JP5376493B2 - Electronic signature system, electronic signature method, authentication apparatus, and program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an electronic signature system in which the need of installation into a terminal device is eliminated, security is improved and a user is caused to have consciousness that the user has signed. <P>SOLUTION: An authentication device 400 for performing personal authentication on the basis of identification information and authentication information is provided separately from a terminal device 200 and a server device 100. The server device 100 generates an electronic document with a signature when the personal authentication by the authentication device 400 is made successful. <P>COPYRIGHT: (C)2010,JPO&amp;INPIT

Description

  The present invention relates to an electronic signature system, an electronic signature method, an authentication apparatus, and a program for generating a signed electronic document, and more particularly to an electronic signature system, an electronic signature method, an authentication apparatus, and a program in a client server system and a thin client system.

  Conventionally, processing for adding a user's electronic signature to an electronic document by a public key cryptosystem has been performed by a terminal device possessed by the user. The process of adding an electronic signature is performed according to the following procedure. First, the hash value of the electronic document is acquired from the electronic document to which the electronic signature is added using a one-way function. Next, a signature value is generated based on the acquired hash value and a secret key unique to the terminal device. Next, a signed electronic document including the electronic document and the generated signature value is generated. Through the above processing, a signed electronic document in which the electronic signature of the user is added to the electronic document can be generated.

In recent years, as a security measure against information leakage, terminal devices (clients) handled by users are equipped with only necessary minimum functions such as information input and display, and the main processing is performed by server devices (servers). A client server system and a thin client system to perform are attracting attention. However, when an electronic signature is added by a client server system or a thin client system, the terminal device does not have an information processing function, so that the above-described processing by the terminal device cannot be performed. In order to solve this problem, Patent Document 1 discloses a technique in which processing for adding an electronic signature is shared between a terminal device and a server device.
JP 2005-142661 A

  However, even if the processing is shared between the terminal device and the server device as in Patent Document 1, it is necessary to install a program or the like for performing processing on the terminal device. Therefore, problems such as installation mistakes may occur. In the case of a thin client system, it is important that the terminal device is equipped with only necessary minimum functions such as information input and display. However, the technique of Patent Document 1 cannot be applied to the thin client system because it is necessary to store the secret key information in the terminal device.

  In addition, in the case of a system using a personal computer, for example, when an electronic signature is added to an electronic document, a user performs personal authentication by inputting an ID and a password on the personal computer, and adds the electronic signature. It is often a system that executes. However, personal authentication using a password may cause a third party to analyze and illegally use the password, and security is low compared to personal authentication using possession or personal authentication using biometrics. Furthermore, since personal authentication using a password is a simple operation of inputting an ID and a password, it is difficult to give the user a consciousness of signing.

  The present invention has been made in view of the above points, and an object of the present invention is to provide an electronic signature system and an electronic signature system that do not require installation work on a terminal device, have high security, and give the user a consciousness of signing. To provide a signature method, an authentication device, and a program.

The present invention has been made to solve the above problems, and is an electronic signature system that instructs a terminal device to execute a process of adding a signature value representing a user's electronic signature to an electronic document from a terminal device. Authentication input means for allowing the user to input identification information for identifying the user and authentication information which is information relating to the user's property or biometric information of the user and accepting the input, and the identification information in advance Authentication information storage means for storing the authentication information in association with the authentication information, authentication information corresponding to the input identification information is acquired from the authentication information storage means, and the authentication information and the input authentication information match. An authentication device comprising: an authentication unit that performs personal authentication by determining whether or not to perform; and a communication unit that transmits the identification information to the server device when the personal authentication is successful. Provided separately from the terminal device and the server device, the server device stores secret key storage means for storing a secret key unique to the user in association with the identification information in advance, and communication for receiving the identification information from the authentication device Means for obtaining an electronic document from the document storage means and generating a hash value from the electronic document by a one-way function; and the secret associated with the identification information received from the secret key storage means A signature execution means for acquiring a key and generating the signature value based on the secret key and the hash value; and generating a signed electronic document using the acquired electronic document and the generated signature value; And a signed document generation unit registered in the document storage unit.

  The authentication device generates a signature value using a secret key storage unit that stores a secret key unique to the own device and a secret key unique to the own device, and transmits the signature value to the server device via the communication unit Execution means, and the server device stores public key storage means for storing the public key of the authentication device, and the signature value obtained by the authentication device based on the signature value acquired from the authentication device and the public key. And signature determination means for determining whether or not has been generated.

