JP4945265B2 - Service use identification information generation apparatus, service use identification information generation system, service use identification information generation method, and program - Google Patents

Description

  The present invention provides a service use identification information generating apparatus, a service use identification information generating system, and a service use that gives additional information to a user ID and conceals this information from a service provider using the ID. The present invention relates to an identification information generation method and program.

  Conventionally, as shown in FIG. 5, as a technique for improving the convenience of service use on the Internet, a user terminal 100, a trusted third party (TTP) 200, a service providing server 300, There is a technology called Single Sign On (SSO) using the TTP 200.

  In the SSO technology using the TTP 200, in order to protect the user's privacy, it is necessary to change the ID (Identifier) for each service with respect to the service (service provider) used by the user. Is done. This is because if the same ID is used for different services, the user's actions in each service can be associated with each other when the service provider collaborates.

  In addition to changing the ID for each service, it is also necessary to change the ID for each connection. That is, even if the service is the same, if the user always uses the same ID, the user's action can be traced. In this case, it is possible to provide an introduction of recommended products (referred to as a recommendation service or personalization service) like a shopping site by using the ability to trace the behavior of a specific user. On the other hand, depending on the user, there is a possibility that the user's own behavior may be disliked.

  Further, when using the SSO technology using the TTP 200, the TTP 200 grasps the correspondence between the ID user and the principal (in this case, the login ID to the TTP 200) so that the TTP 200 can identify the principal. What can be done is also needed. For this reason, a method using an encryption technique has been proposed for the purpose of reducing the management cost in the TTP 200 when managing the ID when using the service in the TTP 200 (see, for example, Patent Document 1). .

  In this conventional ID management method, a dynamic ID such as a generation date and a static information such as a fixed bit string are added to the login ID to the TTP 200, and then encryption is performed as an ID for using the service. Is generated. Therefore, in order to grasp the relationship between the user and the ID, it is only necessary to decrypt the newly generated ID for using the service by using the encryption key used at the time of generation. It is not necessary to maintain the correspondence between the user's login ID to the TTP 200) and the newly generated ID for using the service, and the information to be managed by the TTP 200 is only the key used for generating the ID. For this reason, the management cost in TTP200 can be reduced.

In the conventional ID management method, a method of changing the encryption key used for each service has been proposed in order to reduce the risk when the key used for ID generation leaks. Therefore, even if the key is leaked, the damage can be limited to the service, and the damage can be prevented from spreading to other services.
JP 2006-244420 A

  However, in the case of the above-described conventional ID management method, since a different key is used for each service, in understanding the correspondence between the service use ID and the user, the service use ID and the encryption It is necessary to present the information for identifying the key for the TTP 200. Therefore, the service providing server 300 side that identifies a user using such an ID needs to hold information for specifying a key separately from the service use ID.

  Further, when a different key is used for each service, the encryption key can be managed in association with the ID of the service itself. Therefore, although it does not become a management burden on the TTP 200 and the service providing server 300 side, If the ID is managed independently and the association between the ID and the information for identifying the key is disconnected, there is a problem that the user of the ID cannot be specified.

  Therefore, the present invention has been made in view of the above-described problems, and is associated with information for identifying a user ID and a key while suppressing an increase in the management burden of the TTP and the service providing server. It is an object of the present invention to provide a service use identification information generation device, a service use identification information generation system, a service use identification information generation method, and a program that can reliably identify a user of the ID even when the user is disconnected.

The present invention proposes the following items in order to solve the above-described problems.
(1) The present invention is connected to a user terminal and a service providing server managed by a service provider via a network, and the service providing server identifies the user when the service is used by the user. A service use identification information generation device for generating identification information, which includes receiving means for receiving user login information (e.g., equivalent to the receiving unit 21 in FIG. 2), and adding additional information to the received user login information Then, an encryption processing means (for example, equivalent to the encryption unit 22 in FIG. 2) for encrypting with a different encryption key for each service provided by the user, and information encrypted in the encryption processing unit Service usage identification information for generating service usage identification information by assigning different encryption key information to each service and encrypting with a device-specific encryption key Generating means (for example, equivalent to the service use identification information generating unit 24 in FIG. 2) and transmission means for transmitting the generated service use identification information to the user terminal and the service providing server (for example, to the sending unit 25 in FIG. 2). A service use identification information generating device characterized by comprising:

  According to this invention, the receiving means receives the user's login information, and the encryption processing means adds additional information to the received user's login information, and uses an encryption key that differs for each service that the user receives. Encrypt. Then, the service usage identification information generating unit adds the encryption key information different for each service to the information encrypted in the encryption processing unit, and encrypts it with the device-specific encryption key to generate the service usage identification information. Then, the service use identification information generated by the transmission unit is transmitted to the user terminal and the service providing server. Therefore, when the service use identification information generation device generates an ID using an encryption key that is different for each service, the service use identification information generation device assigns information indicating the key to the generated ID itself, and further, the whole uses another encryption key. Encrypt with Therefore, the information indicating the key can be concealed from anyone other than the TTP that has generated the ID, and the whole can be made into one ID. In addition, the TTP that has generated the ID can be decrypted with a unique encryption key held by the TTP. For this reason, the identification information of the encryption key used for the initial encryption can be acquired, and by performing decryption using the key, the user ID concealed in the ID can be grasped.

  (2) The present invention is reliable with a user terminal (for example, equivalent to the user terminal 100 in FIG. 1), a service providing server managed by the service provider (for example, equivalent to the service providing server 300 in FIG. 1), A service usage identification information generation system comprising a management server (for example, equivalent to the TTP 200 in FIG. 1) that manages user authentication and generates service usage identification information for a user to use a service. The management server provides the receiving means (for example, corresponding to the receiving unit 21 in FIG. 2) for receiving the login information of the user, and adds the additional information to the received login information of the user, and the user is provided. Encryption processing means for encrypting with a different encryption key for each service (for example, equivalent to the encryption unit 22 in FIG. 2), and encryption in the encryption processing unit Service usage identification information generating means (for example, the service usage identification in FIG. 2) that adds information on the encryption key that is different for each service to the generated information and generates service usage identification information by encrypting with the device-specific encryption key. And a transmission means (for example, corresponding to the transmission unit 25 in FIG. 2) for transmitting the generated service use identification information to the user terminal and the service providing server. A service usage identification information generation system is proposed.

  According to this invention, the receiving means in the management server receives the user's login information, and the encryption processing means gives additional information to the received user's login information, and varies depending on the service the user receives. Encrypt with encryption key. Then, the service usage identification information generating unit adds the encryption key information different for each service to the information encrypted in the encryption processing unit, and encrypts it with the device-specific encryption key to generate the service usage identification information. Then, the service use identification information generated by the transmission unit is transmitted to the user terminal and the service providing server. Therefore, when the management server generates an ID using a different encryption key for each service, the management server assigns information indicating the key to the generated ID itself, and further encrypts the whole with another encryption key. . Therefore, the information indicating the key can be concealed from anyone other than the TTP that has generated the ID, and the whole can be made into one ID. In addition, the TTP that has generated the ID can be decrypted with a unique encryption key held by the TTP. For this reason, the identification information of the encryption key used for the initial encryption can be acquired, and by performing decryption using the key, the user ID concealed in the ID can be grasped.

  (3) The present invention is connected to a user terminal and a service providing server managed by a service provider via a network, and the service providing server identifies the user when the service is used by the user. A service usage identification information generation method in a service usage identification information generation apparatus for generating identification information, the first step of adding additional information to received user login information (for example, corresponding to step S102 in FIG. 3); A second step (for example, corresponding to step S103 in FIG. 3) of encrypting information in which additional information is added to the login information of the user with a different encryption key for each service provided by the user; A third step (for example, the step in FIG. 3) of adding different encryption key information for each service to the converted information. And a fourth step (for example, encrypting information obtained by adding different encryption key information for each service to the encrypted information with an encryption key unique to the service use identification information generating device) , Which corresponds to step S105 in FIG. 3).

