireless license file, the electronic signature file, and the public key certificate of the wireless license application server 600 are converted into a barcode image with a specified size (ST3107).
[0181]
After conversion into barcode images, control unit 403 reduces the FAX image of the wireless license file by the size of these barcode images (ST3201). Then, the hash value, the electronic signature file, and the barcode image of the public key certificate of the wireless license application server 600 are overlaid on the FAX image (ST3202). As a result, a FAX image of the wireless license file with the electronic signature as shown in FIG. 36 is obtained.
[0182]
When the validity of the wireless license becomes a problem at a later date by overlaying the hash value, the electronic signature file, and the barcode image of the public key certificate of the wireless license application server 600 on the FAX image in this way. The validity can be confirmed by the Ministry of Internal Affairs and Communications. Specifically, after reading these barcode images with a barcode reader, the electronic signature is decrypted with the public key included in the public key certificate, and the validity can be confirmed by comparing with the hash value. .
[0183]
Then, the communication control apparatus 400 transmits the FAX image of the wireless license file generated in this way to the FAX 100 using the first communication unit 401 (ST2420, ST3203). If the electronic signature file is not assigned in ST3106, the process proceeds directly to ST3203, and the FAX image of the wireless license file not assigned with the electronic signature is transmitted to FAX100.
[0184]
After transmitting the FAX image of the wireless license file, in communication control device 400, control unit 403 discards the applicant's private key, public key, and public key certificate stored in storage unit 405 (ST3301).
[0185]
Finally, the communication control device 400 disconnects the applicant's FAX 100 from the first communication unit 401 (ST2421, ST3302). In this way, the process of receiving the wireless license from the communication control device 400 according to the reception notification is completed.
[0186]
As described above, according to the communication control apparatus 400 of the present embodiment, when the certificate sheet is received from the FAX 100 that has notified that there is a received document, the secret key obtained by analyzing the barcode information in the certificate sheet Is used to decrypt the encrypted information and transmit the decrypted information to the FAX 100. Thus, the encrypted information can be decrypted only when there is an access from a person who holds the official certificate sheet. For this reason, information can be prevented from being illegally obtained by a third party who does not hold the secret key, and the confidentiality of the information can be ensured.
[0187]
In addition, when a user who has received a notification that there is a received document requests a received document, the user uses a bar code for the pair key used for encryption communication using the public key cryptosystem and the public key certificate constituting the pair key. All you have to do is send a certificate with the information you placed. Therefore, in the FAX 100, it is not necessary to perform an operation of inputting a pair key or attaching a public key certificate, and it is possible to perform encrypted communication using a public key cryptosystem simply by transmitting a certificate sheet. Thereby, even a person who cannot operate the PC terminal can perform encrypted communication very easily using the FAX 100.
[0188]
If it is determined in ST3104 that both hash values do not match, in communication control apparatus 400, control unit 403 determines registration unit 404 in accordance with the IP address of wireless license application server 600 stored in ST2901. The e-mail address for error notification on the electronic application server management table 700 managed in (3) is acquired (ST3204).
[0189]
The second communication unit 404 sends an error notification to the error notification mail address of the wireless license application server 600 by e-mail (ST3205), while the first communication unit 401 sends a document indicating an error to the applicant's FAX 100. After the transmission (ST3206), the process proceeds to ST3301.
[0190]
If the encrypted information cannot be decrypted in this way, it is determined that the pair keys do not match and an error notification is made. As a result, since the information is not transmitted when the pair keys do not match, the confidentiality of the encrypted communication can be reliably maintained even when the FAX 100 is used.
[0191]
Further, by notifying the error when the pair keys do not match, the receiver can determine why the information cannot be obtained. As a result, it is possible to prevent a situation in which the certificate information has been transmitted but the corresponding information cannot be received indefinitely, and the following measures can be easily taken.
[0192]
【The invention's effect】
As described above, according to the present invention, there is provided a server apparatus and a communication control apparatus that can use an encryption communication system using a public key cryptosystem by a facsimile terminal even for a person who cannot operate a PC terminal. Can be provided.
[Brief description of the drawings]
FIG. 1 is a diagram showing a configuration example of a network to which a server device and a communication control device according to an embodiment of the present invention are connected.
FIG. 2 is a flowchart for issuing a certificate sheet in the server device according to the embodiment.
FIG. 3 is a flowchart for issuing a certificate sheet in the server device according to the embodiment.
FIG. 4 is a flowchart for taking out a certification sheet in the server device according to the embodiment.
FIG. 5 is a diagram showing a configuration of a certificate paper request sheet transmitted to the server device according to the embodiment.
FIG. 6 is a diagram showing a configuration of a certificate acceptance notice transmitted from the server device according to the embodiment.
FIG. 7 is a diagram showing a configuration of a driver's license as an identity confirmation document transmitted to the server device according to the embodiment.
FIG. 8 is a diagram showing an example of an applicant confirmation screen displayed on the PC of the person in charge of the certificate authority connected to the server device according to the embodiment.
FIG. 9 is a view showing an example of an applicant re-input screen displayed on the PC of the person in charge of the certificate authority connected to the server device according to the embodiment;
FIG. 10 is a diagram showing an example of a certificate paper image generated by a certificate paper issuing unit of the server device according to the embodiment.
FIG. 11 is a diagram showing a configuration of a certificate paper issuance notice transmitted from the server device according to the embodiment;
FIG. 12 is a diagram showing an example of information managed by an electronic application server management table registered in the registration unit of the server device according to the embodiment.
FIG. 13 is a diagram showing an example of information managed by a FAX management table registered in the registration unit of the server apparatus according to the embodiment.
FIG. 14 is a sequence diagram in the case of transmitting information from a FAX via the communication control apparatus according to the embodiment.
FIG. 15 is a flowchart when information is transmitted from a FAX via the communication control apparatus according to the embodiment.
FIG. 16 is a flowchart for transmitting information from a FAX via the communication control apparatus according to the embodiment.
FIG. 17 is a flowchart when information is transmitted from a FAX via the communication control apparatus according to the embodiment.
FIG. 18 is a flowchart for transmitting information from a FAX via the communication control apparatus according to the embodiment.
FIG. 19 is a flowchart for transmitting information from a FAX via the communication control apparatus according to the embodiment.
FIG. 20 is a flowchart for transmitting information from a FAX via the communication control apparatus according to the embodiment.
FIG. 21 is a flowchart in the case of transmitting information from a FAX via the communication control apparatus according to the embodiment.
FIG. 22 is a diagram showing a configuration of a wireless license application form transmitted to the communication control apparatus according to the embodiment.
FIG. 23 is a view showing the contents of a public key certificate of a wireless license application server connected to the communication control apparatus according to the embodiment.
FIG. 24 is a sequence diagram when information is received by FAX via the communication control apparatus according to the embodiment.
FIG. 25 is a flowchart when information is received by FAX via the communication control apparatus according to the embodiment.
FIG. 26 is a flowchart when information is received by FAX via the communication control apparatus according to the embodiment.
FIG. 27 is a flowchart when information is received by FAX via the communication control apparatus according to the embodiment.
FIG. 28 is a flowchart when information is received by FAX via the communication control apparatus according to the embodiment.
FIG. 29 is a flowchart when information is received by FAX via the communication control apparatus according to the embodiment.
FIG. 30 is a flowchart when information is received by FAX via the communication control apparatus according to the embodiment.
FIG. 31 is a flowchart when information is received by FAX via the communication control apparatus according to the embodiment.
FIG. 32 is a flowchart when information is received by FAX via the communication control apparatus according to the embodiment.
FIG. 33 is a flowchart when information is received by FAX via the communication control apparatus according to the embodiment.
FIG. 34 is a diagram showing a configuration of a reception notification sent to the FAX from the communication control apparatus according to the above embodiment.
FIG. 35 is a diagram showing a configuration of a FAX image of a wireless license file transmitted from the communication control apparatus according to the embodiment to the FAX;
FIG. 36 is a diagram showing a configuration of a FAX image of a wireless license file transmitted from the communication control apparatus according to the embodiment to the FAX;
[Explanation of symbols]
100 FAX
200 Public network (PSTN)
300 Server device
301 Communication unit
302 generator
303 Certificate paper issuing department
400 Communication control device
401 1st communication part
402 Second communication unit
403 control unit
404 Registration Department
405 storage unit
500 Internet
600 Wireless worker license electronic application server (wireless license application server)