The present invention also provides an electronic signature method using an electronic signature system that instructs execution of processing for adding a signature value representing a digital signature of a user to an electronic document from a terminal device to a server device, the terminal device And an authentication input means of an authentication device provided separately from the server device inputs identification information for identifying the user and authentication information that is information related to the user's property or user's biometric information to the user. The authentication unit of the authentication device acquires authentication information corresponding to the input identification information from an authentication information storage unit that stores the authentication information in association with the identification information in advance. Personal authentication is performed by determining whether or not the authentication information matches the input authentication information, and the communication unit of the authentication device sends the authentication information to the server device when the personal authentication is successful. And the secret key storage unit of the server device stores a secret key unique to the user in association with the identification information in advance, and the communication unit of the server device receives the authentication device from the authentication device. The identification information is received, the hash value generation unit of the server device acquires the electronic document from the document storage unit, generates a hash value from the electronic document by a one-way function, and the signature execution unit of the server device The secret key associated with the received identification information is acquired from the secret key storage means, the signature value is generated based on the secret key and the hash value, and the signed document generation means of the server device is A signed electronic document is generated using the acquired electronic document and the generated signature value, and is registered in the document storage means.

In addition, the present invention provides the terminal device and the server device that perform personal authentication in an electronic signature system that instructs execution of processing for adding a signature value representing a digital signature of a user to an electronic document from the terminal device to the server device The authentication apparatus is provided separately from the user and allows the user to input identification information for identifying the user and authentication information that is information related to the user's property or biometric information of the user and accepts the input. Authentication information corresponding to the input identification information is acquired from authentication input means and authentication information storage means for storing the authentication information in advance in association with the identification information, and the authentication information and the input authentication information Authentication means for performing personal authentication by determining whether or not the information matches, and communication means for transmitting the identification information to the server device when the personal authentication is successful. It is characterized in.

In addition, the present invention provides the terminal device and the server device that perform personal authentication in an electronic signature system that instructs execution of processing for adding a signature value representing a digital signature of a user to an electronic document from the terminal device to the server device An authentication input that accepts the input by allowing the user to input identification information for identifying the user and information related to the user's property or authentication information that is biometric information of the user. Means for acquiring authentication information corresponding to the inputted identification information from an authentication information storage means for storing the authentication information in advance in association with the identification information, and the authentication information and the inputted authentication information match. Authentication means for performing personal authentication by determining whether or not, and when the personal authentication is successful, the server device functions as communication means for transmitting the identification information. Which is the program.

According to the present invention, the server device holds the secret key and adds the electronic signature is executed by the server device. As a result, the terminal device does not need to store the secret key and does not need to perform the process of adding the electronic signature, so that the installation work on the terminal device can be made unnecessary.
According to the present invention, the electronic signature system includes an authentication device that performs personal authentication separately from the terminal device and the server device. As a result, the personal authentication function having higher security than personal authentication using a password is provided in the authentication device, so that the security can be increased as compared with the conventional case. Further, it is not necessary to perform an installation operation for providing the terminal device with a personal authentication function with high security. Furthermore, by providing the authentication apparatus with a personal authentication function based on property, biometrics, etc., the user can be made aware that the signature has been made.

(First embodiment)
Hereinafter, a first embodiment of the present invention will be described in detail with reference to the drawings.
FIG. 1 is a schematic block diagram of an electronic signature system according to a first embodiment of the present invention.
The electronic signature system according to the present embodiment includes a server device 100, a terminal device 200, a document server device 300, and an authentication device 400.
The server apparatus 100 executes processing for adding an electronic signature.
The terminal device 200 inputs commands to the server device 100 and displays information from the server device 100.
The document server apparatus 300 (document storage unit) holds an electronic document to which an electronic signature is added in advance.
The authentication device 400 performs personal authentication of a user who adds an electronic signature.

The server apparatus 100 includes a communication unit 101 (communication unit), a hash generation unit 102 (hash value generation unit), an address storage unit 103, a key storage unit 104 (secret key storage unit), and a signature execution unit 105 (signature). Execution means).
The communication unit 101 communicates information with the terminal device 200, the document server device 300, and the authentication device 400.
The hash generation unit 102 generates a hash value of the electronic document acquired from the document server device 300.
The address storage unit 103 stores the MAC address of the authentication device 400 in advance in association with the MAC (Media Access Control) address of the terminal device 200.
The key storage unit 104 stores a secret key unique to a user used for an electronic signature in association with an ID (Identification: individual identification, identification information) for identifying the user in advance.
The signature execution unit 105 generates a signature value representing an electronic signature based on the hash value generated by the hash generation unit 102 and the private key stored in the key storage unit 104.

