JPH10282883A - Method for distributing ineffective digital certificate list - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide the distributing method for CRL(ineffective digital certificate list) which can reduce the load of the designing of an application system and the system of an authentication office. SOLUTION: An agent program 10 for a processing procedure for distributing CRL is used. This agent program 10 moves to the authentication office 12 according to its program. Then the latest CRL which is issued by the authentication office 12 is read in an authentication office memory 18. The agent program 10 moves to a terminal memory 24 together with the latest CRL according to its program. Then the CRL of a terminal entity 14 is updated into the latest CRL.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

The present invention relates to ITU-T (International Telecommunication Union Telecommunication Standardization Sector) Recommendation X. 509
A certification authority (Certification Authority; CA) that conforms to the “Directory Authentication Framework”
The present invention relates to a method for distributing a list of revoked digital certificates to an end entity (EE) such as each user.

[0002]

2. Description of the Related Art In open network systems such as the Internet, for example, electronic commerce (Electric
In order to realize a system such as commerce (EC), it is indispensable to perform user authentication (identification) and to secure confidentiality of communication messages and prevent tampering (preservation of legitimacy). . For this reason, an example of an authentication and encryption method using public key encryption is described in the literature:
"Softfair Design, November 1996, pp.
72-89, entitled "Electronic Commerce and Security." In this scheme,
A digital certificate (electronic seal certificate) is used for user authentication. The digital certificate includes the user's public key and guarantees that the key is correctly the user's public key. This digital certificate is in accordance with ITU-T Recommendation X. It is issued by a Certificate Authority conforming to 509.

[0003]

[0003] A certificate authority discards or renews an issued digital certificate for a reason such as a certain expiration date has passed or the encryption of a key pair related to a certificate has been leaked. May be invalid.
Then, the certificate authority performs the above-mentioned ITU-T Recommendation X. A list of revoked digital certificates conforming to C.509 (hereinafter also referred to as an "invalid digital certificate list" and "CR
L ". ) Must be created and managed.
This CRL needs to be distributed to each user.

However, there are the following problems in distributing the CRL.

[0005] First, in order to distribute a CRL from a certificate authority (CA) to an end entity (EE), when designing an application system realized in an open network system, a message or the like for realizing the CRL distribution is used. It is necessary to design a mechanism such as a protocol together.

However, a mechanism for distributing CRLs and an individual application (AP) system are:
Different levels of design. Here, different levels means that in an application system, it is necessary to design a mechanism such as a message and a protocol according to each application system (for example, in an e-commerce application system, a customer, a store, and a financial institution). Therefore, it is necessary to design a message and a protocol for confirming the other party and exchanging money.) 509 CRL
Means that it is necessary to design a mechanism at a more basic level that does not depend on the type of each application system.

[0007] Since the levels are different as described above, designing a mechanism for distributing the CRL imposes a heavy burden on designing an application system.

[0008] The contents of the CRL are updated at regular intervals determined by the certificate authority for operation. On the other hand, CRL
The time interval of the distribution varies depending on the application system. As a result, a time lag occurs between the CRL held by the terminal entity and the latest CRL held by the certificate authority. If the setting of the time interval for updating and distribution is bad, this time lag increases. In that case, CR held by the terminal entity
The reliability of L decreases. For this reason, in order to prevent a decrease in the reliability of the CRL, it is necessary to optimally set the time interval of CRL distribution with respect to the time interval of CRL update.

However, if the CRL distribution mechanism is incorporated in the design of the application system, the CRL distribution time interval cannot be easily changed.
Here, the case where the mechanism of CRL distribution is incorporated is, for example, a case where the CRL is designed to be distributed simultaneously with the exchange of messages according to individual application systems. As a more specific example, there is a case where the electronic commerce is designed so that the remittance from the store to the financial institution is performed and the CRL is distributed at the same time. In this case, if the remittance is performed only once a day (the case where communication costs are desired to be saved, or the remittance frequency is sufficient if the sales of the day are sent to a financial institution once at night) is considered. CRL will be distributed only once a day. And even if the store desires more frequent CRL distribution to more accurately confirm the identity of the customer, it is difficult to change only the CRL distribution time interval later without changing the remittance frequency. .

In order to construct a larger system in which a plurality of certificate authorities (CAs) operate in cooperation with each other, a mechanism for mutually distributing CRLs among the certificate authorities is required. Here, the certificate authorities operate in cooperation with each other when a digital certificate issued by a different certificate authority has a mutual trust agreement. As described above, if the certificate authorities operate in cooperation with each other, the users of the terminal entities, each of which has been authenticated (identified) by a different certificate authority, can trust each other. On the other hand, when the certificate authorities do not operate in cooperation with each other, the users of the terminal entities to which digital certificates are assigned from different certificate authorities cannot usually trust the digital certificate of the other party.

However, in order to incorporate a CRL distribution mechanism from another certificate authority into a system in which one certificate authority is already operating, it is necessary to greatly change the system design. For this reason, operating a plurality of certificate authorities in cooperation with each other later places a heavy burden on the system design.

[0012] Therefore, it has been desired to realize a new CRL distribution method that can reduce the design load of an application system and a certificate authority system.

[0013]

Accordingly, the inventor of the present application has made various studies, and as a result, designed a mechanism for distributing a revoked digital certificate list (CRL) to an application system or a certificate authority system itself. Instead of using the agent program, a processing procedure for distributing the CRL is used.

