JP6045018B2 - Electronic signature proxy server, electronic signature proxy system, and electronic signature proxy method - Google Patents

Description

  The present invention relates to an electronic signature technique using a public key cryptosystem.

  Currently, there is a technology called PKI (Public Key Infrastructure) that realizes secure exchange of electronic data using a public key cryptosystem. In PKI, an electronic signature is performed on an electronic document using a secret key, and an electronic signature is verified using a public key corresponding to the secret key. In PKI, an electronic certificate including a public key is issued from a publicly recognized certificate authority (CA), and the validity of the public key is verified by the electronic certificate.

  When using such an electronic signature, an electronic certificate and a private key and an application for executing the electronic signature are usually installed in the terminal of the document provider having the signed document. Grant is performed. However, a document provider who is not good at working with a computer may feel troublesome such work such as installation. Further, when the document provider's terminal is replaced with a new terminal or when the terminal is repaired, it is necessary to perform the installation operation again on the new terminal or the alternative terminal.

  Therefore, in the following Patent Document 1, the following method is proposed as an electronic signature providing method that can be easily used without requiring a special environment for the user's portable terminal. In this method, the identification ID of the user, the identification ID of the portable terminal, and the electronic signature information of the user are stored in the server, and the identification ID of the portable terminal acquired from the portable terminal of the user is used to Authenticate the user, give an electronic signature to the electronic document specified by the user's mobile terminal using the electronic signature information of the user, and complete the electronic signature on the user's mobile terminal Send a message to notify you. That is, Patent Document 1 below proposes a method of giving an electronic signature on a server on behalf of a user so that the user can realize an electronic signature of the electronic document by operating a mobile terminal.

JP 2004-23406 A

  In the above proposed method, it is only proposed that at least one of a private key, a public key, an electronic certificate, and electronic seal data about the user is held in the server as the electronic signature information of the user. No particular mention is made of a method until the server holds such information. However, in such an electronic signature surrogate system, it is extremely important that the server retains legitimate electronic signature information, not improper information that has been spoofed or altered.

  In addition, when the electronic certificate and private key issued by the certificate authority are protected by a PIN (Personal Identification Number), the proxy server on the system side, not the terminal of the user who owns the electronic certificate, etc. It is a problem from the viewpoint of personal information protection to cancel the protection by PKI without permission. This is because the electronic certificate and the private key are regarded as personal information. Hereinafter, data that is issued from a certificate authority and used for an electronic signature, such as an electronic certificate or a private key, may be referred to as signature use data.

  Furthermore, regardless of the operation of the user who is the owner of the signature use data, preserving the signature use data issued by the certificate authority on the surrogate server is beyond the scope of the task of substituting the electronic signature. Seems to be.

  The present invention has been made in view of the above-described problems, and provides an electronic signature technique that appropriately performs an electronic signature substitution on behalf of a user terminal.

  Each aspect of the present invention employs the following configurations in order to solve the above-described problems.

The first aspect relates to an electronic signature proxy server. The electronic signature surrogate server according to the first aspect is configured such that the primary protection certificate data including the electronic certificate protected by the personal identification data of the user and the private key issued by the certificate authority is encrypted by the obtaining surrogate server. Secondary data receiving means for receiving secondary protection certificate data obtained by encryption by the encryption method from the user terminal of the user , and secondary protection certificate received by the secondary data receiving means Decryption processing means for obtaining primary protection certificate data by decrypting data by a decryption method corresponding to the predetermined encryption method, and data holding primary protection certificate data obtained by the decryption processing means a holding unit, acquires the personal identification data of the user, using the personal identification data, personal identification data of the first primary protection certificate data held by the data holding means The protection release means for releasing the protection by the electronic signature means, and the electronic signature means for giving the electronic signature to the data to be signed generated based on the data sent from the user terminal using the secret key obtained by the protection release processing of the protection release means And having.

  A 2nd aspect is related with the electronic signature surrogate system containing the signature surrogate server which has each structure of a 1st aspect, and the acquisition surrogate server which acquires the said 1st protection certificate data from a certification authority. In the second aspect, the acquisition proxy server includes a primary data acquisition unit that acquires the primary protection certificate data issued from a certificate authority, and a primary protection certificate acquired by the primary data acquisition unit. Encryption processing means for generating secondary protection certificate data by encrypting the certificate data by a predetermined encryption method.

A third aspect relates to an electronic signature proxy method. In the electronic signature proxy method according to the third aspect, the signature proxy server obtains the primary protection certificate data including the electronic certificate protected by the user's personal identification data and the private key issued by the certificate authority. Second protection certificate data obtained by being encrypted by the proxy server using a predetermined encryption method is received from the user terminal of the user , and the received second protection certificate data is received by the predetermined encryption method. The primary protection certificate data is obtained by decrypting with a decryption method corresponding to the above, the obtained primary protection certificate data is retained, the personal identification data of the user is obtained, and the personal identification data is obtained. used to release the protection personal identification data of the first primary protection certificate data held in the data to be signed is generated based on the data sent from the user terminal, to the protection release Obtained by using a secret key, to give an electronic signature, including that.
A fourth aspect relates to an electronic signature proxy method. An electronic signature proxy method according to a fourth aspect includes an acquisition proxy server that obtains, as primary protection certificate data, an electronic certificate and a private key that are issued by a certificate authority and that are protected by a user's personal identification data; It is executed by a signature proxy server that gives an electronic signature to the user's signed data. The obtaining agent server obtains the primary protection certificate data issued from the certificate authority and encrypts the obtained primary protection certificate data by a predetermined encryption method, thereby obtaining the secondary protection certificate. Generate data. The signature proxy server receives the secondary protection certificate data generated by the acquisition proxy server from the user terminal of the user, and decrypts the received secondary protection certificate data corresponding to the predetermined encryption method. The primary protection certificate data is obtained by decrypting with the method, the obtained primary protection certificate data is retained, the personal identification data of the user is obtained, and retained using the personal identification data The protection by the personal identification data of the primary protection certificate data is released, and the electronic signature is applied to the signed data generated based on the data sent from the user terminal by using the secret key obtained by the cancellation of the protection. Give.

  As another aspect of the present invention, a program that causes at least one computer to implement the configurations of the first aspect and the second aspect described above may be used, or a computer that records such a program is readable. It may be a recording medium. This recording medium includes a non-transitory tangible medium.

  According to each of the above aspects, it is possible to provide an electronic signature technique that appropriately performs an electronic signature substitution on behalf of a user terminal.