The terminal device 200 includes a communication unit 201, an input unit 202, and a display unit 203.
The communication unit 201 communicates information with the server device 100.
The input unit 202 receives an instruction input to the server device 100.
The display unit 203 displays information from the server device 100.

The authentication device 400 includes a communication unit 401 (communication unit), a display unit 402, an authentication input unit 403 (authentication input unit), an authentication information storage unit 404 (authentication information storage unit), and an authentication unit 405 (authentication unit). And have.
The communication unit 401 communicates information with the server device 100.
The display unit 402 displays information received from the server device 100.
The authentication input unit 403 receives an input of a user ID and authentication information that only the user has. Here, the authentication information includes, for example, information on possession such as a card number registered in an IC (Integrated Circuit) card individually owned by the user, a user's fingerprint, iris, voice, handwriting, etc. Biometric information.
The authentication information storage unit 404 stores user authentication information in advance in association with the user ID.
The authentication unit 405 performs personal authentication based on information input to the authentication input unit 403 and information stored in the authentication information storage unit 404.

  In FIG. 1, one terminal device 200 and one authentication device 400 are shown, but there are actually a plurality of them. In addition to this, a configuration in which a plurality of server devices 100 and document server devices 300 are provided may be employed.

In the electronic signature system having the above-described configuration, the authentication input unit 403 receives an input of a user ID and authentication information by property authentication, biometrics authentication, or the like, and the authentication unit 405 receives the input ID and authentication information. Personal authentication is performed based on the combination and the combination of the ID and authentication information stored in the authentication information storage unit 404. If the personal authentication is successful, the authentication device 400 transmits the user ID to the server device 100 via the communication unit 401.
The server device 100 receives the user ID from the authentication device 400 via the communication unit 101, and acquires the secret key associated with the received user ID from the key storage unit 104. The signature execution unit 105 generates a signature value based on the hash value obtained by the hash generation unit 102 from the electronic document acquired in advance from the document server device 300 and the secret key.
Accordingly, the electronic signature system eliminates the installation work on the terminal device in the process of adding the electronic signature to the electronic document, improves the security in personal authentication, and makes the user aware that the signature has been made.

Next, the operation of the electronic signature system will be described.
FIG. 2 is a sequence diagram for explaining the operation of adding an electronic signature to an electronic document by the electronic signature system.
First, when processing for adding an electronic signature starts, for example, when the server device 100 receives an instruction to perform an electronic signature from the terminal device 200, the server device 100 sends an electronic document to the document server device 300 via the communication unit 101. A list transmission request is transmitted (step S1). Upon receiving the electronic document list transmission request, the document server apparatus 300 transmits the electronic document list stored in the document server apparatus 300 to the server apparatus 100 (step S2). When the server apparatus 100 receives the list of electronic documents from the document server apparatus 300 via the communication unit 101, the server apparatus 100 transmits the list of electronic documents received via the communication unit 101 to the terminal apparatus 200 (step S3). When the communication unit 201 of the terminal device 200 receives the list of electronic documents, the display unit 203 displays the received list of electronic documents, and displays a screen that prompts the user to select an electronic document to be digitally signed from the list. Display (step S4). When the user selects an electronic document to be digitally signed, the input unit 202 receives an input for selecting an electronic document (step S5). When the input unit 202 receives an input for selecting an electronic document, the information indicating the selected electronic document is transmitted to the server apparatus 100 via the communication unit 201. Here, the information indicating the electronic document is information such as a document ID unique to the electronic document.

  When the server apparatus 100 receives information indicating the selected electronic document via the communication unit 101, the server apparatus 100 transmits a transmission request for the selected electronic document to the document server apparatus via the communication unit 101 (step S6). Upon receiving the electronic document transmission request, the document server apparatus 300 transmits the electronic document to the server apparatus 100. When the server apparatus 100 receives an electronic document via the communication unit 101, the hash generation unit 102 generates a hash value of the received electronic document using a hash function (one-way function) registered in the internal memory ( Step S8). A hash function is a function that summarizes an electronic document into numerical values of a certain length. As hash functions, MD2 (Message Digest Algorithm 2), SHA (Secure Hash Algorithm), and the like are known.