Claims (1)

From a facsimile machine on the applicant side, a server apparatus of a certificate authority that issues a certificate upon receipt of an application from the facsimile apparatus, an electronic application server that issues predetermined documents via the Internet by electronic application, and the facsimile apparatus An electronic application system comprising a communication control device that receives an application of the above and obtains a predetermined document from the electronic application server via the Internet and transmits it to the facsimile device,
The server device receives from the facsimile device the contents of the request for issuing the certificate of the applicant and the identity confirmation document from the facsimile device, and from the secret key and the public key used for encryption communication by the public key cryptosystem based on the request content Generating means for generating a public key certificate that is a pair key and a public key certificate, and converting the pair key and the public key certificate into a barcode and issuing a certificate paper in which the barcode is arranged Certificate paper issuing means, and transmission means for transmitting the certificate paper to the facsimile machine,
The communication control device receives a predetermined application form and the certification sheet from the facsimile machine, and decodes a barcode from the certification sheet to obtain the secret key, the public key, and the public key certificate. The public key, the public key certificate and the application form are taken out and transmitted to the electronic application server via the Internet, and the hash value generated from the data received from the electronic application server is encrypted with the private key. And transmitting means for transmitting to the electronic application server, and transmitting means for transmitting the predetermined document to the facsimile apparatus upon acquisition of the predetermined document applied from the facsimile apparatus from the electronic application server,
The electronic application server decrypts the encrypted hash value received from the communication control device with the public key, and the hash value generated from the data transmitted to the communication control device so far and the decrypted hash value An electronic application system, comprising: a comparison unit that compares the pair key with each other; and a transmission unit that recognizes the validity of the pair key and transmits a predetermined document to the communication control device when the comparison results in a match.

Images