It is a conceptual diagram which shows the structural example of the electronic signature proxy system in 1st Embodiment. It is a figure which shows notionally the process structural example of the acquisition proxy server in 1st Embodiment. It is a figure which shows notionally the example of primary protection certificate data and secondary protection certificate data. It is a figure which shows notionally the process structural example of the signature proxy server in 1st Embodiment. It is a flowchart which shows the operation example of the acquisition agency server in 1st Embodiment. It is a flowchart which shows the operation example of the signature surrogate server in 1st Embodiment regarding installation of signature use data. It is a figure which shows notionally the acquisition proxy server process structural example in 2nd Embodiment. It is a figure which shows notionally the process structural example of the signature proxy server in 2nd Embodiment. It is a flowchart which shows the operation example of the acquisition agency server in 2nd Embodiment. It is a flowchart which shows the operation example of the signature proxy server in 2nd Embodiment. It is a figure which shows notionally the process structural example of the signature proxy server in 3rd Embodiment. It is a flowchart which shows the operation example of the signature proxy server in 3rd Embodiment.

  Embodiments of the present invention will be described below. In the following description, an example in which the electronic signature proxy system in each embodiment attaches an electronic signature to an electronic purchase order is shown, but the type of electronic data to which the electronic signature proxy system provides an electronic signature is not limited. The electronic signature surrogate system may be used in any manner as long as an electronic signature is given to some electronic data. Each embodiment given below is an illustration, respectively, and the present invention is not limited to the composition of each following embodiment.

[First Embodiment]
〔System configuration〕
FIG. 1 is a conceptual diagram illustrating a configuration example of an electronic signature proxy system according to the first embodiment. The electronic signature proxy system 1 according to the first embodiment includes an acquisition proxy server 10 and a signature proxy server 20. The acquisition proxy server 10 and the signature proxy server 20 are connected to each other via a communication network within the system so that they can communicate with each other. Further, the obtaining agent server 10 and the signature agent server 20 are communicably connected to the orderer terminal 30 via the communication network 35. In addition, the signature proxy server 20 is connected to the contractor terminal 40 via the communication network 45 so as to be communicable.

  The communication networks 35 and 45 are a public network such as the Internet, a WAN (Wide Area Network), a LAN (Local Area Network), a wireless communication network, and the like. In the present embodiment, the implementation form of the communication network between the nodes in the system and the communication method on the communication network are not limited.

  The acquisition proxy server 10, the signature proxy server 20, the orderer terminal 30, and the order receiver terminal 40 are so-called computers. For example, a CPU (Central Processing Unit) 2, a memory 3, and an input / output connected to each other via a bus 5. It has an interface (I / F) 4 and the like. The memory 3 is a RAM (Random Access Memory), a ROM (Read Only Memory), a hard disk, a portable storage medium, or the like. The input / output I / F 4 is connected to an input unit (not shown), an output unit (not shown), the communication device 7 and the like. The input unit is a device that receives an input of a user operation such as a keyboard and a mouse. The output unit is a device that provides information to a user, such as a display device or a printer. The communication device 7 is a network interface card that communicates with other nodes via the communication network 35, the communication network 45, and the like. The orderer terminal 30 and the contractor terminal 40 may be a portable computer such as a mobile phone, a mobile PC (Personal Computer), a tablet terminal, or the like. The present embodiment does not limit the hardware configurations of the acquisition proxy server 10, the signature proxy server 20, the orderer terminal 30, and the order receiver terminal 40.

  The orderer terminal 30 is a terminal for performing an ordering operation in an ordering company, and receives a signature use data obtaining agency service and an electronic signature agency service provided by the electronic signature agency system 1 by communication. Hereinafter, a person in charge of ordering work using the orderer terminal 30 is referred to as an orderer. The orderer operates the user interface provided from the electronic signature proxy system 1 and realized on the orderer terminal 30 by using the orderer terminal 30, whereby the signature use data is transmitted to the electronic signature proxy system 1. Request for acquisition and request for electronic signature using the signature usage data.

  The contractor terminal 40 is a terminal for performing an order receiving work in a contract company, and receives the order request form data with an electronic signature.

  The orderer terminal 30 and the contractor terminal 40 have a function of performing general communication with other nodes and a general function of realizing a user interface corresponding to screen data provided from the electronic signature surrogate system 1. Just do it. In the present embodiment, the processing configurations of the orderer terminal 30 and the order receiver terminal 40 are not limited.

  The electronic signature proxy system 1 operates the acquisition proxy server 10 and the signature proxy server 20 to provide a signature use data acquisition proxy service and an electronic signature proxy service to the orderer. The acquisition proxy server 10 and the signature proxy server 20 may be realized by the same hardware (CPU or the like), but are preferably realized by different hardware (CPU or the like) as in the present embodiment. This is because the signature use data obtaining agency service and the electronic signature agency service are services that handle electronic certificates, but the purpose of each service is different. For example, it is preferable that the electronic certificate processed by the obtaining agent service is managed on the signing agent server regardless of the operation of the orderer who should become the owner for the purpose of the service of obtaining the electronic certificate. It is not considered.

  In response to a request from the orderer, the obtaining agent server 10 supports an obtaining agent operation for obtaining signature use data issued by the certificate authority. In this embodiment, the signature use data is an electronic certificate and a private key owned by the orderer, and is issued from the certificate authority in a state protected by the user's personal identification data (hereinafter referred to as PIN). The Hereinafter, the signature use data protected by the PIN is also referred to as primary protection certificate data.

  The signature surrogate server 20 gives an electronic signature to the electronic purchase order generated by the operation of the orderer by using the signature use data obtained in the above-described business, and receives an order for the electronic purchase order with the electronic signature attached. To the person terminal 40.

〔Device configuration〕
FIG. 2 is a diagram conceptually illustrating a processing configuration example of the obtaining agency server 10 in the first embodiment. The acquisition proxy server 10 in the first embodiment includes a request reception unit 11, a primary data acquisition unit 12, an encryption processing unit 13, a secondary data transmission unit 14, and the like. Each of these processing units is realized, for example, by executing a program stored in the memory 3 by the CPU 2. Further, the program may be installed from a portable recording medium such as a CD (Compact Disc) or a memory card or another computer on the network via the input / output I / F 4 and stored in the memory 3. Good.

  The request receiving unit 11 receives, from the orderer terminal 30, request data indicating an orderer's request for obtaining signature use data. In the signature use data obtaining agency business, the certificate authority is requested to issue the signature use data for the orderer by a predetermined method based on the request data, the PIN information issued from the certificate authority, and the primary Protection certificate data is obtained. Such a request and acquisition may be realized electronically between a certificate authority server (not shown) and the acquisition proxy server 10, or a non-electronic procedure such as mail or a window procedure. May be realized. For example, when realized by a non-electronic procedure, the PIN is acquired on paper, and the primary protection certificate data is acquired by a portable recording medium such as a CD.

  The primary data acquisition unit 12 acquires the primary protection certificate data acquired as described above. When the primary protection certificate data is acquired by the portable recording medium, the primary data acquisition unit 12 receives the primary protection certificate data from the portable recording medium via the input / output I / F 4. read.