  Next, the server apparatus 100 acquires from the address storage unit 103 the MAC address of the authentication apparatus 400 associated with the MAC address of the terminal apparatus 200 that is the transmission source of the information indicating the selected electronic document (step S9). . When the MAC address of the authentication device 400 is acquired, a personal authentication execution command is transmitted to the terminal device 200 and the authentication device 400 via the communication unit 101 (step S10). The terminal device 200 receives an execution command for personal authentication via the communication unit 201. When the execution command for personal authentication is received, the display unit 203 displays a screen that prompts the user to input the ID and authentication information to the authentication device 400 (step S11). Similarly, the authentication device 400 receives a personal authentication execution command via the communication unit 401, and the display unit 402 displays a screen that prompts the user to input an ID and authentication information (step S12).

  When the user inputs the ID and the authentication information to the authentication device 400, the authentication input unit 403 receives the input of the ID and the authentication information (Step S13). When the authentication input unit 403 receives the input of the ID and the authentication information, the authentication unit 405 acquires the authentication information associated with the input ID from the authentication information storage unit 404. The authentication unit 405 performs personal authentication by determining whether or not the input authentication information matches the acquired authentication information (step S14).

  If the authentication unit 405 determines that the input authentication information matches the acquired authentication information and determines that the personal authentication has succeeded (step S14: YES), the server device 100 is successfully authenticated via the communication unit 401. And the user ID are transmitted. Upon receiving information indicating successful personal authentication from the authentication device 400, the signature execution unit 105 of the server device 100 acquires a secret key associated with the user ID from the key storage unit 104 (step S15). Upon acquiring the private key, the signature execution unit 105 generates a signature value based on the hash value generated by the hash generation unit 102 in step S5 and the acquired private key (step S16). The signature value can be obtained by encrypting the hash value with a secret key. The signature execution unit 105 generates a signed electronic document including the electronic document and the signature value using the electronic document and the generated signature value (step S17). The server apparatus 100 registers the signed electronic document generated via the communication unit 101 in the document server apparatus 300 (step S18). When the registration of the signed electronic document is completed, the document server device 300 transmits a registration completion notification to the server device 100 (step S19).

  Upon receiving the registration completion notification from the document server apparatus 300, the server apparatus 100 transmits an authentication result to the terminal apparatus 200 via the communication unit 101 (step S20). That is, information indicating that the authentication is successful and the digital signature adding process is completed is transmitted to the terminal device 200. When receiving the information indicating completion of the electronic signature adding process, the display unit 203 of the terminal device 200 displays a screen indicating the authentication result, that is, a screen indicating the completion of the electronic signature adding process, and performs processing for adding the electronic signature to the electronic document. The process ends (step S21).

  If it is determined in step S14 that the authentication information input by the authentication unit 405 does not match the acquired authentication information and it is determined that personal authentication has failed (step S14: NO), the communication unit 401 is used. Information indicating failure of personal authentication is transmitted to the server apparatus 100. When receiving information indicating failure of personal authentication from the authentication device 400, the server device 100 transmits an authentication result to the terminal device 200 via the communication unit 101 (step S18). That is, information indicating personal authentication failure is transmitted to the terminal device 200. When receiving the information indicating the personal authentication failure from the server device 100, the display unit 203 of the terminal device 200 displays a screen indicating the authentication result, that is, a screen indicating the personal authentication failure, and adds the electronic signature to the electronic document. The process ends (step S21).

As described above, according to the first embodiment, the server apparatus holds the secret key and the process of adding the electronic signature is executed by the server apparatus. This eliminates the need for the terminal device to store the secret key, so that the electronic signature system can be applied to a thin client system in which only the minimum necessary functions such as input and display of information are installed in the terminal device.
Further, according to the first embodiment, it is not necessary to perform processing for adding an electronic signature in the terminal device. As a result, the operation of installing a program or the like for executing an electronic signature on the terminal device can be made unnecessary, so that the possibility of problems such as installation mistakes can be eliminated.

  According to the first embodiment, the electronic signature system includes an authentication device that performs personal authentication separately from the terminal device and the server device. Conventionally, it has been necessary to perform installation work in order to provide a terminal device with a high security and a personal authentication function based on property, biometrics, etc., but by installing an authentication device separately, installation work on the terminal device can be performed. Without this, the electronic signature system can be provided with a personal authentication function with high security. Furthermore, by providing the authentication apparatus with a personal authentication function based on property, biometrics, etc., the user can be made aware that the signature has been made.

  Further, according to the first embodiment, the authentication information storage unit 404 of the authentication device 400 holds the authentication information. Thereby, since it is not necessary to register authentication information in the server apparatus 100, it is possible to prevent a third party from using the authentication information illegally using the server apparatus 100.

