JP6533542B2 - Secret key replication system, terminal and secret key replication method - Google Patents

Description

  The present invention relates to a terminal-to-terminal copy of a secret key used for user authentication, and relates to a secret key copy system, a terminal, and a secret key copy method in consideration of an identity confirmation level of a terminal owner.

Users of the Internet use various web services such as online banking and internet shopping using a plurality of terminals such as personal computers, smartphones and tablet terminals. When using a Web service, user authentication is required, and it is common to use a user ID (IDentifier) and a password.
However, frequently set passwords are guessed, passwords are leaked from a Web service server due to unauthorized access, etc., and cases of password theft often occur.

As a user authentication technology replacing the password authentication, there is a web service user authentication technology called FIDO (Fast Identity Online) using public key encryption. In FIDO, the terminal owned by the user generates a pair of a secret key and a public key of public key encryption, stores the secret key in the terminal, and registers the public key in the Web service server as a step before user authentication. . When registering the public key, the Web service server performs identity verification of the user.
When the web service server authenticates the user, (1) the web service server generates a random number and sends it to the terminal, and (2) the terminal uses the secret key to sign the random number and sends it to the web service server. (3) The web service server verifies the signature. If the signature verification in (3) is successful, the user authentication is successful, and the user can use the Web service.

  FIDO requires that the secret key be stored in the secure area of the terminal so that the secret key can not be taken out or used illegally. By storing the secret key in the secure area, it can be prevented from being stolen, used by anyone other than a legitimate secret key holder, or accessed from a malicious program such as malware. However, if the secret key can not be extracted from the secure area at all, there arises a problem that the authorized user can not access the Web service server from another terminal. That is, Web services can not be used from multiple terminals.

  FIG. 13 is a diagram for describing a problem that occurs when using a plurality of FIDO compatible terminals. FIG. 13A is a diagram for explaining a problem that occurs when using a general FIDO terminal. The user accesses the service A server 98 and the service B server 99 using the terminal X 91. The public key A 981 is registered in the service A server 98 and the public key B 991 is registered in the service B server 99. A secret key A 912 paired with the public key A 981 and a secret key B 913 paired with the public key B 991 are stored in the secure area 911 of the terminal X 91.

  In order for the user to access the service A server 98 from the new terminal Y 92, it is necessary to store the secret key A 912 in the secure area 921 of the terminal Y 92. However, since the secret key A 912 can not be extracted from the secure area 911 of the terminal X 91 (cannot be copied to the secure area 921 of the terminal Y 92), the terminal Y 92 can not perform user authentication. The same applies to the service B server 99. In order for the user to access the service A server 98 and the service B server 99 from the terminal Y 92, it is necessary to re-register the public key from the terminal Y 92 to the service A server 98 and the service B server 99. Re-registration is necessary for the number of services (the number of servers) × the number of terminals, and it becomes a great effort for the user including identification of the user.

  As a technology for solving the problem of re-registration when introducing a new terminal (using a plurality of terminals), there is a technology described in Non-Patent Document 1 which has introduced a certificate for certifying the owner of the terminal. FIG. 13B is a diagram for describing private key replication between secure areas using an owner certificate (user certificate described in Non-Patent Document 1). The terminal XX 93 has a secure area 931 corresponding to the owner certificate, and the terminal YY 94 has a secure area 941 corresponding to the owner certificate. After confirming the identity of the owner of the terminal XX93, the terminal management server 95 issues an owner certificate X934. The issued owner certificate X 934 is stored in the secure area 931 of the terminal XX 93. The same applies to the terminal YY 94, and the owner certificate Y 944 issued from the terminal management server 95 is stored in the secure area 941.

  When the owner shown in the owner certificate X 934 matches the owner shown in the owner certificate Y 944, the secure area 931 of the terminal XX 93 to the secure area 941 of the terminal YY 94 have the secret key A 912 and the secret key B 913 It is replicated. The user can authenticate from the terminal YY 94 to the service A server A 98 and the service B server 99 using the copied secret key A 942 and the secret key B 943. Private key replication using an owner certificate eliminates the need for re-registration of public keys.

Keisuke Ogata, Yoshihiko Omori, Takao Yamashita, Tetsuya Iwata, "A Study on Maintenance and Management of Secret Key of Authentication Method Using Asymmetric Key", IEICE Communications Society Conference, B-7-9, 2016.

  The reliability of FIDO user authentication depends on the certainty of identity verification of the registration procedure and the security of the private key. The certainty (level) of the required personal identification depends on the service provided by the Web service server. For example, in the case of a financial service, personal identification is performed face-to-face using public identification information such as a driver's license. On the other hand, in SNS (Social Networking Service), the ownership confirmation of the e-mail address is performed, and the identity confirmation is made. The level of identification required depends on the policy of the service provider. In addition, with regard to the level of identity verification to confirm that the owner of the terminal that is the copy destination of the private key is the same as the owner of the origination terminal, there is an identity confirmation level equal to or higher than public key registration. It is considered to be required. That is, the level of identity verification when issuing an owner certificate (see symbols 934 and 944 in FIG. 13B) that is the basis of the private key copy permission is equivalent to identity confirmation of the registration procedure with the Web service server. It is considered that the above is required.

  On the other hand, the higher the level of identity verification, the greater the burden on the user and the lower the degree of acceptance. Although the level (certainty) of the in-person identification is higher than the in-person identification, the burden is on the user. In addition, from the heightened awareness of the protection of personal information, it is considered that users are unwilling to disclose unnecessary identification information, and it is not acceptable to present a driver's license for SNS registration. As a result, private key replication based on an owner certificate issued by a single identity verification method may not be able to cope with replication of user authentication private keys of various services.

  The present invention solves the above-mentioned problems, and it is possible to issue an owner certificate by a plurality of personal verification services having different personal verification levels, and to enable private key replication between terminals according to the personal verification level. It is an object of the present invention to provide a secret key duplicating system, a terminal and a secret key duplicating method.

As means for solving the above problems, the invention according to claim 1 relates to a terminal capable of storing an authentication secret key which is a secret key used for authentication, and an owner of the terminal owns the terminal. And a certificate issuing server that issues an owner certificate to be certified, which is connected via a communication network and copies the secret key for authentication between the two terminals, The document issuing server performs identity verification of the owner of the terminal according to a predetermined procedure, and identifies the identity verification level indicating the level of certainty of the identity verification, identification information of the owner, and the public key of the terminal. The terminal includes a certificate issuing unit that issues the owner certificate including the identification information of the certificate issuing server to the terminal, and the terminal stores the owner certificate issued to itself. Certificate storage area And includes a storage unit having a key storage area for storing in association with identification level required to the owner of the a copy destination terminal authentication private key destination terminal to the authentication private key, the owner The owner certificate whose identification information, the identity verification level, and the identification information of the certificate issuing server are respectively identical to the owner certificate of the copy destination terminal is stored in the certificate storage area If the authentication secret key associated with the identity verification level included in the owner certificate is extracted from the key storage area, the public key included in the owner certificate of the copy destination terminal is used. a secret key duplication system comprising a benzalkonium be transmitted to the copy destination terminal to encrypt.