  The encryption processing unit 13 generates secondary protection certificate data by encrypting the primary protection certificate data acquired by the primary data acquisition unit 12 using a predetermined encryption method. As the predetermined encryption method, a common key encryption method, a public key encryption method, or the like is used.

  FIG. 3 is a diagram conceptually illustrating an example of the primary protection certificate data and the secondary protection certificate data. As shown in the example of FIG. 3, a standard format defined by PKCS (Public Key Cryptography Standard) is used as the format of the primary protection certificate data, the PIN, the electronic certificate, and the private key. The electronic certificate means a public key certificate. As shown in the example of FIG. 3, the electronic certificate includes a root certificate (CA certificate) and an end entity (E / E) certificate. The book is included. The end entity certificate is a certificate issued to the orderer.

  The electronic certificate is an X.264 standard established by ITU-T (International Telecommunication Union Telecommunication Standardization Sector). 509 standard format. In this embodiment, the electronic certificate includes at least subject information and subject public key information. In the subject information, the name of the orderer is set, and in the subject public key information, the orderer's public key, the algorithm name of the public key, and the like are set.

  As described above, the secondary protection certificate data is data obtained by encrypting the primary protection certificate data using a predetermined encryption method. In this way, the encryption processing unit 13 encrypts the signature use data protected by the PIN without releasing the protection by the PIN.

  The secondary data transmission unit 14 transmits the secondary protection certificate data generated by the encryption processing unit 13 to the orderer terminal 30. At this time, the secondary data transmission unit 14 specifies the transmission destination of the secondary protection certificate data by using the address information of the orderer terminal 30 obtained when the request reception unit 11 receives the request data. May be.

  On the other hand, the primary protection certificate data and the PIN issued from the certificate authority are sent to the orderer by a non-electronic procedure in order to ensure security. For example, the primary protection certificate data is sent by a portable recording medium such as a CD, and the PIN information is sent by a paper medium. Thereby, the signature use data is owned by the orderer who should be the owner of the signature use data (electronic certificate and private key).

  FIG. 4 is a diagram conceptually illustrating a processing configuration example of the signature proxy server 20 in the first embodiment. The signature proxy server 20 according to the first embodiment includes a data reception unit 21, a decryption processing unit 22, a data holding unit 23, a screen data control unit 24, a protection release unit 25, a document generation unit 26, an electronic signature unit 27, and a data transmission unit. 28 etc. Each of these processing units is realized, for example, by executing a program stored in the memory 3 by the CPU 2. Further, the program may be installed from a portable recording medium such as a CD (Compact Disc) or a memory card or another computer on the network via the input / output I / F 4 and stored in the memory 3. Good.

  The data receiving unit 21 receives the secondary protection certificate data from the orderer terminal 30. In the orderer terminal 30, the ordering person operates the user interface realized by the screen data sent from the screen data control unit 24, which will be described later, so that the secondary protection certificate data identifies the orderer in the system. Is uploaded to the signature proxy server 20 together with user identification data (hereinafter referred to as a user ID (Identifier)).

  Further, the data receiving unit 21 receives data for electronic purchase order, which is data for creating a signed electronic document (electronic purchase order), from the orderer terminal 30. The electronic purchase order data may be a CSV (Comma Separated Values) file, or may be data input via a user interface realized on the orderer terminal 30.

  The decryption processing unit 22 decrypts the secondary protection certificate data received by the data receiving unit 21 using a decryption method corresponding to a predetermined encryption method used by the encryption processing unit 13 of the obtaining proxy server 10. The decryption processing unit 22 acquires a common key if the predetermined encryption method is the common key encryption method, and acquires a public key if the predetermined encryption method is the public key encryption method. The common key and the public key may be acquired from the obtaining agency server 10 by communication, or may be held in advance by the decryption processing unit 22.

  If the secondary protection certificate data is valid data generated by the obtaining proxy server 10, the decryption processing unit 22 can obtain the primary protection certificate data by the decryption process. On the other hand, if the secondary protection certificate data received by the data receiving unit 21 is unjustified data that has been spoofed or tampered with, the decryption unit 22 does not succeed in decrypting the data. Cannot get the certificate data. When the decryption is successful, the decryption processing unit 22 causes the data holding unit 23 to store the obtained primary protection certificate data together with the user ID.

  The data holding unit 23 holds each pair of the user ID and the primary protection certificate data obtained by the decryption processing unit 22.

  The screen data control unit 24 transmits screen data for causing the orderer terminal 30 to display an input screen for allowing the orderer to input the PIN. Further, as described above, the screen data control unit 24 may transmit the screen data for uploading the second protection certificate data from the orderer terminal 30 to the signature proxy server 20. As the screen data, for example, a WEB page is used. In addition, since this embodiment does not restrict | limit the implementation form of the user interface implement | achieved on the orderer terminal 30, the form of the said screen data is also not restrict | limited.

  The screen data control unit 24 receives the PIN data input by the orderer via the user interface realized using the transmitted screen data. At this time, the screen data control unit 24 also receives the user ID of the orderer who is the input person of the received PIN data.

  The protection release unit 25 extracts the primary protection certificate data corresponding to the user ID associated with the input PIN data from the data holding unit 23, and displays the protection of the extracted primary protection certificate data on the screen. Release using the PIN data received by the data control unit 24. If the PIN data received by the screen data control unit 24 is valid data, the protection release unit 25 can release the protection of the primary protection certificate data by the PIN, and as a result, the signature use data is changed. Can be acquired. On the other hand, if the PIN data is invalid, the protection release unit 25 cannot release the PIN protection and cannot acquire the signature use data. The signature use data for which the PIN protection has been canceled is held in the data holding unit 23 in a state associated with the user ID of the orderer who is the owner.

  The document generation unit 26 generates electronic purchase order data based on the electronic purchase order data received by the data receiving unit 21. Electronic purchase order data can also be called signed data. In the present embodiment, the implementation form of the electronic purchase order data is not limited.

  The electronic signature unit 27 gives an electronic signature to the electronic purchase order data generated by the document generation unit 26. At this time, the electronic signature unit 27 extracts the signature use data corresponding to the user ID of the orderer who is the transmission source of the electronic ordering data from the data holding unit 23, and uses the secret key included in the signature use data. Generate an electronic signature. Specifically, a message digest or hash value is acquired from a predetermined part or all of the electronic purchase order data, and the message digest or hash value is encrypted with the secret key to generate an electronic signature. Note that if the electronic signature is generated using the orderer's private key, this embodiment does not limit the specific method for generating the electronic signature.

  The data transmission unit 28 transmits the electronic certificate included in the electronic purchase order data to which the electronic signature is given and the signature use data to the contractor terminal 40. The transmission destination address of the electronic purchase order data may be acquired together with the user ID via a user interface realized by screen data provided by the screen data control unit 24.

[Operation example]
Hereinafter, the electronic signature proxy method according to the first embodiment will be described with reference to FIGS. 5 and 6.