As described above, the first embodiment of the present invention has been described in detail with reference to the drawings. However, the specific configuration is not limited to that described above, and various designs can be made without departing from the scope of the present invention. It is possible to make changes.
For example, in the first embodiment, the case where the address storage unit 103 stores the MAC addresses of the terminal device 200 and the authentication device 400 has been described. However, the present invention is not limited to this. For example, the address storage unit 103 includes the terminal device 200 and the authentication device. Information used for communication other than the MAC address, such as storing 400 IP (Internet Protocol) addresses, may be stored.

  In the first embodiment, the server device 100 includes the address storage unit 103, the authentication device 400 is associated with the terminal device 200, and a personal authentication execution command is transmitted to the authentication device 400. It is not limited to this. For example, after the input unit of the terminal device 200 accepts the selection of the electronic document in step S <b> 3, the identification information of the authentication device is input to the input unit 202 of the terminal device 200 and transmitted to the server device 100. The server apparatus 100 may be configured such that the server apparatus 100 does not include the address storage unit 103 by determining the authentication apparatus 400 that transmits a personal authentication execution command based on the received identification information of the authentication apparatus.

  In the first embodiment, the case where the document server apparatus 300 is provided separately from the server apparatus 100 has been described. However, the present invention is not limited thereto, and the server apparatus 100 includes a document storage unit, and the document storage unit stores an electronic document. As a result, the document server device 300 may not be provided.

  In the first embodiment, the case where an ID is input to the authentication input unit has been described. However, the present invention is not limited to this, and when the authentication device 400 is a dedicated device for one user, the ID input is omitted. Only the input of authentication information may be accepted. In this case, the same effect can be obtained by registering the ID in the internal memory of the authentication device 400 in advance and transmitting the registered ID to the server device 100.

(Second Embodiment)
Hereinafter, a second embodiment of the present invention will be described in detail with reference to the drawings. The second embodiment is an example of an electronic signature system that performs personal authentication by an authentication device communicating with an authentication server that manages authentication information.
FIG. 3 is a schematic block diagram of an electronic signature system according to the second embodiment of the present invention.
Since the configurations of the server device 100 and the terminal device 200 according to the second embodiment are the same as those of the electronic signature system of the first embodiment, description will be made using the same reference numerals. The authentication device 400 is configured without the authentication information storage unit 404 and the authentication unit 405 from the first embodiment.
In the second embodiment, an authentication server device 500 is newly provided. The authentication server device 500 performs personal authentication based on the ID and authentication information input to the authentication device 400.

The authentication server device 500 includes a communication unit 501 (communication unit), an authentication information storage unit 502 (authentication information storage unit), and an authentication unit 503 (authentication unit).
The communication unit 501 communicates with the authentication device 400.
The authentication information storage unit 502 stores user authentication information in association with the user ID in advance.
The authentication unit 503 performs personal authentication based on information received via the communication unit 501 and information stored in the authentication information storage unit 502.

Next, the personal authentication operation of the authentication device 400 in the second embodiment will be described.
First, when the user inputs an ID and authentication information to the terminal device 200, the input unit 202 of the terminal device 200 receives the input of the ID and authentication information in step S11 described above. When the input unit 202 receives input of ID and authentication information, the communication unit 401 transmits the ID and authentication information input to the authentication server device 500.
The authentication server device 500 receives the ID and authentication information via the communication unit 501. The authentication unit 502 acquires authentication information associated with the received ID from the authentication information storage unit 503. The authentication unit 502 generates authentication result information by determining whether or not the received authentication information matches the acquired authentication information. When the authentication result information is generated, the authentication server device 500 transmits the authentication result information to the authentication device 400 via the communication unit 501.
Upon receiving the authentication result information via the communication unit 401, the authentication device 400 performs personal authentication based on the authentication result information (step S12). When the authentication result information indicates that the authentication information does not match the acquired authentication information, the authentication device 400 determines that the personal authentication has failed, and the authentication result information indicates that the authentication information matches the acquired authentication information. If it indicates, it is determined that the personal authentication is successful. When it is determined that the personal authentication is successful, information indicating the successful personal authentication and the user ID are transmitted to the server apparatus 100 via the communication unit 401.
Subsequent operations are the same as those in the first embodiment.

  Thus, according to the second embodiment, the authentication server device 500 holds the authentication information. This eliminates the need to register authentication information each time the authentication device 400 is replaced. Also, personal authentication can be performed when the authentication device 400 has a small storage capacity and cannot store authentication information.