As means for solving the above problems, the invention according to claim 5 is characterized in that a terminal capable of storing an authentication secret key which is a secret key used for authentication, and that the owner of the terminal owns the terminal A terminal of a secret key duplicating system connected to a certificate issuing server for issuing an certifying owner certificate and connected via a communication network to duplicate the secret key for authentication between two terminals; The certificate issuing server performs identity verification of the owner of the terminal according to a predetermined procedure, and shows an identity verification level indicating the level of certainty of the identity verification, identification information of the owner, and disclosure of the terminal A certificate storage area for storing the owner certificate issued to the terminal including a key and identification information of the certificate issuing server, and a copy which is a terminal to which the authentication private key is copied Destination terminal A storage unit having a key storage area for storing in association with identification level required for the authentication private key's identification information of the owner, and the identification level, identification information of the certificate issuing server When the owner certificate, which is identical to the owner certificate of the copy destination terminal, is stored in the certificate storage area, the owner certificate is associated with the identity verification level included in the owner certificate wherein the authentication private key extracted from the key storage area, in the terminal, wherein the benzalkonium be transmitted encrypted with the public key included in the owner certificate of the destination terminal to the destination terminal was is there.

  As means for solving the above-mentioned problems, the invention according to claim 6 is a terminal capable of storing an authentication secret key which is a secret key used for authentication, and an owner of the terminal owns the terminal. A secret key duplicating method of a secret key duplicating system which is connected via a communication network with a certificate issuing server that issues an owner certificate to certify, and duplicates the authentication secret key between two terminals. The certificate issuing server performs identity verification of the owner of the terminal according to a predetermined procedure, and shows an identity verification level indicating the level of certainty of the identity verification, identification information of the owner, and the terminal Performing a certificate issuing step of issuing the owner certificate including the public key of the certificate issuing server and the identification information of the certificate issuing server to the terminal, and the terminal Certificate A storage having a certificate storage area for storing, and a key storage area for storing an authentication level required for the owner of a copy destination terminal that is a copy destination terminal of the authentication private key in association with the authentication private key The owner certificate, wherein the identification information of the owner, the identity verification level, and the identification information of the certificate issuing server are respectively identical to the owner certificate of the copy destination terminal When the document is stored in the certificate storage area, the authentication secret key associated with the identity verification level included in the owner certificate is extracted from the key storage area, and the possession of the copy destination terminal is A secret key duplicating method characterized in that a key duplicating step of enciphering with a public key included in a party certificate and sending it to the duplicating destination terminal is executed.

  According to the above configuration, only the terminal that has issued the owner certificate including the owner of the owner certificate issued to the terminal itself, the identity verification level, and the certificate issuing server (identification service server) The authentication secret key associated with the identity verification level can be duplicated. Conversely, it is possible to prevent copying of the private key to a terminal for which such an owner certificate has not been issued. Further, even at the terminal where the owner certificate has been issued, it is possible to prevent the duplication of the authentication private key whose associated user verification level does not match.

  As means for solving the above problems, according to the invention as claimed in claim 2, the secret key duplicating system is connected to the terminal via the communication network, and is a public key for authentication paired with the secret key for authentication And a Web service server that authenticates the owner by using the Web service server, and an identity confirmation level associated with the authentication secret key stored in the key storage area is specified by the Web service server. The secret key duplicating system according to claim 1.

  According to the above configuration, the Web service server to which authentication is performed using the authentication secret key can be specified by the authentication level associated with the authentication secret key. That is, it is possible to restrict the authentication secret key to be replicated only to the terminal of the owner of the user verification level designated by the Web service server.

  As means for solving the above problems, the Web service server is a digital signature generated using a secret key paired with a public key included in the owner certificate. Request the digital signature for the data generated by itself from the terminal, and verify the digital signature generated by the terminal using the public key included in the owner certificate, and then the authentication public key 3. The private key duplicating system according to claim 2, wherein the terminal is used as an authentication public key of the terminal.

  According to the above configuration, it is possible to restrict the terminals accessing the Web service server to only the terminals for which the owner certificate has been issued, and to maintain the identity verification level of the terminal owner at a predetermined level or higher.

As means for solving the above-mentioned problems, the invention according to claim 4 is characterized in that the identity verification level has a hierarchical relationship due to the degree of certainty of identity verification performed by the certificate issuing server, and the terminal is owned The owner certificate whose identification information of the person, the identity verification level, and the identification information of the certificate issuing server are respectively identical to the owner certificate of the copy destination terminal in the certificate storage area When stored, the authentication secret key associated with the user authentication level included in the owner certificate or a lower user authentication level is extracted from the key storage area, and the possession of the copy destination terminal 2. The secret key duplicating system according to claim 1, wherein the secret key duplicating system is encrypted with a public key included in the certificate of the party and transmitted to the copy destination terminal.

  According to the above configuration, only at the terminal at which the owner certificate has been issued, which includes the owner certificate of the owner certificate issued to the terminal itself, the user verification level, and the certificate issuing server, the user verification level or The authentication private key associated with the lower level of identity verification is replicated. For a high-level owner-confirmed terminal, the authentication secret key associated with a level lower than the level of the user confirmation can also be copied simultaneously, and it takes time for key replication and owner certificate issuance. It can be reduced.

  According to the present invention, a private key duplication system capable of issuing owner certificates by a plurality of personal verification services having different personal verification levels and enabling private key replication between terminals according to the personal verification levels, a terminal And a private key replication method can be provided.