  FIG. 5 is a flowchart illustrating an operation example of the acquisition proxy server 10 according to the first embodiment. The obtaining proxy server 10 first acquires primary protection certificate data (S51). Subsequently, the obtaining proxy server 10 generates the secondary protection certificate data by encrypting the primary protection certificate data (S52) (S53). Finally, the obtaining agent server 10 transmits the secondary protection certificate data to the orderer terminal 30 (S54).

  The orderer can obtain the secondary protection certificate data transmitted from the obtaining proxy server 10 at the orderer terminal 30. Further, the orderer can obtain the primary protection certificate data and the PIN information issued from the certificate authority by using a portable recording medium, a paper medium, or the like.

  Next, the orderer operates the orderer terminal 30 to access the electronic signature proxy system 1 to install the orderer's own signature use data in the signature proxy server 20. FIG. 6 is a flowchart showing an operation example of the signature surrogate server 20 in the first embodiment regarding installation of signature usage data.

  The signature proxy server 20 first receives the secondary protection certificate data and the user ID from the orderer terminal 30 (S61). Prior to this step, the signature proxy server 20 may transmit screen data for causing the orderer terminal 30 to transmit the data to the signature proxy server 20 to the orderer terminal 30.

  The signature proxy server 20 performs a decryption process on the received secondary protection certificate data (S62). If the decryption is successful (S63; YES), the signature proxy server 20 holds the acquired primary protection certificate data and the user ID in a state of being associated with each other (S64).

  Next, the signature proxy server 20 receives the PIN data and the user ID from the orderer terminal 30 (S65). Prior to this step, the signature proxy server 20 transmits screen data for allowing the orderer terminal 30 to input PIN data. The user ID acquired here may be the data received in (S61).

  The signature proxy server 20 identifies the primary protection certificate data held in association with the user ID, and cancels the PIN protection of the primary protection certificate data using the received PIN data. (S66). If the PIN protection has been successfully canceled (S67; YES), the signature proxy server 20 holds the obtained signature usage data and its user ID in a state of being associated with each other (S68).

  This completes the installation of the signature usage data to the signature surrogate server 20. However, when the decryption process of the secondary protection certificate data fails (S63; NO) and when the PIN protection release fails (S67; NO), the signature proxy server 20 reports an installation error to the orderer terminal. 30 is notified (S69). For example, the installation error includes the cause information, that is, information indicating failure of decryption processing or failure of PIN protection cancellation.

  After completing the installation of the signature use data, the orderer requests the electronic signature proxy system 1 to generate and transmit purchase order data to which the electronic signature is attached at a desired timing. Specifically, the orderer operates the orderer terminal 30 to transmit electronic purchase order data to the signature proxy server 20 and requests creation of purchase order data. As a result, the signature surrogate server 20 creates electronic purchase order data and assigns an electronic signature to the electronic purchase order data using the held signature use data. Finally, the signature surrogate server 20 transmits the electronic purchase order data provided with the electronic signature to the contractor terminal 40 together with the electronic certificate included in the signature use data.

  In the example of FIG. 6, the processing until the signature use server 20 holds the signature use data is handled as installation of the signature use data, but the primary protection certificate data is held by the signature substitute server 20 (step S64). Steps (S65) to (S68) may be executed for each electronic signature. In this way, the requester can be verified by the PIN every time the electronic signature is applied.

[Operation and Effect of First Embodiment]
As described above, in the first embodiment, the first protection certificate data issued from the certificate authority is acquired by the acquisition proxy server 10 and encrypted and generated without releasing the PIN protection. Next protection certificate data is transmitted to the orderer terminal 30. In this way, because the obtaining proxy server 10 does not cancel the PIN protection of the primary protection certificate data without the operation of the orderer who should be the owner of the signature use data (electronic certificate and private key), According to the first embodiment, personal information called signature use data is appropriately protected.

  Furthermore, since the primary protection certificate data is converted into the secondary protection certificate data in the acquisition proxy server 10, the primary protection certificate data is also illegally leaked from the acquisition proxy server 10. Can be prevented. In addition, since the primary protection certificate data is further sent as encrypted secondary protection certificate data from the obtaining agency server 10 to the orderer terminal 30, according to the first embodiment, Unauthorized acts such as data falsification between the obtaining agent server 10 and the orderer terminal 30 can be prevented.

  The secondary protection certificate data is sent from the orderer terminal 30 to the signature proxy server 20 by the operation of the orderer via the orderer terminal 30 and decrypted by the signature proxy server 20. Further, the PIN protection of the primary protection certificate data obtained by the decryption is canceled by the PIN data input by the orderer based on the screen data provided by the signature proxy server 20. As a result, valid signature usage data is installed in the signature proxy server 20.

  In this way, the corresponding secondary protection certificate data is sent from the orderer terminal 30 to the signature surrogate server 20 by the intention of the orderer who is the owner of the signature use data, and the PIN protection of the signature use data is released. Therefore, according to the first embodiment, the signature use data is not held in the signature proxy server 20 in a preemptive manner. That is, according to the first embodiment, it is possible to perform an appropriate proxy process within the scope of the task of proxying an electronic signature.

  Furthermore, since the primary protection certificate data is sent as the encrypted second protection certificate data from the orderer terminal 30 to the signature proxy server 20, the orderer terminal 30 and the signature proxy server 20 It is possible to prevent illegal acts such as data falsification. In addition, according to the first embodiment, the signature usage held on the signature surrogate server 20 by the double check of the decryption of the secondary protection certificate data and the PIN protection cancellation of the primary protection certificate data. Data validity can be guaranteed.

  Therefore, according to the first embodiment, it is possible to appropriately execute the proxy for obtaining the signature use data used for the electronic signature and the proxy for the electronic signature.

[Second Embodiment]
In the first embodiment described above, the user ID (user identification data) is used in the signature surrogate server 20 to identify the secondary protection certificate data, the primary protection certificate data, and the signature use data. It was. In the second embodiment, user authentication is performed in the acquisition proxy server 10 and the signature proxy server 20 using the user ID. Hereinafter, the electronic signature proxy system 1 according to the second embodiment will be described with a focus on the contents different from the first embodiment. In the following description, the same contents as those in the first embodiment are omitted as appropriate.

〔Device configuration〕
FIG. 7 is a diagram conceptually illustrating a processing configuration example of the obtaining proxy server 10 in the second embodiment. The acquisition proxy server 10 in the second embodiment further includes a user authentication processing unit 71, a user data storage unit 72, and a shared data transmission unit 73 in addition to the configuration of the first embodiment.

  The user authentication processing unit 71 performs user registration processing and user authentication processing. In each process, the user authentication processing unit 71 transmits screen data for displaying a predetermined input screen on the orderer terminal 30 to the orderer terminal 30, and receives data input by the orderer via the input screen. get.