(Third embodiment)
Hereinafter, the third embodiment of the present invention will be described in detail with reference to the drawings. The third embodiment is an example of an electronic signature system that prevents a signature from being added by impersonating an electronic document by adding a signature to authentication result information.
FIG. 4 is a schematic block diagram of an electronic signature system according to the third embodiment of the present invention.
Since the configuration of the terminal device 200 according to the third embodiment is the same as that of the electronic signature system according to the first embodiment, description will be made using the same reference numerals. The server apparatus 100 is configured to include a signature determination unit 106 (signature determination unit) in addition to the first embodiment. The authentication device 400 includes a key storage unit 406 (secret key storage unit) and a signature execution unit 407 (signature execution unit) in addition to the first embodiment.
The key storage unit 406 stores a secret key unique to the authentication device 400 in advance.
The signature execution unit 407 generates a signature value using the hash value received from the server device 100 and the secret key stored in the key storage unit 406.
The key storage unit 104 (public key storage unit) stores the public key of the authentication device 400 in advance in addition to the private key unique to the server device 100.
The signature determination unit 106 determines the authenticity of the signature value using the signature value received from the authentication device and the public key stored in the key storage unit 104.

Next, the operation of the electronic signature system according to the third embodiment will be described.
FIG. 5 is a sequence diagram illustrating an operation of adding an electronic signature to an electronic document by the electronic signature system according to the third embodiment. In addition, the step which performs the same process as 1st Embodiment is demonstrated using the same code | symbol.
First, when processing for adding an electronic signature starts, for example, when the server device 100 receives an instruction to perform an electronic signature from the terminal device 200, the server device 100 sends an electronic document to the document server device 300 via the communication unit 101. A list transmission request is transmitted (step S1). Upon receiving the electronic document list transmission request, the document server apparatus 300 transmits the electronic document list stored in the document server apparatus 300 to the server apparatus 100 (step S2). When the server apparatus 100 receives the list of electronic documents from the document server apparatus 300 via the communication unit 101, the server apparatus 100 transmits the list of electronic documents received via the communication unit 101 to the terminal apparatus 200 (step S3). When the communication unit 201 of the terminal device 200 receives the list of electronic documents, the display unit 203 displays the received list of electronic documents, and displays a screen that prompts the user to select an electronic document to be digitally signed from the list. Display (step S4). When the user selects an electronic document to be digitally signed, the input unit 202 receives an input for selecting an electronic document (step S5). When the input unit 202 receives an input for selecting an electronic document, the information indicating the selected electronic document is transmitted to the server apparatus 100 via the communication unit 201.

  When the server apparatus 100 receives information indicating the selected electronic document via the communication unit 101, the server apparatus 100 transmits a transmission request for the selected electronic document to the document server apparatus via the communication unit 101 (step S6). Upon receiving the electronic document transmission request, the document server apparatus 300 transmits the electronic document to the server apparatus 100. When the server apparatus 100 receives an electronic document via the communication unit 101, the hash generation unit 102 generates a hash value of the received electronic document using a hash function registered in the internal memory (step S8).

  Next, the server apparatus 100 acquires from the address storage unit 103 the MAC address of the authentication apparatus 400 associated with the MAC address of the terminal apparatus 200 that is the transmission source of the information indicating the selected electronic document (step S9). . When the MAC address of the authentication device 400 is acquired, a personal authentication execution command is transmitted to the terminal device 200 and the authentication device 400 via the communication unit 101 (step S10). The terminal device 200 receives an execution command for personal authentication via the communication unit 201. When the execution command for personal authentication is received, the display unit 203 displays a screen that prompts the user to input the ID and authentication information to the authentication device 400 (step S11). Similarly, the authentication device 400 receives a personal authentication execution command via the communication unit 401, and the display unit 402 displays a screen that prompts the user to input an ID and authentication information (step S12).

  When the user inputs the ID and the authentication information to the authentication device 400, the authentication input unit 403 receives the input of the ID and the authentication information (Step S13). When the authentication input unit 403 receives the input of the ID and the authentication information, the authentication unit 405 acquires the authentication information associated with the input ID from the authentication information storage unit 404. The authentication unit 405 performs personal authentication by determining whether or not the input authentication information matches the acquired authentication information (step S14).

  When the authentication unit 405 determines that the input authentication information matches the acquired authentication information and determines that the personal authentication is successful (step S14: YES), the signature execution unit 407 reads the private key from the key storage unit 406. Is acquired (step S31). When the private key is acquired, the signature execution unit 407 generates a signature value from information indicating successful personal authentication using the acquired private key (step S32).