It is a figure which illustrates the whole structure of the secret key duplication system concerning this embodiment. It is a functional block diagram which illustrates the composition of the terminal concerning this embodiment. It is a figure which illustrates the data composition of the key management table memorized by the key storage area of the terminal concerning this embodiment. It is a figure which illustrates the data composition of the certificate management table memorized by the certificate storage area of the terminal concerning this embodiment. It is a functional block diagram which illustrates the composition of the personal verification service server concerning this embodiment. It is a functional block diagram which illustrates the composition of the Web service server concerning this embodiment. It is a figure which illustrates the data composition of the owner certificate concerning this embodiment. It is an example of the personal verification level table | surface of the personal verification level guarantee service which concerns on this embodiment. It is a sequence diagram which illustrates the issue processing of the owner certificate concerning this embodiment. It is a sequence diagram which illustrates the public key registration process to the web service server which concerns on this embodiment. It is a sequence diagram which illustrates the secret key copy processing concerning this embodiment. It is a flowchart which illustrates the certificate matching process which concerns on this embodiment. It is a figure for demonstrating the problem which arises when using the terminal of FIDO corresponding | compatible.

Hereinafter, a secret key duplicating system according to an embodiment of the present invention will be described with reference to the drawings.
«Overall configuration of secret key replication system»
FIG. 1 is a diagram illustrating the overall configuration of a secret key duplicating system 1 according to the present embodiment. The secret key replication system 1 includes a Web service A server 30a, a Web service B server 30b, a terminal 10a, a terminal 10b, an identity verification service X server 20a, an identity verification service Y server 20b, an identity verification level guarantee service It consists of 28 and. When there is no need to distinguish between the Web service A server 30a and the Web service B server 30b, the Web service server 30 is described. The terminal 10a and the terminal 10b are described as a terminal 10 when it is not necessary to distinguish them in particular. If it is not necessary to distinguish between the person verification service X server 20a and the person verification service Y server 20b, it is referred to as a person verification service server 20.

The Web service server 30, the terminal 10, and the personal identification service server 20 are connected by a network (not shown) and can communicate with each other.
Although two web service servers 30 are illustrated, the number of web service servers 30 is not limited thereto, and may be one or three or more. Not only two but also one or three or more personal identification service servers 20 may be provided. The terminal 10 is two or more.

  After verifying the identity of the owner (user) of the terminal 10a, the identity verification service X server 20a issues an owner certificate 12a to the terminal 10a (step S701). Similarly, the personal verification service X server 20a issues an owner certificate 12b for the terminal 10b owned by the same user (step S702). The issuing process will be described later with reference to FIG.

  Subsequently, the terminal 10a generates a key pair, stores the secret key 11a locally, and registers the public key 39 in the Web service A server 30a (step S703). When registering, the Web service A server 30a performs identity verification of the owner of the terminal 10a. The registration process of the public key 39 including the identity verification will be described later with reference to FIG. Thereafter, the terminal 10a can perform user authentication using the secret key 11a and use the service of the Web service A server 30a (step S704).

When the owner of the terminal 10a obtains a new terminal 10b, the terminal 10a having registered the public key 39 duplicates the secret key 11a from the terminal 10b to the terminal 10b, and the secret key 11b is stored in the terminal 10b (step S705). Thereafter, user authentication can be performed also from the terminal 10b using the secret key 11b, and the service of the Web service A server 30a can be used (step S706).
In the above description, public key registration (step S703) is performed after the owner certificate issuance (step S701), but the order may be reversed.

  Whether the personal verification level guarantee service 28 has published the personal verification level table 29 (see FIG. 8 described later), and does the personal verification performed by the personal verification service server 20 reach a level in the personal verification level table 29? Examine. The examination is not necessarily conducted through the network. An auditor of the identity verification level guarantee service 28 may visit the operation site of the identity verification service server 20 to examine whether the procedure for identity verification is appropriate and may authenticate the identity verification service provided by the identity verification service server 20. . That is, the authenticity of the identity verification level of the identity verification service server 20 is authenticated by the identity verification level guarantee service 28 as a third party organization.

  The Web service server 30 can specify the identity verification level of the owner certificate required for the private key replication. For example, a level equivalent to the level of identity verification performed when the web service server 30 registers a public key can be obtained. The identity verification level of the Web service A server 30a is level 5, and the private key replication based on the owner certificate issued by the identity authentication service Y server 20b at level 3 is not permitted, and the private key can not be replicated. The process of copying the secret key by the owner certificate issued by the person verification service server of the level recognized by the Web service server 30 will be described with reference to FIG. 11 described later.

«Configuration of terminal»
FIG. 2 is a functional block diagram illustrating the configuration of the terminal 10 according to the present embodiment. The terminal 10 includes a control unit 161, a storage unit 162, an input / output unit 163, and the like. The storage unit 162 is realized by a hard disk, a random access memory (RAM), or the like, and stores an operating system (OS), an application program, and data. The input / output unit 163 is configured of a NIC (Network Interface Card) or the like, and transmits / receives communication data with the person verification service server 20 or the Web service server 30, or communicates with a biometric authentication device (not shown) Do. The control unit 161 is realized by a CPU (Central Processing Unit), causes the terminal 10 to function by executing an OS or an application program, and executes processing shown in FIGS. 9 to 12 described later.

  The terminal 10 logically comprises a normal area 13 and a secure area 14. The normal area 13 is an environment in which a general application program including the Web service utilization application 131 is executed. The secure area 14 is an execution environment isolated from general application programs, and data and calculation processing are protected. The program is executed in the privileged mode of the CPU or OS, and the program of the secure area 14 can be called or accessed only by a specific program or a specific procedure. The secure area 14 may be realized on an OS different from the OS of the normal area 13 using virtualization technology.

In the secure area 14, the key management secure application 141 and the certificate management secure application 142 are executed by the control unit 161 . The secure area 14 also includes a key storage area 143 and a certificate storage area 144. The key management secure application 141 has functions such as key generation and encryption, decryption, signature generation, and signature verification, and an owner certificate issuance process described later by the control unit 161 that executes the key management secure application 141 (see FIG. 9), public key registration processing to the Web service server 30 (see FIG. 10), and private key copying processing (see FIG. 11). Certificate management secure application 142 has a management function of the owner certificate, the control unit 161 to perform certificate management secure application 142 performs owner certificate issuance processing.

  The key storage area 143 is an area for storing a secret key and a public key used for authentication when accessing the Web service server 30 and a secret key copying process, and includes a key management table 146 (see FIG. 3 described later).

  FIG. 3 is a view exemplifying the data configuration of the key management table 146 stored in the key storage area 143 of the terminal 10 according to the present embodiment. The key management table 146 is, for example, data in a table format, and includes a sequence of a key ID 1461, a secret key 1462, a public key 1463, a site 1464, and an identity verification level 1465. One row (record) includes a public key cryptosystem private key and a public key pair and their associated information.