  According to the present invention, additional information is added to the received login information of the user, and this information is encrypted with a different encryption key for each service provided by the user. Next, encryption key information different for each service is assigned to the encrypted information, and this information is encrypted with an encryption key unique to the service use identification information generating apparatus. Therefore, when the service use identification information generation device generates an ID using an encryption key that is different for each service, the service use identification information generation device assigns information indicating the key to the generated ID itself, and further, the whole uses another encryption key. Encrypt with Therefore, the information indicating the key can be concealed from anyone other than the TTP that has generated the ID, and the whole can be made into one ID. In addition, the TTP that has generated the ID can be decrypted with a unique encryption key held by the TTP. For this reason, the identification information of the encryption key used for the initial encryption can be acquired, and by performing decryption using the key, the user ID concealed in the ID can be grasped.

  (4) The present invention is connected to a user terminal and a service providing server managed by the service provider via a network, and the service providing server identifies the user when the service is used by the user. A program for causing a computer to execute a service usage identification information generation method in a service usage identification information generation apparatus for generating identification information, and a first step of adding additional information to received user login information (for example, FIG. And a second step (for example, the step in FIG. 3) of encrypting information obtained by adding additional information to the login information of the user with a different encryption key for each service provided by the user. Equivalent to S103), and encryption information that differs for each service is added to the encrypted information. A third step (for example, corresponding to step S104 in FIG. 3), and information obtained by adding the encryption key information different for each service to the encrypted information. A program for causing a computer to execute a fourth step (for example, corresponding to step S105 in FIG. 3) of encrypting with an encryption key is proposed.

  According to the present invention, additional information is added to the received login information of the user, and this information is encrypted with a different encryption key for each service provided by the user. Next, encryption key information different for each service is assigned to the encrypted information, and this information is encrypted with an encryption key unique to the service use identification information generating apparatus. Therefore, when the service use identification information generation device generates an ID using an encryption key that is different for each service, the service use identification information generation device assigns information indicating the key to the generated ID itself, and further, the whole uses another encryption key. Encrypt with Therefore, the information indicating the key can be concealed from anyone other than the TTP that has generated the ID, and the whole can be made into one ID. In addition, the TTP that has generated the ID can be decrypted with a unique encryption key held by the TTP. For this reason, the identification information of the encryption key used for the initial encryption can be acquired, and by performing decryption using the key, the user ID concealed in the ID can be grasped.

  According to the present invention, the service use identification information generation device (or management server) uses a different key for each service when generating an ID for using the service in the SSO service by using the encryption technique. Even when a plurality of encryption keys are used, the information for specifying the key can be concealed in the ID itself. Therefore, when specifying the user in the service use ID, the combination of the ID and the information indicating the encryption key is used. There is an effect that it is not necessary to present.

  Further, according to the present invention, since the information itself of the ID indicating the key is also concealed in the ID itself using an encryption technique, the encryption key is a single service use identification information generating device (or management server). Since a unique key can be used, the management cost in the service use identification information generation device (or management server) cannot be increased significantly.

Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.
Note that the constituent elements in the present embodiment can be appropriately replaced with existing constituent elements and the like, and various variations including combinations with other existing constituent elements are possible. Therefore, the description of the present embodiment does not limit the contents of the invention described in the claims.

<Configuration of service usage identification information generation system>
As shown in FIG. 1, the service usage identification information generation system according to the present embodiment includes a user terminal 100, a TTP 200 as a service usage identification information generation device or a management server, and a service providing server 300. The terminal 100, the TTP 200 as a management server, and the service providing server 300 are connected via a network.

  The user terminal transmits a connection request to the service providing server 300 to the TTP 200 serving as a service use identification information generating device or a management server. In addition, when receiving a service for the first time, an ID generation request is issued to the service use identification information generating device or the TTP 200 as the management server, and based on the service use ID acquired from the TTP 200 as the management server, The service is provided by the service providing server 300.

  The TTP 200 as a service use identification information generating device or a management server is a server managed by a reliable third party organization, and the detailed configuration thereof will be described later. In the present embodiment, the receiving unit 21 in FIG. 2 receives login information from the user terminal 100, and the encryption unit 22 provides additional information to the received login information of the user so that the user can receive the service. Encryption is performed with a different encryption key for each. Then, the service use identification information generating unit 24 gives the information encrypted by the encryption unit 22 with different encryption key information for each service, and encrypts the service use identification information with the device-specific encryption key. The service use identification information generated by the transmission unit 25 is transmitted to the user terminal 100 and the service providing server 300.