  When the signature execution unit 407 generates a signature value, the communication unit 401 transmits information indicating successful personal authentication, the generated signature value, and the user ID to the server apparatus 100. When the information indicating the successful personal authentication and the signature value are received from the authentication device 400, the signature determination unit 106 of the server device 100 acquires the public key of the signature execution unit 407 from the key storage unit 104, and the received signature value is the authentication device. It is determined whether or not it is generated at 400 (step S33). When it is determined that the received signature value is generated by the authentication apparatus 400 (step S33: YES), the signature execution unit 105 acquires a secret key associated with the user ID from the key storage unit 104. (Step S15). Upon acquiring the private key, the signature execution unit 105 generates a signature value based on the hash value generated by the hash generation unit 102 in step S5 and the acquired private key (step S16). The signature value can be obtained by encrypting the hash value with a secret key. The signature execution unit 105 generates a signed electronic document including the electronic document and the signature value using the electronic document and the generated signature value (step S17). The server apparatus 100 registers the signed electronic document generated via the communication unit 101 in the document server apparatus 300 (step S18). When the registration of the signed electronic document is completed, the document server device 300 transmits a registration completion notification to the server device 100 (step S19).

  Upon receiving the registration completion notification from the document server apparatus 300, the server apparatus 100 transmits an authentication result to the terminal apparatus 200 via the communication unit 101 (step S20). That is, information indicating that the authentication is successful and the digital signature adding process is completed is transmitted to the terminal device 200. When receiving the information indicating completion of the electronic signature adding process, the display unit 203 of the terminal device 200 displays a screen indicating the authentication result, that is, a screen indicating the completion of the electronic signature adding process, and performs processing for adding the electronic signature to the electronic document. The process ends (step S21).

  In step S14, the authentication unit 405 determines that the input authentication information does not match the acquired authentication information, and determines that personal authentication has failed (step S14: NO), or received in step S33. When it is determined that the signature value is not generated by the authentication device 400 (step S33: NO), information indicating failure of personal authentication is transmitted to the server device 100 via the communication unit 401. When receiving information indicating failure of personal authentication from the authentication device 400, the server device 100 transmits an authentication result to the terminal device 200 via the communication unit 101 (step S18). That is, information indicating personal authentication failure is transmitted to the terminal device 200. When receiving the information indicating the personal authentication failure from the server device 100, the display unit 203 of the terminal device 200 displays a screen indicating the authentication result, that is, a screen indicating the personal authentication failure, and adds the electronic signature to the electronic document. The process ends (step S21).

  As described above, in the electronic signature system according to the third embodiment, the server device 100 decrypts the signature value of the authentication device 400, thereby confirming that the authentication device 400 is not the authentication device 400 that has been impersonated. Can do. If the signed electronic document generated by the electronic signature system according to the third embodiment does not include the signature value of the authentication device 400, a third party illegally signs using the private key using the server device 100. I understand that. This can prevent signatures due to unauthorized operations.

  In the third embodiment, the case where the electronic document with signature generated by the electronic signature system includes only the signature value of the user generated using the user's private key has been described. However, the present invention is not limited to this. An electronic document with a signature generated by the electronic signature system includes the signature value of the authentication device 400 generated using the private key of the authentication device 400 in addition to the signature value of the user generated using the user's private key. It is also good. Thereby, it is possible to prove that the signed electronic document including the signature value of the authentication device 400 has high security and is generated by the electronic signature system that makes the user aware of the signature.

  In the third embodiment, the case where the signature execution unit of the authentication apparatus 400 generates a signature value from information indicating successful personal authentication has been described. However, the present invention is not limited to this, and the user input to the authentication input unit is not limited thereto. A signature value may be generated from the ID.

  The server device, the authentication device, and the authentication server device described above have a computer system inside. Each process described above is stored in a computer-readable recording medium in the form of a program, and the above process is performed by the computer reading and executing the program. Here, the computer-readable recording medium means a magnetic disk, a magneto-optical disk, a CD-ROM, a DVD-ROM, a semiconductor memory, or the like. Alternatively, the computer program may be distributed to the computer via a communication line, and the computer that has received the distribution may execute the program.

  The program may be for realizing a part of the functions described above. Furthermore, what can implement | achieve the function mentioned above in combination with the program already recorded on the computer system, what is called a difference file (difference program) may be sufficient.