  The user authentication processing unit 71 includes a user ID for identifying the orderer in the system, authentication data used for user authentication such as a password and key data, and the encryption applied by the encryption processing unit 13 in the user registration process. The key data for decrypting the data by the signature proxy server 20 is stored in the user data storage unit 72 in a state of being associated with each other. It is desirable that the key data is acquired so as to differ for each user ID. Therefore, for example, the user authentication processing unit 71 may generate new common key data for each registered user ID.

  The user authentication processing unit 71 authenticates a user (orderer) who has accessed via the orderer terminal 30 by using the user ID input by the orderer terminal 30 in the user authentication process. For example, the user authentication processing unit 71 performs user authentication by checking the user ID and password input by the orderer terminal 30 with the user ID and password (authentication data) stored in the user data storage unit 72. . In addition, since this embodiment does not restrict | limit a specific user authentication method, you may make it perform user authentication using authentication data, such as electronic certificates other than a password.

  The user authentication processing by the user authentication processing unit 71 is executed, for example, before receiving request data indicating a request for obtaining signature use data. In this case, the request receiving unit 11 rejects the request data when a user ID whose validity is not authenticated is received together with the request data. Further, the user authentication processing unit 71 may cause the orderer terminal 30 to hold the user ID only for a user whose validity is authenticated by using a mechanism such as Cookie. As a result, the orderer terminal 30 obtains the stored user ID at the time of request for obtaining the signature use data, the upload of the secondary protection certificate data, the PIN data transmission, the electronic purchase order data transmission, etc. The data can be transmitted to the obtaining proxy server 10 or the signature proxy server 20.

  The user data storage unit 72 stores each combination of a user ID, authentication data, and key data.

  The primary data acquisition unit 12 acquires the user ID of the orderer who becomes the owner of the data together with the primary protection certificate data. The encryption processing unit 13 extracts the key data corresponding to the user ID from the user data storage unit 72, and encrypts the primary protection certificate data acquired by the primary data acquisition unit 12 using the key data. Turn into.

  The shared data transmission unit 73 extracts the user ID and key data corresponding to the secondary protection certificate data transmitted by the secondary data transmission unit 14 from the user data storage unit 72, and extracts the extracted user ID and key. The data is transmitted to the signature proxy server 20.

  FIG. 8 is a diagram conceptually illustrating a processing configuration example of the signature proxy server 20 in the second exemplary embodiment. The signature proxy server 20 in the second embodiment further includes a shared data receiving unit 81, a shared data storage unit 82, and an input person authentication unit 83 in addition to the configuration of the first embodiment.

  The shared data receiving unit 81 receives the user ID and key data transmitted from the obtaining agency server 10 and stores the received data in the shared data storage unit 82. The shared data storage unit 82 stores each pair of user ID and key data.

  The input person authentication unit 83 authenticates the validity of the input person of the PIN data received by the screen data control unit 24. Specifically, the input person authentication unit 83 acquires the user ID received by the screen data control unit 24 together with the PIN data, and whether the pair of the user ID and key data is stored in the shared data storage unit 82. Determine whether or not. The input person authentication unit 83 determines that the input person is valid when the pair is stored. Such a determination is based on the fact that each pair of the user ID and key data stored in the shared data storage unit 82 is validated by user authentication in the acquisition proxy server 10.

  The protection cancellation unit 25 executes the process of canceling the protection of the primary protection certificate data using the PIN data only when the validity is recognized by the input person authentication unit 83, and the validity is not recognized. In the case of the release, the release process using the PIN data is not executed.

  The decryption processing unit 22 extracts the key data corresponding to the user ID sent from the orderer terminal 30 together with the secondary protection certificate data from the shared data storage unit 82, and uses the extracted key data to Decrypt the secondary protection certificate data.

[Operation example]
Hereinafter, the electronic signature proxy method according to the second embodiment will be described with reference to FIGS. 9 and 10.

  FIG. 9 is a flowchart illustrating an operation example of the acquisition proxy server 10 according to the second embodiment. In 2nd Embodiment, in addition to the process (S51 to S54) of 1st Embodiment, a process (S91) is performed. That is, the obtaining proxy server 10 transmits the user ID and key data corresponding to the secondary protection certificate data transmitted to the orderer terminal 30 to the signature proxy server 20 (S91).

  FIG. 10 is a flowchart showing an operation example of the signature proxy server 20 in the second embodiment. In the second embodiment, the signature proxy server 20 first receives and receives the user ID and key data corresponding to the secondary protection certificate data transmitted to the orderer terminal 30 from the acquisition proxy server 10. The pair of user ID and key data is stored in the shared data storage unit 82 (S101). Thereafter, the signature proxy server 20 executes steps (S61) to (S65) as in the first embodiment.

  When receiving the PIN data and the user ID from the orderer terminal 30 (S65), the signature proxy server 20 according to the second embodiment checks whether the user ID is stored in the shared data storage unit 82 together with the key data. Thus, the validity of the input person of the PIN data is authenticated (S103). When the user ID is stored in the shared data storage unit 82 together with the key data, the signature proxy server 20 determines that the input person of the PIN data is valid (S103; YES).

  When it is determined that the PIN data input person is valid (S103; YES), the signature proxy server 20 cancels the PIN protection of the secondary protection certificate data using the PIN data (S66). On the other hand, when it is determined that the PIN data input person is not valid (S103; NO), the signature proxy server 20 notifies the orderer terminal 30 of an installation error (S69). For example, the installation error includes information indicating that the input person is inappropriate as the cause information. Henceforth, a process (S67) and a process (S68) are the same as that of 1st Embodiment.

[Operation and Effect of Second Embodiment]
As described above, in the second embodiment, user authentication is performed in the obtaining agency server 10, and only request data sent together with a user ID whose validity is authenticated is accepted, and for an orderer having the user ID. Secondary protection certificate data is generated from the primary protection certificate data. When the secondary protection certificate data is transmitted to the orderer terminal 30, the corresponding user ID and key data are transmitted to the signature proxy server 20. The signing proxy server 20 uses the user ID sent from the obtaining proxy server 10 to authenticate the PIN data input person, and only when the validity of the input person is authenticated, the secondary protection certificate. The PIN protection of the data is released.

  As described above, in the second embodiment, the validity of the request data from the orderer is confirmed by the user authentication at the obtaining agency server 10, and the PIN data is input by the input person authentication at the signature agency server 20. The legitimacy of the person is confirmed. Therefore, according to the second embodiment, it is possible to prevent the acquisition and installation of signature use data by a request from a malicious third party or the input of PIN data, and further improve the security compared to the first embodiment. Can do.

  Furthermore, in the second embodiment, since a pair of a user ID and key data is sent from the obtaining proxy server 10 to the signature proxy server 20, key data used for encryption and decryption of the primary protection certificate data is stored. It can be changed for each user. Therefore, according to the second embodiment, it is possible to further reduce the risk of falsification of the secondary protection certificate data. In other words, according to the second embodiment, it is possible to reliably guarantee the validity of the signature use data held on the signature proxy server 20.