  The service providing server 300 identifies the user based on the ID notified from the service use identification information generating device or the TTP 200 as the management server, and executes user management.

<Configuration of generated ID>
Next, the configuration of the ID generated in the present embodiment will be described with reference to FIG.
First, as shown in FIG. 4, predetermined additional information (Sinfo) is combined with a login ID (IDu) to the TTP 200 as a service use identification information generating device or a management server that each user terminal 100 has. The combined information is encrypted with a different encryption key (Kn) for each service. Further, the ID of the key is combined with this information, and the combined information is encrypted with the encryption key (Ko) unique to the TTP 200 as the service use identification information generating device or the management server, and this is used for the service use. ID (IDus).

  Accordingly, when the TTP 200 serving as the service use identification information generation device or the management server generates an ID using an encryption key (Kn) that is different for each service, the information indicating the key is given to the generated ID itself, Since the whole is encrypted with the encryption key (Ko) unique to the TTP 200 as the service use identification information generation device or the management server, the information indicating the key can be concealed, and the whole can be identified with one ID ( IDus).

<Configuration of Service Usage Identification Information Generation Device>
As shown in FIG. 2, the service usage identification information generation apparatus according to the present embodiment includes a reception unit 21, an encryption unit 22, a key database 23, a service usage identification information generation unit 24, and a transmission unit 25. It is configured.

  The receiving unit 21 receives a connection request for the service providing server 300 from the user terminal 100. At this time, a login ID for the TTP 200 as the service use identification information generation device or the management server is also received.

  The encryption unit 22 combines predetermined additional information (Sinfo) with the user's login ID (IDu) received by the reception unit 21, and different encryption keys (Kn) for each service stored in the key database 23. Is used to encrypt the combined information. Note that the additional information (Info) may be information that dynamically varies, such as the ID generation time, or may be a fixed bit string.

  The key database 30 stores an encryption key (Kn) that is different for each service and an encryption key (Ko) unique to the TTP 200 as a service use identification information generation device or a management server. The database may be a hard disk or a RAM (Random Access Memory), and may not be configured by a single piece of hardware, but may be an individual recording unit or a dedicated device.

  The service usage identification information generation unit 24 combines the key ID, which is information indicating the key, with the information encrypted by the encryption unit 22, and uses the combined information to store the service usage identification stored in the key database 23. Further encryption is performed with an encryption key (Ko) unique to the TTP 200 as the information generation apparatus or management server, and an ID (IDus) for using the service is generated. Since the TTP 200 serving as the service use identification information generating device or the management server manages different encryption keys for each service with a service ID for identifying the service, the key ID is substituted with the service ID. May be.

  The transmission unit 25 transmits the service usage identification information generated by the service usage identification information generation unit 24 to the user terminal 100 and the service providing server 300.

<Processing of service use identification information generation system>
Next, processing of the service use identification information generation system according to the present embodiment will be described with reference to FIG.

  First, the receiving unit 21 of the service use identification information generating apparatus receives a connection mediation request from the user terminal 100 to the service providing server 300 (step S101). At this time, a login ID for the TTP 200 as the service use identification information generation device or the management server is also received.

  When the user's login ID (IDu) is input from the receiving unit 21, the encryption unit 22 combines predetermined additional information (Sinfo) with this (step S 102), and for each service stored in the key database 23. The combined information is encrypted using a different encryption key (Kn) (step S103).

  When the service use identification information generation unit 24 receives the encrypted information from the encryption unit 22, the service use identification information generation unit 24 combines the key ID, which is information indicating the key, with this information (step S 104). The ID (IDus) for service use is generated by further encrypting with the encryption key (Ko) unique to the TTP 200 as the service use identification information generating device or management server stored in the server 23 (step S105).

  Therefore, according to the present embodiment, when the TTP 200 serving as the service use identification information generating device or the management server generates an ID using an encryption key that differs for each service, the ID itself that generates the information indicating the key is used. And the whole is encrypted with another encryption key. Therefore, the information indicating the key can be concealed, and the whole can be made into one ID.