1 is a schematic block diagram of an electronic signature system according to a first embodiment. It is a sequence diagram explaining the operation | movement which adds an electronic signature to an electronic document by an electronic signature system. It is a schematic block diagram of the electronic signature system by 2nd Embodiment. It is a schematic block diagram of the electronic signature system by 3rd Embodiment. It is a sequence diagram explaining the operation | movement which adds an electronic signature to an electronic document by the electronic signature system by 3rd Embodiment.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 100 ... Server apparatus 101 ... Communication part 102 ... Hash generation part 103 ... Address storage part 104 ... Key storage part 105 ... Signature execution part 200 ... Terminal apparatus 201 ... Communication part 202 ... Input part 203 ... Display part 300 ... Document server apparatus 400 ... Authentication apparatus 401 ... Communication unit 402 ... Display unit 403 ... Authentication input unit 404 ... Authentication information storage unit 405 ... Authentication unit

Claims (5)

An electronic signature system for instructing execution of processing for adding a signature value representing a digital signature of a user to an electronic document from a terminal device to a server device,
Authentication input means for accepting the input by allowing the user to input identification information for identifying the user and authentication information that is information related to the user's property or biometric information of the user;
Authentication information storage means for storing the authentication information in association with the identification information in advance;
Authentication means for acquiring authentication information corresponding to the input identification information from the authentication information storage means, and performing personal authentication by determining whether or not the authentication information and the input authentication information match;
If the personal authentication is successful, communication means for transmitting the identification information to the server device;
An authentication device comprising a separately provided with the terminal apparatus and the server apparatus,
The server device
Secret key storage means for storing a secret key unique to the user in association with the identification information in advance;
Communication means for receiving the identification information from the authentication device;
A hash value generating means for acquiring an electronic document from the document storage means and generating a hash value from the electronic document by a one-way function;
Signature execution means for obtaining the secret key associated with the received identification information from the secret key storage means and generating the signature value based on the secret key and the hash value;
A signed document generation unit that generates a signed electronic document using the acquired electronic document and the generated signature value, and registers the signed electronic document in the document storage unit;
An electronic signature system characterized by that. The authentication device
A secret key storage means for storing a secret key unique to the device;
A signature execution unit that generates a signature value using a secret key unique to the device and transmits the signature value to the server device via the communication unit;
With
The server device
Public key storage means for storing the public key of the authentication device;
Signature determination means for determining whether or not the signature value is generated by the authentication device based on the signature value acquired from the authentication device and the public key;
The electronic signature system according to claim 1, further comprising: An electronic signature method using an electronic signature system for instructing execution of processing for adding a signature value representing a digital signature of a user to an electronic document from a terminal device to a server device,
The authentication input means of the authentication device provided separately from the terminal device and the server device uses the identification information for identifying the user and the authentication information which is information about the property owned by the user or the biometric information of the user. by input receiving the input to the person,
The authentication unit of the authentication apparatus acquires authentication information corresponding to the input identification information from an authentication information storage unit that stores the authentication information in association with the identification information in advance, and the authentication information and the input Perform personal authentication by determining whether the authentication information matches,
The communication unit of the authentication device transmits the identification information to the server device when the personal authentication is successful,
The secret key storage means of the server device stores a secret key unique to the user in association with the identification information in advance,
The communication means of the server device receives the identification information from the authentication device,
The hash value generation means of the server device acquires an electronic document from the document storage means, generates a hash value from the electronic document by a one-way function,
The signature execution means of the server device obtains the secret key associated with the received identification information from the secret key storage means, generates the signature value based on the secret key and the hash value,
A signed document generating unit of the server device generates a signed electronic document using the acquired electronic document and the generated signature value, and registers the electronic document with the document storage unit;
An electronic signature method characterized by the above. Authentication provided separately from the terminal device and the server device for performing personal authentication in an electronic signature system that instructs execution of processing for adding a signature value representing a digital signature of a user to an electronic document from the terminal device to the server device A device,
Authentication input means for accepting the input by allowing the user to input identification information for identifying the user and authentication information that is information related to the user's property or biometric information of the user;
Whether authentication information corresponding to the input identification information is acquired from authentication information storage means for storing the authentication information in association with the identification information in advance, and whether the authentication information matches the input authentication information Authentication means for performing personal authentication by determining whether or not,
If the personal authentication is successful, communication means for transmitting the identification information to the server device;
An authentication device comprising: Authentication provided separately from the terminal device and the server device for performing personal authentication in an electronic signature system that instructs execution of processing for adding a signature value representing a digital signature of a user to an electronic document from the terminal device to the server device Equipment
Authentication input means for accepting the input by allowing the user to input identification information for identifying the user and information related to the user's property or authentication information which is biometric information of the user;
Whether authentication information corresponding to the input identification information is acquired from authentication information storage means for storing the authentication information in association with the identification information in advance, and whether the authentication information matches the input authentication information Authentication means for performing personal authentication by determining whether
A communication means for transmitting the identification information to the server device when the personal authentication is successful;
Program to function as.

Images