The key ID 1461 is identification information of a pair of the secret key 1462 and the public key 1463.
The secret key 1462 is a secret key used for authentication when accessing the Web service server 30, or a secret key copy process.
The public key 1463 is a public key registered in the Web service server 30 or a public key included in an owner certificate. The private key corresponding to the public key contained in the owner certificate is used for the private key copying process.

  The site 1464 is address information (URL (Uniform Resource Locator)) of the Web service server 30 when the record is information of a key used for authentication when accessing the Web service server 30. When the record is information on the public key and its secret key included in the owner certificate, the information on the site 1464 is invalid. The second record whose key ID 1461 is "0043" is a record of the public key and its secret key included in the owner certificate, and the site 1464 is "-".

When the person confirmation level 1465 is information of a key used for authentication when accessing the Web service server 30, the possession of the copy destination terminal required when the Web service server 30 copies the secret key Identification level of the person who
When the record is the information of the public key and its secret key included in the owner certificate, the information of the identity verification level 1465 is invalid. The second record whose key ID 1461 is "0043" is a record of the public key and its secret key included in the owner certificate, and the identity verification level 1465 is "-".

Returning to FIG. 2, the certificate storage area 144 is an area for storing an owner certificate, and includes a certificate management table 147 (see FIG. 4 described later).
FIG. 4 is a diagram illustrating the data configuration of the certificate management table 147 stored in the certificate storage area 144 of the terminal 10 according to the present embodiment. The certificate management table 147 is, for example, data in the form of a table, and includes a row of a certificate ID 1471, an owner certificate 1472 and a key ID 1473. One record includes information of one owner certificate.

The certificate ID 1471 is identification information of the owner certificate of the record.
The owner certificate 1472 is an owner certificate issued by the principal confirmation service server 20.
The key ID 1473 is the key ID 1461 of the key management table 146 including the public key included in the owner certificate of the record. By using the key ID 1461, the secret key 1462 stored in the key management table 146 can be referenced.

<< Configuration of Identity Verification Service Server >>
FIG. 5 is a functional block diagram illustrating the configuration of the person verification service server (certificate issuing server) 20 according to the present embodiment. The personal verification service server 20 includes a control unit 21, a storage unit 25, and an input / output unit 27.
The control unit 21 includes a CPU and executes an owner certificate issuance process (see FIG. 9 described later). The control unit 21 includes an identity verification unit 22 and a certificate issuing unit 23.

  In the owner certificate issuance process, the identity verification unit 22 verifies the identity of the owner of the terminal 10 that has requested the issue. The details of the identity verification will be described later with reference to FIG. The certificate issuing unit 23 generates an owner certificate 50 (see FIG. 7 described later).

The storage unit 25 is configured by a hard disk or a RAM, and stores programs and data required for the process of issuing an owner certificate. The storage unit 25 stores a certificate signing key 26 used to generate a digital signature to be attached to an owner certificate. Certificate signing key 26 is protected at a high security level to prevent unauthorized access and use.
The input / output unit 27 includes a NIC or the like, and transmits and receives communication data with the terminal 10.

<< Configuration of Web Service Server >>
FIG. 6 is a functional block diagram illustrating the configuration of the Web service server 30 according to the present embodiment. The web service server 30 includes a control unit 31, a storage unit 32, and an input / output unit 35. The control unit 31 includes a CPU, and provides a web service to the terminal 10 by executing an OS or a web service application program. The control unit 31 includes a public key registration unit 36 that executes a public key registration process (see FIG. 10 described later).

The storage unit 32 is realized by a hard disk, a RAM, and the like, and stores an application program and data that provide an OS and a web service. The storage unit 32 includes a key storage area 33 and a key policy 34. In the key storage area 33, a public key used for user authentication is stored in association with user identification information. The public key is generated by the terminal 10 in the public key registration process and transmitted to the Web service server 30. The key policy 34 is information on storage of a secret key used for authentication requested of the terminal 10 by the Web service server 30 and protection strength at the time of use, and includes an identity verification level.
The input / output unit 35 includes an NIC or the like, and transmits and receives communication data with the terminal 10.

«Data configuration of owner certificate»
FIG. 7 is a view exemplifying the data configuration of the owner certificate 50 according to the present embodiment. The owner certificate 50 includes an issuer 51, a serial number 52, an owner 53, a terminal public key 54, and an issuer signature 55.

  The issuer 51 is identification information of the identity verification service that issues the owner certificate 50, and is represented by the name of the identity confirmation service indicated by O (Organization Name, organization name) and the OU (Organizational Unit Name, department name). And the indicated identity verification level. O may be the name of a business that provides an identity verification service, or may be information that can identify the identity confirmation service server 20.

The serial number 52 is a serial number of the owner certificate 50 assigned by the person verification service (the person verification service server 20) who is the issuer of the owner certificate 50. By referring to the serial number 52, the owner certificate issued by the personal identification service can be uniquely identified.
The owner 53 is identification information of the owner of the terminal 10, and includes the belonging organization name of the owner indicated by O and the name of the owner indicated by CN (Common Name, common name). Instead of the organization name or the name, information that can identify a mail address or other user may be used.

The terminal public key 54 is a public key of public key encryption used for private key replication. The private key to be copied is encrypted with this terminal public key 54.
The issuer signature 55 is a digital signature for the owner certificate 50. The terminal 10 can confirm that the owner certificate 50 is the genuine owner certificate 50 issued by the principal confirmation service server 20 by verifying the issuer signature 55.

  The identity verification level is included in the owner certificate 50 as an OU in the issuer 51. The identity verification level is not an OU in the issuer 51, but as a component of the owner certificate 50 different from the issuer 51, the serial number 52, the owner 53, the terminal public key 54, and the issuer signature 55 It may be included.

«Identification level table»
FIG. 8 is an example of the user confirmation level table 29 of the user confirmation level guarantee service 28 according to the present embodiment. The personal verification level table 29 shows the certainty (level) of the personal verification level performed by the personal verification unit 22 (see FIG. 5) of the personal verification service server 20. Depending on the level, the person may intervene to confirm the identity.
The personal verification level table 29 is tabular data including a row of the personal verification level 291 and the verification information 292 used for the personal verification. The method of personal identification is a simple confirmation method that is easy for the owner of the terminal 10 to accept, but low in the reliability (certainty, level) of the confirmation, and conversely, it is a confirmation method that takes time and effort. The owner is bothersome, but there is a high degree of confidence in the confirmation.