[Third Embodiment]
In the third embodiment, in addition to the processing of the second embodiment described above, authentication of an electronic certificate is further performed. In the following, the electronic signature proxy system 1 according to the third embodiment will be described with a focus on the content different from the first embodiment and the second embodiment. In the following description, the same contents as those in the first embodiment and the second embodiment will be omitted as appropriate.

  FIG. 11 is a diagram conceptually illustrating a processing configuration example of the signature proxy server 20 in the third exemplary embodiment. The signature proxy server 20 in the third embodiment further includes a certificate authentication unit 111 in addition to the configuration of the second embodiment.

  The certificate authentication unit 111 determines the validity of the electronic certificate obtained by the protection cancellation process of the protection cancellation unit 25 using the public key of the certificate authority. Specifically, the certificate authenticating unit 111 decrypts the electronic signature of the certificate authority included in the obtained electronic certificate using the public key of the certificate authority, and the message digest or hash value obtained by the decryption, A message digest or hash value generated from a predetermined part of the electronic certificate is collated. If it is determined that the electronic certificate is invalid, the certificate authenticating unit 111 confirms that the electronic certificate included in the secondary protection certificate data sent to the orderer terminal 30 is invalid. Notice.

  The public key of the certificate authority is acquired from, for example, the digital certificate of the certificate authority acquired from the certificate authority, which is installed in the signature proxy server 20 in advance. The public key of the certificate authority may be sent from the obtaining agent server 10 to the signing agent server 20 via a communication network between the obtaining agent server 10 and the signature agent server 20 in which high security is ensured.

[Operation example]
Hereinafter, the electronic signature proxy method according to the third embodiment will be described with reference to FIG.
FIG. 12 is a flowchart showing an operation example of the signature proxy server 20 in the third embodiment. In the third embodiment, the signature proxy server 20 further executes a step (S111) and a step (S112) in addition to the steps of the second embodiment.

  When the PIN protection server 20 succeeds in releasing the PIN protection (S67; YES), the signature surrogate server 20 authenticates the validity of the electronic certificate included in the obtained signature use data (S111). The specific authentication method is as described above. When the validity of the electronic certificate is authenticated (S112; YES), the signature surrogate server 20 holds the obtained signature usage data and its user ID in a mutually associated state (S68). On the other hand, when the signature proxy server 20 determines that the electronic certificate is invalid, it notifies the orderer terminal 30 of an installation error. For example, the installation error includes information indicating that the electronic certificate is invalid as the cause information.

[Operation and Effect of Third Embodiment]
As described above, in the third embodiment, the validity of the electronic certificate included in the signature use data obtained by releasing the PIN protection is further authenticated. As a result, it is confirmed whether or not the electronic certificate is legitimately issued by the certificate authority, so that the validity of the signature use data held on the signature surrogate server 20 can be reliably guaranteed. .

[Modification]
In the above description, the example in which the primary protection certificate data issued from the certificate authority is formed by protecting the pair of the electronic certificate and the private key with the PIN is shown. It does not exclude forms protected by PIN. That is, the primary protection certificate data described above may be formed from an electronic certificate that is not protected with a PIN and a private key that is protected with a PIN. In this case, the protection cancellation unit 25 cancels the PIN protection of the secret key.

  In the above-described first embodiment, the obtaining proxy server 10 may execute only the encryption process of the primary protection certificate data, that is, the generation process of the secondary protection certificate data. In this case, the secondary protection certificate data may be sent from the obtaining proxy server 10 to the orderer by a portable recording medium such as a CD. Further, the orderer may acquire the primary protection certificate data and the PIN information from the certificate authority by itself without requesting the electronic signature proxy system 1 to acquire the signature use data. In this case, the orderer may pass the primary protection certificate data to the obtaining proxy server 10 using a portable recording medium such as a CD.