  Each process of the service use identification information generation apparatus and the service use identification information generation system is recorded on a computer-readable recording medium, and the program recorded on the recording medium is read into the update information generation apparatus and the identification information update system. The update information generation device and the identification information update system of the present invention can be realized by executing. The computer system here includes an OS and hardware such as peripheral devices.

  Further, the “computer system” includes a homepage providing environment (or display environment) if a WWW (World Wide Web) system is used. The program may be transmitted from a computer system storing the program in a storage device or the like to another computer system via a transmission medium or by a transmission wave in the transmission medium. Here, the “transmission medium” for transmitting the program refers to a medium having a function of transmitting information, such as a network (communication network) such as the Internet or a communication line (communication line) such as a telephone line.

  The program may be for realizing a part of the functions described above. Furthermore, what can implement | achieve the function mentioned above in combination with the program already recorded on the computer system, and what is called a difference file (difference program) may be sufficient.

  The embodiments of the present invention have been described in detail with reference to the drawings. However, the specific configuration is not limited to the embodiments, and includes designs and the like that do not depart from the gist of the present invention.

It is a block diagram of the service use identification information generation system which concerns on this embodiment. It is a block diagram of the service use identification information generation apparatus which concerns on this embodiment. It is a processing flow of the service use identification information generation system which concerns on this embodiment. It is a figure which shows the structure of the service use identification information which concerns on this embodiment. It is a figure which shows the conventional system configuration.

Explanation of symbols

DESCRIPTION OF SYMBOLS 21 ... Reception part 22 ... Encryption part 23 ... Key database 24 ... Service use identification information generation part 25 ... Transmission part 100 ... User terminal 200 ... TTP
300 ... Service providing server

Claims (4)

Service use connected to a user terminal and a service providing server managed by the service provider via a network, and when the user uses the service, the service providing server generates service use identification information for identifying the user. An identification information generating device,
Receiving means for receiving user login information;
An encryption processing means for adding additional information to the received login information of the user and encrypting with a different encryption key for each service provided by the user;
Service usage identification information generating means for adding information of an encryption key different for each service to the information encrypted in the encryption processing unit, and generating service usage identification information by encrypting with the encryption key unique to the device; ,
Transmitting means for transmitting the generated service use identification information to the user terminal and the service providing server;
A service use identification information generating device comprising: A service comprising a user terminal, a service providing server managed by a service provider, and a management server that is managed by a trusted third party to perform user authentication and generate service use identification information for the user to use the service A usage identification information generation system,
The management server receives a user login information; and
An encryption processing means for adding additional information to the received login information of the user and encrypting with a different encryption key for each service provided by the user;
Service use in which information of an encryption key different for each service is added to the information encrypted in the encryption processing unit, and encrypted with an encryption key unique to a reliable third-party organization to generate service use identification information Identification information generating means;
Transmitting means for transmitting the generated service use identification information to the user terminal and the service providing server;
A service use identification information generation system comprising: Service use connected to a user terminal and a service providing server managed by the service provider via a network, and when the user uses the service, the service providing server generates service use identification information for identifying the user. A service use identification information generation method in an identification information generation apparatus,
A first step of adding additional information to the received login information of the user;
A second step of encrypting information obtained by adding additional information to the login information of the user with an encryption key that is different for each service that the user receives;
A third step of assigning different encryption key information for each service to the encrypted information;
A fourth step of encrypting information obtained by adding different encryption key information for each service to the encrypted information with an encryption key unique to the service use identification information generating device;
A service use identification information generation method characterized by comprising: Service use connected to a user terminal and a service providing server managed by the service provider via a network, and when the user uses the service, the service providing server generates service use identification information for identifying the user. A program for causing a computer to execute a service use identification information generation method in an identification information generation apparatus,
A first step of adding additional information to the received login information of the user;
A second step of encrypting information obtained by adding additional information to the login information of the user with an encryption key that is different for each service that the user receives;
A third step of assigning different encryption key information for each service to the encrypted information;
A fourth step of encrypting information obtained by adding different encryption key information for each service to the encrypted information with an encryption key unique to the service use identification information generating device;
A program that causes a computer to execute.

Images