The self-reporting of Level 1 means that self-reported information is confirmation information, and an identity verification method using the owner's identification information included in the certificate issuance request as it is to the owner 53 of the owner certificate 50 It is. At Level 1, no identity verification is made.
Level 2 self-reporting + e-mail address is the method of performing identity verification by the identity verification service server 20 sending an e-mail to the e-mail address contained in the certificate issuance request and confirming the owner's response to the email. It is. As the response, there are access to the URL included in the transmission mail, transmission of a reply to the transmission mail, and the like to the principal confirmation service server 20.

  In addition, there is a method of confirming using a copy of a public document transmitted by the owner of the level 4 to the personal identification service server 20 or a method of confirming using a public document at the level 5 meeting. There is also a confirmation method such as level 5 which requires manpower which can not be realized only by the processing of the person confirmation service server 20.

«Owner certificate issuance process»
FIG. 9 is a sequence diagram illustrating an issuing process of an owner certificate according to the present embodiment. A process of issuing an owner certificate for the terminal 10, which is executed by the terminal 10 and the person verification service server 20, will be described with reference to FIG. Prior to the owner certificate issuance process, the terminal 10 connects to the principal verification service server 20 via the network. It is desirable that the connection be made by a secure method such as TLS (Transport Layer Security) so that data is not falsified or the communication partner is replaced during communication.

In step S741, the control unit 161 that executes the certificate management secure application 142 of the terminal 10 outputs a key generation request to the key management secure application 141 (control unit 161) .
In step S742, the control unit 161 executing the key management secure application 141 receives the key generation request, and generates a pair of public key and secret key of public key encryption.
In step S743, the public key and the secret key generated by the control unit 161 that executes the key management secure application 141 are stored in the key management table 146 (see FIG. 3) of the key storage area 143. Specifically, the control unit 161 that executes the key management secure application 141 adds one record to the key management table 146, and generates and stores new identification information in the key ID 1461. Next, the control unit 161 that executes the key management secure application 141 stores the generated secret key and the generated public key in the secret key 1462 and the public key 1463 respectively, and the site 1464 and the identity verification level 1465 Store "-".
In step S744, the control unit 161 executing the key management secure application 141 outputs the generated public key and key ID to the certificate management secure application 142 (control unit 161) .
In step S745, the control unit 161 that executes the certificate management secure application 142 receives the public key and the key ID, transmits the public key to the principal confirmation service server 20, and requests issuance of an owner certificate.

In step S746, the certificate issuing unit 23 of the principal confirmation service server 20 receives the public key, and outputs a principal confirmation request to the principal confirmation unit 22.
In step S 747, the identity verification unit 22 verifies the identity of the owner of the terminal 10. The method of identity verification is determined in advance according to the identity verification level of the issued owner certificate, and has been reviewed by the identity verification level guarantee service 28. The identity verification service server 20 obtains genuine identification information of the owner of the terminal 10 through identity verification.
If the personal verification fails, the personal verification unit 22 notifies the certificate issuing unit 23 of the failure, and the certificate issuing unit 23 notifies the terminal 10 of the personal verification failure, and ends the owner certificate issuance process. Thereafter, assuming that the identity verification is successful, the description of the owner certificate issuance process is continued.
In step S 748, the principal confirmation unit 22 outputs the principal confirmation completion to the certificate issuance unit 23.

In step S749, the certificate issuing unit 23 issues an owner certificate 50 (see FIG. 7). The issuer 51 includes identification information of a service provided by the principal confirmation service server 20 and a principal confirmation level of principal confirmation (step S747). The serial number 52 is a serial number for uniquely identifying an owner certificate issued by the principal confirmation service server 20. The owner 53 is identification information of the owner of the terminal 10 obtained by personal identification. The terminal public key 54 is the public key received in step S746. The issuer signature 55 is a digital signature generated for the data of the issuer 51, the serial number 52, the owner 53 and the terminal public key 54 using the certificate signature key 26.
In step S750, the certificate issuing unit 23 transmits the owner certificate to the terminal 10.

In step S 751, the control unit 161 that executes the certificate management secure application 142 receives the owner certificate and stores it in the certificate management table 147 (see FIG. 4) of the certificate storage area 144. Specifically, the control unit 161 that executes the certificate management secure application 142 adds one record to the certificate management table 147, and generates and stores new identification information in the certificate ID 1471. Next, the control unit 161 that executes the certificate management secure application 142 stores the received owner certificate in the owner certificate 1472, and the key ID 1473 is stored in the key ID 1461 of the key management table 146 received in step S 745. Store the stored key identification information.

  This completes the owner certificate issuance process. At this stage, the terminal 10 stores the owner certificate in the certificate management table 147, and stores in the key management table 146 a secret key paired with the public key of the owner certificate.

«Public key registration process»
FIG. 10 is a sequence diagram illustrating public key registration processing to the Web service server 30 according to the present embodiment. The public key registration process to the web service server 30 executed by the terminal 10 and the web service server 30 will be described with reference to FIG. Prior to the public key registration process, the terminal 10 connects to the Web service server 30 via the network. It is desirable that the connection be made in a secure manner such as TLS so that the data is not tampered with in the middle of communication or the communication partner is not replaced.

In step S721, the control unit 161 that executes the web service use application 131 of the terminal 10 transmits a public key registration request to the web service server 30.
In step S722, the public key registration unit 36 of the Web service server 30 receives the public key registration request, and accepts the registration request.
In step S723, the public key registration unit 36 transmits the key policy 34 to the terminal 10.
In step S 724, the control unit 161 that executes the web service use application 131 receives the key policy, and the key generation request, the key policy, and the address (URL) of the web service server 30 are stored in the key management secure application 141 (control unit 161). Output to

In step S 725, the control unit 161 that executes the key management secure application 141 receives the key generation request, the key policy, and the URL, and generates a pair of public key and secret key of public key encryption.
In step S 726, the public key and secret key generated by the control unit 161 that executes the key management secure application 141 , the identity verification level in the key policy, and the URL are stored in the key management table 146 (see FIG. 3) of the key storage area 143. Store. Specifically, the control unit 161 that executes the key management secure application 141 adds one record to the key management table 146, and generates and stores new identification information in the key ID 1461. Next, the control unit 161 that executes the key management secure application 141 receives the secret key generated, the generated public key, the received URL, and the secret key 1462, the public key 1463, the site 1464 and the identity verification level 1465, respectively. Stores the identity verification level in the key policy.

In step S 727, the control unit 161 executing the key management secure application 141 outputs the generated public key to the Web service use application 131 (control unit 161) .
In step S 728, the control unit 161 that executes the web service use application 131 receives the public key and transmits it to the web service server 30.