In the plurality of flowcharts used in the above description, a plurality of steps (processes) are described in order, but the execution order of the steps executed in the present embodiment is not limited to the description order. In the present embodiment, the order of the illustrated steps can be changed within a range that does not hinder the contents. Moreover, each above-mentioned embodiment can be combined in the range which the content does not conflict.
Hereinafter, examples of the reference form will be added.
1. A secondary protection certificate obtained by encrypting the primary protection certificate data, which is issued by the certificate authority and includes the electronic certificate protected by the personal identification data of the user and the private key, by a predetermined encryption method Secondary data receiving means for receiving document data from the user terminal of the user;
Decryption processing means for obtaining the primary protection certificate data by decrypting the secondary protection certificate data received by the secondary data receiving means by a decryption method corresponding to the predetermined encryption method;
Data holding means for holding the primary protection certificate data acquired by the decryption processing means;
Screen data transmitting means for transmitting screen data for causing the user terminal to display an input screen for allowing the user to input the personal identification data;
Protection release means for releasing protection by the personal identification data of the primary protection certificate data held by the data holding means using the personal identification data input via the input screen;
An electronic signature means for giving an electronic signature to the data to be signed generated based on the data sent from the user terminal, using the secret key obtained by the protection release processing of the protection release means;
An electronic signature proxy server comprising:
2. A proxy server that obtains an electronic certificate and private key protected by the user's personal identification data issued as a primary protection certificate data, and an electronic signature is attached to the signed data of the user. In an electronic signature proxy system including a signature proxy server,
The obtaining agent server is
Primary data acquisition means for acquiring the primary protection certificate data issued from the certificate authority;
Encryption processing means for generating secondary protection certificate data by encrypting the primary protection certificate data acquired by the primary data acquisition means by a predetermined encryption method;
With
The signature surrogate server
Secondary data receiving means for receiving the secondary protection certificate data generated by the cryptographic processing means from the user terminal of the user;
Decryption processing means for obtaining the primary protection certificate data by decrypting the secondary protection certificate data received by the secondary data receiving means by a decryption method corresponding to the predetermined encryption method;
Data holding means for holding the primary protection certificate data acquired by the decryption processing means;
Screen data transmitting means for transmitting screen data for causing the user terminal to display an input screen for allowing the user to input the personal identification data;
Protection release means for releasing protection by the personal identification data of the primary protection certificate data held by the data holding means using the personal identification data input via the input screen;
An electronic signature means for giving an electronic signature to the data to be signed generated based on the data sent from the user terminal, using the secret key obtained by the protection release processing of the protection release means;
An electronic signature agency system comprising:
3. The obtaining agent server is
Shared data transmitting means for transmitting user identification data for identifying the user in the system and key data used for decrypting the secondary protection certificate data for the user to the signature surrogate server;
Further comprising
The secondary data receiving means receives user identification data of the user in addition to the secondary protection certificate data from the user terminal,
The decryption processing means uses the key data transmitted by the shared data transmitting means together with the same user identification data as the user identification data received by the secondary data receiving means for the secondary protection certificate data. Decrypt
2. Electronic signature agent system described in 1.
4). The signature surrogate server
Using at least the user identification data transmitted by the shared data transmitting means and the user identification data received by the secondary data receiving means, the personal identification data is displayed on the input screen using the user terminal. An input person authentication means for authenticating the validity of the user to input,
Further comprising
The protection release means does not execute the protection release processing of the primary protection certificate data when the validity is not authenticated by the input person authentication means;
3. Electronic signature agent system described in 1.
5. The signature surrogate server
When the validity of the electronic certificate obtained by the protection cancellation processing of the protection cancellation means is authenticated using the public key of the certificate authority, and when it is determined that the electronic certificate is invalid, Certificate authentication means for notifying that the electronic certificate included in the secondary protection certificate data is invalid,
Further comprising To 4. The electronic signature proxy system according to any one of the above.
6). At least one computer
The secondary protection certificate data is issued by encrypting the primary protection certificate data issued by the certificate authority and including the electronic certificate protected by the personal identification data of the user and the private key by a predetermined encryption method. Produces
Receiving the secondary protection certificate data from the user terminal of the user;
Obtaining the primary protection certificate data by decrypting the received secondary protection certificate data with a decryption method corresponding to the predetermined encryption method;
Holding the acquired primary protection certificate data;
Transmitting screen data for displaying on the user terminal an input screen for allowing the user to input the personal identification data;
Using the personal identification data input via the input screen, release the protection of the retained primary protection certificate data by the personal identification data,
An electronic signature is given to the signed data generated based on the data sent from the user terminal, using the secret key obtained by the protection cancellation.
An electronic signature agent method including:
7). The at least one computer includes an obtaining agency server that obtains the primary protection certificate data from the certificate authority, and a signature agency server that provides an electronic signature to the signed data of the user,
The obtaining agent server is
Obtaining the primary protection certificate data issued from the certificate authority;
Encrypting the acquired primary protection certificate data by a predetermined encryption method to generate secondary protection certificate data;
The signature proxy server is
Receiving the secondary protection certificate data generated by the obtaining agency server from the user terminal of the user;
Obtaining the primary protection certificate data by decrypting the received secondary protection certificate data with a decryption method corresponding to the predetermined encryption method;
Holding the acquired primary protection certificate data;
Transmitting screen data for displaying on the user terminal an input screen for allowing the user to input the personal identification data;
Using the personal identification data input via the input screen, release the protection of the retained primary protection certificate data by the personal identification data,
An electronic signature is given to the data to be signed generated based on the data sent from the user terminal, using the secret key obtained by the protection cancellation process.
Including. The electronic signature agent method described in 1.
8). The obtaining agent server is
Transmitting user identification data for identifying the user in the system and key data used for decrypting the secondary protection certificate data for the user to the signature surrogate server;
The signature proxy server is
Receiving, from the user terminal, user identification data of the user in addition to the secondary protection certificate data;
Further including
In the decryption by the signature surrogate server, the secondary protection certificate data is transmitted from the obtaining proxy server to the signature surrogate server together with user identification data identical to the user identification data received from the user terminal. Decrypt using the key data;
7). The electronic signature agent method described in 1.
9. The signature proxy server is
Using at least the user identification data transmitted from the obtaining agency server to the signature agency server and the user identification data transmitted from the user terminal, the personal identification data on the input screen using the user terminal Authenticate the validity of the user,
Further including
The protection cancellation of the signature surrogate server does not execute the protection cancellation processing of the primary protection certificate data when the validity of the user is not authenticated.
8). The electronic signature agent method described in 1.
10. The signature proxy server is
Authenticates the validity of the electronic certificate obtained by the protection cancellation using the public key of the certificate authority,
When it is determined that the electronic certificate is invalid, the user terminal is notified that the electronic certificate included in the secondary protection certificate data is invalid.
Further includes: To 9. The electronic signature proxy method according to any one of the above.
11. On at least one computer,
A secondary protection certificate obtained by encrypting the primary protection certificate data, which is issued by the certificate authority and includes the electronic certificate protected by the personal identification data of the user and the private key, by a predetermined encryption method Secondary data receiving means for receiving document data from the user terminal of the user;
Decryption processing means for obtaining the primary protection certificate data by decrypting the secondary protection certificate data received by the secondary data receiving means by a decryption method corresponding to the predetermined encryption method;
Data holding means for holding the primary protection certificate data acquired by the decryption processing means;
Screen data transmitting means for transmitting screen data for causing the user terminal to display an input screen for allowing the user to input the personal identification data;
Protection release means for releasing protection by the personal identification data of the primary protection certificate data held by the data holding means using the personal identification data input via the input screen;
An electronic signature means for giving an electronic signature to the data to be signed generated based on the data sent from the user terminal, using the secret key obtained by the protection release processing of the protection release means;
A program that realizes
12 The at least one computer includes an obtaining agency server that obtains the primary protection certificate data from the certificate authority, and a signature agency server that provides an electronic signature to the signed data of the user,
In the obtaining agent server,
Primary data acquisition means for acquiring the primary protection certificate data issued from the certificate authority;
Encryption processing means for generating secondary protection certificate data by encrypting the primary protection certificate data acquired by the primary data acquisition means by a predetermined encryption method;
Realized,
To the signing agent server,
The secondary data receiving means, the decryption processing means, the data holding means, the screen data transmission means, the protection release means, and the electronic signature means,
11 is realized. The program described in.

1 Electronic signature agency system 2 CPU
3 Memory 4 Input / output I / F
5 Bus 7 Communication Device 10 Obtaining Proxy Server 11 Request Receiving Unit 12 Primary Data Acquisition Unit 13 Cryptographic Processing Unit 14 Secondary Data Transmitting Unit 20 Signature Proxy Server 21 Data Receiving Unit 22 Decryption Processing Unit 23 Data Holding Unit 24 Screen Data Control Unit 25 protection release unit 26 document generation unit 27 electronic signature unit 28 data transmission unit 30 orderer terminal 35, 45 communication network 40 orderer terminal 71 user authentication processing unit 72 user data storage unit 73 shared data transmission unit 81 shared data reception unit 82 Shared data storage unit 83 Input person authentication unit 111 Certificate authentication unit

Claims (11)