In step S 729, the public key registration unit 36 receives the public key, and performs identity verification of the user of the terminal 10. As the method of identity verification, there are various methods as described in FIG. 8, and the identity verification method does not necessarily match the identity confirmation level included in the key policy 34. Through identity verification, the public key is associated with the user (user identification information).
If the personal identification fails, the public key registration unit 36 notifies the terminal 10 of the failure and ends the public key registration process. Thereafter, assuming that the identity verification is successful, the description of the public key registration process is continued.

In step S730, the public key registration unit 36 stores the public key in the key storage area 33 in association with the user identification information confirmed in the person identification (step S729).
In step S731, the public key registration unit 36 transmits the registration completion to the terminal 10.
This is the end of the public key registration process. At this stage, the Web service server 30 stores the user's public key in the key storage area 33, and the terminal 10 stores the secret key and the identification level in the key management table 146.

«Secret key replication processing»
FIG. 11 is a sequence diagram illustrating a secret key duplication process according to the present embodiment. A process of copying the secret key in the key storage area 143a in the secure area of the terminal 10a (replication source) to the key storage area 143b in the secure area of the terminal 10b (replication destination) will be described with reference to FIG. Prior to the secret key replication process, the terminal 10a and the terminal 10b are connected via a network, cable connection, or near field communication such as Bluetooth (registered trademark). It is desirable that the connection be made in a secure manner such as TLS so that the data is not tampered with in the middle of communication or the communication partner is not replaced.

In step S 761, the control unit 161 that executes the key management secure application 141 b of the copy destination terminal 10 b requests the certificate management secure application 142 b (control unit 161) for all the owner certificates held by the terminal 10 b.
In step S762, the control unit 161 executing the certificate management secure application 142b acquires all the owner certificates from the certificate management table 147 in the certificate storage area 144b.
In step S763, the control unit 161 executing the certificate management secure application 142b outputs all the owner certificates to the key management secure application 141b (control unit 161) .
In step S764, the control unit 161 executing the key management secure application 141b transmits a copy request together with the all-owners certificate to the copy source terminal 10a.

In step S765, the control unit 161 executing the key management secure application 141a of the copy source terminal 10a receives the copy request and the all-owner certificate of the terminal 10b, and the certificate management secure application 142a (control unit 161) Request all owner certificates held by the terminal 10a.
In step S766, the control unit 161 executing the certificate management secure application 142a acquires all owner certificates from the certificate management table 147 in the certificate storage area 144a.
In step S767, the control unit 161 executing the certificate management secure application 142a outputs all the owner certificates to the key management secure application 141a (control unit 161) .

In step S768, the control unit 161 executing the key management secure application 141a receives all the owner certificates of the terminal 10a which is the self, and then repeats the processing of steps S769 to S771 for each owner certificate of the terminal 10b. .
In step S769, the control unit 161 that executes the key management secure application 141a executes a certificate matching process (see FIG. 12 described later). If the control unit 161 that executes the key management secure application 141a fails in the certificate matching process, the processing proceeds to step S772. Hereinafter, it will be described that the control unit 161 executing the key management secure application 141a has succeeded in the certificate matching process.

In step S 770, the control unit 161 that executes the key management secure application 141 a acquires the secret key, the public key, and the site that match the identity verification level of the owner certificate that has been successfully matched. Specifically, the control unit 161 that executes the key management secure application 141a has a record having a principal confirmation level 1465 that matches the principal confirmation level of the owner certificate that has been successfully matched out of the key management table 146 of the key storage area 143a. To obtain the secret key 1462, the public key 1463 and the site 1464 of the record. If it can not be acquired, that is, if there is no private key that matches the identity verification level of the owner certificate that has been successfully matched, the processing proceeds to step S772.

In step S771, the owner certificate of the terminal 10b in which the control unit 161 executing the key management secure application 141a successfully matched the secret key, the public key, and the site (hereinafter also referred to as a secret key and the like) acquired in step S770. Encryption is performed using the terminal public key 54 (see FIG. 7). For encryption, a key of the common key encryption is generated at random, the secret key and the like are encrypted with this key, and this key is encrypted using the terminal public key 54.

In step S772, if the control unit 161 executing the key management secure application 141a finishes the processing in steps S769 to S771 for all the owner certificates of the terminal 10b, the process proceeds to the next step S773. If not completed, the control unit 161 executing the key management secure application 141a executes the processing of steps S769 to S771 on the next owner certificate of the terminal 10b.
In step S773, the control unit 161 executing the key management secure application 141a adds the identification information (certificate ID) of the owner certificate including the public key used for the encryption, and encrypts the secret key and the like. It transmits to the terminal 10b. When there are a plurality of encrypted secret keys and the like, certificate IDs are respectively assigned to the encrypted secret keys and the like.

In step S774, the control unit 161 that executes the key management secure application 141b receives the encrypted secret key and the like given the certificate ID, and corresponds to the public key of the owner certificate identified by the certificate ID. Private key is acquired from the key storage area 143b. Specifically, the control unit 161 that executes the key management secure application 141b requests the certificate management secure application 142b (control unit 161) to select an owner corresponding to the received certificate ID from the certificate management table 147. The record having the certificate 1472 is retrieved, and the key ID 1473 of the record is acquired. Subsequently, the control unit 161 that executes the key management secure application 141 b acquires the secret key 1462 of the record having the key ID 1461 that matches the key ID 1473 from the key management table 146.
In step S775, the control unit 161 that executes the key management secure application 141b decrypts the encrypted secret key and the like to obtain the secret key, the public key, and the site.

In step S776, the control unit 161 that executes the key management secure application 141b stores the secret key, the public key, and the site in the key management table 146 in the key storage area 143b. Specifically, the control unit 161 executing the key management secure application 141b does nothing if the secret key already exists in the key management table 146, and newly adds it if it does not exist. In order to add a new key, the control unit 161 executing the key management secure application 141b first adds one record to the key management table 146, newly generates and stores the key ID 1461, and the secret obtained by decryption The key, the public key and the site are stored in the secret key 1462, the public key 1463 and the site 1464 respectively. Next, the control unit 161 that executes the key management secure application 141b stores the identity verification level of the owner certificate corresponding to the received certificate ID in the identity confirmation level 1465.
Note that the above certificate ID may be information that can identify the owner certificate or the public key, such as a pair of the person verification service server and the serial number in the owner certificate, or a hash value of the public key. .

Next, details of the certificate matching process (step S769) executed by the control unit 161 that executes the key management secure application 141a will be described. FIG. 12 is a flowchart illustrating the certificate matching process according to the present embodiment. Prior to the certificate matching process, the control unit 161 that executes the key management secure application 141a has obtained the public key of the principal confirmation service server 20.
In step S 791, the control unit 161 that executes the key management secure application 141 a issues the issuer signature 55 of the owner certificate of the terminal 10 b with the public key of the identity verification service server 20 corresponding to the issuer 51 of the owner certificate. Use and verify.
In step S 792, the control unit 161 that executes the key management secure application 141 a determines whether the verification is successful, and if it is successful (Y), the process proceeds to step S 793, and if it is unsuccessful (N), the process proceeds to step S 798.

In step S 793, the control unit 161 that executes the key management secure application 141 a obtains an owner certificate of the terminal 10 a whose owner verification service and the person verification level of the owner certificate of the terminal 10 b are the same. Search within. Specifically, the control unit 161 executing the key management secure application 141a searches for the owner certificate of the terminal 10a including the issuer 51 whose issuer 51 of the owner certificate of the terminal 10b is the same.
In step S794, the control unit 161 that executes the key management secure application 141a determines whether the search is successful, and if it succeeds (Y), it proceeds to step S795, and if it fails (N), it proceeds to step S798.
In step S795, the control unit 161 that executes the key management secure application 141a determines whether the owner 53 of the owner certificate of the terminal 10b matches the owner 53 of the owner certificate of the terminal 10a obtained in step S793. To verify.
In step S796, the control unit 161 executing the key management secure application 141a determines whether the verification is successful, and if it is successful (Y), the process proceeds to step S797, and if it is unsuccessful (N), the process proceeds to step S798.

In step S 797, the control unit 161 that executes the key management secure application 141 a assumes that the certificate matching is successful.
In step S798, the control unit 161 that executes the key management secure application 141a assumes that the certificate matching has failed.
This is the end of the description of the secret key duplication process. At this stage, if there is an owner certificate in which the issuer of the owner certificate (identifying service server 20), the user verification level, and the terminal owner coincide between the terminal 10a and the terminal 10b, the user verification The secret key matching the level can be duplicated.

«Modification»
In the previous embodiment, the authentication secret key of the Web service server 30 that matches the identity verification level of the owner certificate that has succeeded in matching is encrypted (see steps S770 and S711 in FIG. 11), and It is sending. When there is a relationship between the identity verification level and the identity verification level, the authentication secret key of the Web service server 30 of the identity verification level lower than the identity verification level of the owner certificate may be copied. For example, in the case of the identity verification level shown in FIG. 8, if the public document face-to-face confirmation (level 5) is higher than the confirmation on the e-mail address (level 2), the matching of the level 5 owner certificate The authentication secret key for the level 2 Web service server 30 may be copied when the authentication is successful.

Judgment of the hierarchical relationship of the identity verification level, the lower level identity identification level is listed in the owner certificate, and the control unit 161 executing the key management secure application 141 duplicates the secret key that matches any of these levels. To do. Alternatively, a correspondence table representing the hierarchical relationship may be stored in the secure area 14 and the control unit 161 executing the key management secure application 141 may select the secret key to be copied with reference to the correspondence table. . Alternatively, it may be obtained from the authentication level guarantee service 28.

  In the previous embodiment, the identity verification level was included in the issuer 51 of the owner certificate 50 (see FIG. 7). The identity verification level may be included as a separate component from the issuer certificate issuer 51.

  In the previous embodiment, the user of the terminal was one owner of the terminal. By providing the secure area 14 (see FIG. 2) for each user, one terminal may be made available to a plurality of users. In this case, the owner certificate is stored in the secure area dedicated to the user who has successfully identified the user. A user can not access the owner's certificate of another user, and can prevent another user's private key from being copied.

  Although the target of replication in the previous embodiment is a secret key used for authentication of the Web service server 30, it is not necessary to limit to this. It may be other information that only the user can own and access, such as encryption keys used for other purposes and general data such as documents.

  The owner certificate in the previous embodiment is issued after the identity verification of the owner of the terminal is performed, and is stored in the terminal. The owner certificate may be issued after confirming that one or more business persons in charge are the persons in charge of the business, and the certificate may be stored in a terminal owned by the business person in charge. For example, in an online banking service, an authentication secret key for a company account can be replicated to the terminal of a financial representative, and any financial representative can be in charge of accessing the account.

In the previous embodiment, the order of the owner certificate issuance to the terminal 10 and the public key registration to the Web service server 30 was not limited. It may be restricted that public key registration can not be performed only after the owner certificate is issued. By doing this, it is possible to prevent the attacker from stealing the terminal after public key registration and causing the terminal that has stolen the owner certificate whose owner is the attacker to issue and copy the private key.
In addition, public key registration to the Web service server 30 may be restricted, which requires an identity verification level higher than the identity verification level included in the owner certificate. By doing this, it is possible to prevent registration to the Web service server 30 that requires a high level of identity verification, and to prevent access to the advanced Web service server 30 from a terminal 10 that has only completed low-level identity verification. Can enhance the safety of

The Web service server 30 may accept public key registration only from the terminal 10 that has issued an owner certificate of a predetermined identity verification level. Specifically, after the public key registration request is received (step S721 in FIG. 10), the following processing is performed. (1) The Web service server 30 generates a random number, and transmits the random number and the identity verification level requested to the terminal 10. (2) The terminal 10 receives the random number and the identity verification level, and signs the random number using a secret key which is a pair of the public key of the owner certificate corresponding to the identity verification level, and the signature and the ownership The provider certificate is sent to the Web service server 30. (3) The Web service server 30 verifies the owner certificate, verifies the signature, and verifies that the identity verification level of the owner certificate corresponds to a predetermined identity verification level.
By doing this, the Web service server 30 can prevent the public key registration from the terminal 10 which does not reach the user confirmation level determined by itself, and hence the service utilization. As a result, the security of the web service can be improved.

«Effect of secret key replication system»
It is not possible to copy the secret key used in conventional web service authentication between terminals, or restrict copying in consideration of the terminal owner's identity verification level (certainty of identity verification) even if the copy is possible. It was not possible.

  In this embodiment, after the principal confirmation service server 20 performs the principal confirmation of the owner on the terminal 10, an owner certificate including the level of the principal confirmation is issued, and the copy source terminal owns the copy destination terminal. After verifying the certificate of the party, duplicate the private key that matches the identity verification level. As a result, the secret key for authentication of the Web service can be copied only to the terminal satisfying the owner's authentication level required by the Web service provider, and the owner's authentication level requested by the Web service provider is satisfied. It is possible to prevent the duplication of the secret key to the terminal without the It is also possible to prevent copying to a terminal whose owner is different or whose owner is unknown.