Obtained by the first protection certificate data issued by the certificate authority, including the electronic certificate protected by the user's personal identification data and the private key, encrypted by the obtaining agency server by a predetermined encryption method Secondary data receiving means for receiving secondary protection certificate data from the user terminal of the user;
Decryption processing means for obtaining the primary protection certificate data by decrypting the secondary protection certificate data received by the secondary data receiving means by a decryption method corresponding to the predetermined encryption method;
Data holding means for holding the primary protection certificate data acquired by the decryption processing means;
Protection release means for acquiring personal identification data of the user and using the personal identification data to release protection of the primary protection certificate data held by the data holding means by the personal identification data;
An electronic signature means for giving an electronic signature to the data to be signed generated based on the data sent from the user terminal, using the secret key obtained by the protection release processing of the protection release means;
An electronic signature proxy server comprising: A proxy server that obtains an electronic certificate and private key protected by the user's personal identification data issued as a primary protection certificate data, and an electronic signature is attached to the signed data of the user. In an electronic signature proxy system including a signature proxy server,
The obtaining agent server is
Primary data acquisition means for acquiring the primary protection certificate data issued from the certificate authority;
Encryption processing means for generating secondary protection certificate data by encrypting the primary protection certificate data acquired by the primary data acquisition means by a predetermined encryption method;
With
The signature surrogate server
Secondary data receiving means for receiving the secondary protection certificate data generated by the cryptographic processing means from the user terminal of the user;
Decryption processing means for obtaining the primary protection certificate data by decrypting the secondary protection certificate data received by the secondary data receiving means by a decryption method corresponding to the predetermined encryption method;
Data holding means for holding the primary protection certificate data acquired by the decryption processing means;
Protection release means for acquiring personal identification data of the user and using the personal identification data to release protection of the primary protection certificate data held by the data holding means by the personal identification data;
An electronic signature means for giving an electronic signature to the data to be signed generated based on the data sent from the user terminal, using the secret key obtained by the protection release processing of the protection release means;
An electronic signature agency system comprising: The obtaining agent server is
Shared data transmitting means for transmitting user identification data for identifying the user in the system and key data used for decrypting the secondary protection certificate data for the user to the signature surrogate server;
Further comprising
The secondary data receiving means receives user identification data of the user in addition to the secondary protection certificate data from the user terminal,
The decryption processing unit converts the second protection certificate data into the key data transmitted by the shared data transmitting unit together with the same user identification data as the user identification data received by the secondary data receiving unit. Decrypt using
The electronic signature proxy system according to claim 2. The signature surrogate server
Screen data transmitting means for transmitting screen data for causing the user terminal to display an input screen for allowing the user to input the personal identification data;
Using at least the user identification data transmitted by the shared data transmitting means and the user identification data received by the secondary data receiving means, the personal identification data is displayed on the input screen using the user terminal. An input person authentication means for authenticating the validity of the user to input;
Further comprising
The protection release means is
Obtaining personal identification data of the user input via the input screen;
If the validity is not authenticated by the input person authentication means, the protection release processing of the primary protection certificate data is not executed.
The electronic signature proxy system according to claim 3. The signature surrogate server
When the validity of the electronic certificate obtained by the protection cancellation processing of the protection cancellation means is authenticated using the public key of the certificate authority, and when it is determined that the electronic certificate is invalid, Certificate authentication means for notifying that the electronic certificate included in the secondary protection certificate data is invalid,
The electronic signature proxy system according to any one of claims 2 to 4, further comprising: The signing proxy server
Obtained by the first protection certificate data issued by the certificate authority, including the electronic certificate protected by the user's personal identification data and the private key, encrypted by the obtaining agency server by a predetermined encryption method Receiving secondary protection certificate data from the user terminal of the user;
Obtaining the primary protection certificate data by decrypting the received secondary protection certificate data with a decryption method corresponding to the predetermined encryption method;
Holding the acquired primary protection certificate data;
Obtaining personal identification data of the user, and using the personal identification data to release protection of the retained primary protection certificate data by the personal identification data;
An electronic signature is given to the signed data generated based on the data sent from the user terminal, using the secret key obtained by the protection cancellation.
An electronic signature agent method including: An acquisition server that obtains an electronic certificate and a private key protected by the user's personal identification data, which are issued by a certificate authority, as primary protection certificate data, and gives an electronic signature to the signed data of the user An electronic signature proxy method executed by a signature proxy server,
The obtaining agent server is
Obtaining the primary protection certificate data issued from the certificate authority;
Encrypting the acquired primary protection certificate data by a predetermined encryption method to generate secondary protection certificate data;
The signature proxy server is
Receiving the secondary protection certificate data generated by the obtaining agency server from the user terminal of the user;
Obtaining the primary protection certificate data by decrypting the received secondary protection certificate data with a decryption method corresponding to the predetermined encryption method;
Holding the acquired primary protection certificate data;
Obtaining personal identification data of the user, and using the personal identification data to release protection of the retained primary protection certificate data by the personal identification data;
An electronic signature is given to the signed data generated based on the data sent from the user terminal, using the secret key obtained by the protection cancellation.
An electronic signature agent method including: The obtaining agent server is
Transmitting user identification data for identifying the user in the system and key data used for decrypting the secondary protection certificate data for the user to the signature surrogate server;
The signature proxy server is
Receiving, from the user terminal, user identification data of the user in addition to the secondary protection certificate data;
Further including
In the decryption by the signature surrogate server, the secondary protection certificate data is transmitted from the obtaining proxy server to the signature surrogate server together with user identification data identical to the user identification data received from the user terminal. Decrypt using the key data;
The electronic signature proxy method according to claim 7. The signature proxy server is
Transmitting screen data for causing the user terminal to display an input screen for allowing the user to input the personal identification data; and the user identification data transmitted from the acquisition proxy server to the signature proxy server; Using at least the user identification data transmitted from the user terminal, further comprising authenticating the validity of the user who inputs the personal identification data on the input screen using the user terminal,
The protection cancellation of the signature surrogate server is performed using the personal identification data of the user input via the input screen,
The protection cancellation of the signature surrogate server does not execute the protection cancellation processing of the primary protection certificate data when the validity of the user is not authenticated.
The electronic signature proxy method according to claim 8. The signature proxy server is
Authenticates the validity of the electronic certificate obtained by the protection cancellation using the public key of the certificate authority,
When it is determined that the electronic certificate is invalid, the user terminal is notified that the electronic certificate included in the secondary protection certificate data is invalid.
The electronic signature proxy method according to claim 7, further comprising: On the first computer,
The primary protection certificate data issued by the certificate authority and including the electronic certificate protected by the user's personal identification data and the private key is encrypted by a second computer different from the first computer. the second primary protection certificate data obtained by being encrypted, and secondary data receiving means for receiving from the user terminal of the user by,
Decryption processing means for obtaining the primary protection certificate data by decrypting the secondary protection certificate data received by the secondary data receiving means by a decryption method corresponding to the predetermined encryption method;
Data holding means for holding the primary protection certificate data acquired by the decryption processing means;
Protection release means for acquiring personal identification data of the user and using the personal identification data to release protection of the primary protection certificate data held by the data holding means by the personal identification data;
An electronic signature means for giving an electronic signature to the data to be signed generated based on the data sent from the user terminal, using the secret key obtained by the protection release processing of the protection release means;
A program that realizes

Images