  In copying the secret key, the secret key is encrypted in the secure area of the copy source terminal, transmitted to the secure area of the copy destination terminal, and decrypted in the secure area of the copy destination terminal. For this reason, the secret key is encrypted outside the secure area and never leaks. Also, the key used to decrypt the encrypted secret key is secure because it is generated and used in the secure area of the terminal and does not go outside the secure area in any way, and the secure area of the copy destination terminal Otherwise, the encrypted secret key will not be decrypted.

By establishing a hierarchical relationship at the identity verification level, the lower-level identity verification web server-specific authentication secret key can be replicated to the higher-level identity verification terminal, thus reducing the time and effort for duplication. . In addition, if the owner certificate at the higher level of identity verification level is obtained, the owner certificate at the lower level of identity verification level becomes unnecessary, and it is possible to reduce the time and effort for obtaining the owner certificate.
By applying the secret key duplication mechanism of the present invention to other data such as a document, it is possible to duplicate confidential information by limiting it to only a terminal for which the owner's identity has been identified at a predetermined level.

1 private key replication system 10 terminal 13 normal area 14 secure area 141 key management secure application 142 certificate management secure application 143 key storage area 144 certificate storage area 146 key management table 147 certificate management table 161 control section 162 storage section 163 entry Output unit 20 Person verification service server (certificate issuing server)
21 Control Unit 22 Person Verification Unit 23 Certificate Issuing Unit 25 Storage Unit 26 Certificate Signature Key 27 Input / Output Unit 28 Person Confirmation Level Assurance Service 29 Person Confirmation Level Table 30 Web Service Server 31 Control Unit 32 Storage Unit 33 Key Storage Area 34 Key policy 35 I / O unit 36 Public key registration unit 50 Owner certificate 51 Issuer 52 Serial number 53 Owner 54 Terminal public key 55 Issuer signature

Claims (6)

A terminal capable of storing an authentication secret key which is a secret key used for authentication, and a certificate issuing server for issuing an owner certificate for proving that the owner of the terminal owns the terminal A secret key duplicating system connected via the two terminals and duplicating the secret key for authentication between the two terminals,
The certificate issuing server is
The identity verification of the owner of the terminal is performed according to a predetermined procedure, and the identity verification level indicating the certainty level of the identity verification, the identification information of the owner, the public key of the terminal, and the certificate issuing server A certificate issuing unit that issues the owner certificate including the identification information of
The terminal is
A certificate storage area for storing the owner certificate issued to itself, and an authentication level required for the owner of the copy destination terminal which is the copy destination terminal of the authentication private key a storage unit having a key storage area for storing in association with the private key,
The owner certificate whose identification information of the owner, the identity verification level, and the identification information of the certificate issuing server are the same as the owner certificate of the copy destination terminal is the certificate storage When stored in the area, the authentication private key associated with the identity verification level included in the owner certificate is extracted from the key storage area and included in the owner certificate of the copy destination terminal that sends to the copy destination terminal encrypted with the public key
A secret key replication system characterized in that. The secret key replication system further includes a web service server connected to the terminal via the communication network and authenticating the owner using an authentication public key that is paired with the authentication secret key.
The identity verification level associated with the authentication secret key stored in the key storage area is:
The secret key duplicating system according to claim 1, wherein the secret key duplicating system is specified by the web service server. The web service server is
A digital signature generated using a private key paired with a public key included in the owner certificate, the digital signature for data generated by itself is requested to the terminal, and the terminal generates The private key copy according to claim 2, wherein after the digital signature is verified using a public key included in the owner certificate, the authentication public key is used as a public key for authentication of the terminal. system. The identity verification level has a hierarchical relationship due to the degree of certainty of identity verification performed by the certificate issuing server,
The terminal is
The owner certificate whose identification information of the owner, the identity verification level, and the identification information of the certificate issuing server are the same as the owner certificate of the copy destination terminal is the certificate storage When stored in the area, the authentication secret key associated with the user authentication level included in the owner certificate or a lower user authentication level is extracted from the key storage area, and the copy destination terminal 2. The secret key duplicating system according to claim 1, wherein the secret key duplicating system is encrypted with a public key included in the owner certificate and transmitted to the copy destination terminal. A terminal capable of storing an authentication secret key which is a secret key used for authentication, and a certificate issuing server for issuing an owner certificate for proving that the owner of the terminal owns the terminal A terminal of a secret key duplicating system connected via the two terminals to duplicate the authentication secret key between the two terminals;
The certificate issuing server performs the identity verification of the owner of the terminal according to a predetermined procedure, and the identity verification level indicating the certainty level of the identity verification, the identification information of the owner, and the public key of the terminal A certificate storage area for storing the owner certificate issued to the terminal including the identification information of the certificate issuing server, and a copy destination which is a copy destination terminal of the authentication private key a storage unit having a key storage area for storing in association with identification level required to the owner of the terminal to the authentication private key,
The owner certificate whose identification information of the owner, the identity verification level, and the identification information of the certificate issuing server are the same as the owner certificate of the copy destination terminal is the certificate storage When stored in the area, the authentication private key associated with the identity verification level included in the owner certificate is extracted from the key storage area and included in the owner certificate of the copy destination terminal that sends to the copy destination terminal encrypted with the public key
Terminal, wherein a call. A terminal capable of storing an authentication secret key which is a secret key used for authentication, and a certificate issuing server for issuing an owner certificate for proving that the owner of the terminal owns the terminal A secret key duplication method of a secret key duplication system, connected via the two terminals, for duplicating the authentication secret key between two terminals.
The certificate issuing server is
The identity verification of the owner of the terminal is performed according to a predetermined procedure, and the identity verification level indicating the certainty level of the identity verification, the identification information of the owner, the public key of the terminal, and the certificate issuing server Performing a certificate issuing step of issuing the owner certificate including the identification information of
The terminal is
A certificate storage area for storing the owner certificate issued to itself, and an authentication level required for the owner of the copy destination terminal which is the copy destination terminal of the authentication private key A storage unit having a key storage area for storing in association with the secret key;
The owner certificate whose identification information of the owner, the identity verification level, and the identification information of the certificate issuing server are the same as the owner certificate of the copy destination terminal is the certificate storage When stored in the area, the authentication private key associated with the identity verification level included in the owner certificate is extracted from the key storage area and included in the owner certificate of the copy destination terminal A secret key duplicating method characterized by executing a key duplicating step of encrypting with a public key and transmitting it to the duplicating destination terminal.

Images