[First Method of Distributing the Invalid Digital Certificate List] According to the first method of distributing the invalid digital certificate list (CRL) of the present invention, it is stored in the storage device (terminal memory) of the computer of the terminal entity. , CR
The agent program in which the processing procedure for distributing L is programmed is stored, and the central processing unit (terminal CPU) of the computer of the terminal entity stores
By activating the agent program and executing the agent program by the terminal CPU, the agent program is stored in the storage device (certificate authority memory) of the computer of the certificate authority, and the central processing unit (CPU of the certificate authority) of the computer of the certificate authority. By executing the agent program, the latest CRL issued by the certificate authority is stored in a memory area of the certificate authority memory used by the agent program, and after a certain period of time, the agent program is stored in the memory area. Store in the end memory together with the latest CRL stored in the area,
By executing the agent program by the terminal CPU, the CRL stored in the terminal memory is updated to the latest CRL.

As described above, according to the first invalid digital certificate distribution method of the present invention, the agent program in which the processing procedure for distributing the CRL is programmed is used.

According to the first method of distributing a list of invalid digital certificates, when distributing a CRL,
First, the agent program stored in the terminal memory is activated by the terminal CPU. That is, terminal C
The PU starts the execution of the agent program.

Next, by executing the agent program by the terminal CPU, the agent program itself is sent to and stored in the certificate authority memory via the open network system. That is, the agent program moves to the certificate authority according to its own program.

Next, the agent program stored in the certificate authority memory is executed by the certificate authority CPU.
As a result, the latest CRL issued by the certificate authority is stored in the memory area used by the agent program in the certificate authority memory according to the processing procedure of the agent program.

The agent program has been stored in the certificate authority memory for a certain period of time. That is, the agent program resides at the certificate authority for a certain period of time.
If the CRL of the certificate authority is updated while the agent program is stationed at the certificate authority, the updated CRL becomes the latest CRL. The agent program monitors the update of the CRL and updates the CRL. The stored CRL is newly stored in the memory area.

After a lapse of a predetermined time, the agent program updates the latest CRL stored in the memory area.
Is sent to and stored in the terminal memory via the open network system. That is, the agent program uses the latest CRL according to its own program.
To move to the end memory.

Next, the agent program stored in the terminal memory is executed by the terminal CPU. As a result, according to the processing procedure of the agent program, the old CRL stored in the terminal memory is updated to the latest CRL brought back by the returned agent program. In this way, the CRL is distributed from the certificate authority to the terminal entity by the agent program.

As described above, according to the first invalid digital certificate list distribution method of the present invention, an agent program is used. Then, the processing procedure of the CRL distribution mechanism is designed for this agent program. As a result, the design of the application system can be separated from the design of the CRL distribution mechanism. Therefore, it is possible to reduce the burden of designing the application system.

In implementing the first method of distributing the revoked digital certificate list according to the present invention, preferably, a predetermined time is stored in the terminal memory, and before the agent program is stored in the memory of the certificate authority. Then, it is preferable that the certain time is read from the terminal memory to the agent program by executing the agent program by the terminal CPU.

As described above, if a certain time stored in the terminal memory is read and set by the agent program, by storing the desired value of the certain time in the terminal memory, the agent program can be used by the certificate authority. The length of time spent in the office can be a desired length.
As a result, the timing at which the agent program returns from the certificate authority to the terminal entity can be set as a desired timing. Therefore, the timing of updating the CRL of the terminal entity due to the distribution of the CRL can be set to a desired timing.

[Regarding the Second Method of Distributing the Invalid Digital Certificate List] According to the first method of distributing the invalid digital certificate list, the agent program resides at the certificate authority for a certain period of time. Then, while stationed, the agent program is executed by the central processing unit (certificate authority CPU) of the computer of the certificate authority. The agent program occupies a part of the memory area of the storage capacity of the computer (certificate authority memory) of the computer of the certificate authority while resident in the certificate authority. Therefore, the burden on the computer of the certificate authority increases while the agent program is stationed at the certificate authority.

However, the processing capacity such as the computing capacity and storage capacity of the computer of the certificate authority generally has little margin. In addition, if a large number of agent programs are stationed at the certificate authority from many terminal entities, the burden on the computer of the certificate authority becomes very large. As a result, the processing of the certificate authority itself may be delayed. For example, it may take a long time for the certificate authority to issue the CRL.

Therefore, according to the second method of distributing the invalid digital certificate list of the present invention, in order to suppress an increase in the burden on the computer of the certificate authority, the invalidity is stored in the storage device (certificate authority memory) of the computer of the certificate authority. An agent program in which a processing procedure for distributing the digital certificate list is programmed is stored, the agent program is started by the central processing unit (certificate authority CPU) of the computer of the certificate authority, and the agent program is executed by the certificate authority CPU. The latest invalid digital certificate list issued by the certificate authority is stored in the memory area of the certificate authority memory used by this agent program, and the agent program is stored in the memory area. Terminal with the latest revoked digital certificate list Is stored in the storage device (terminal memory) of the computer of the entity, and is executed by the central processing unit (hereinafter, also referred to as “terminal CPU”) of the computer of the terminal entity, and is stored in the terminal memory. The revoked digital certificate list is updated to the latest revoked digital certificate list, and after the update, the agent program is stored in the certificate authority memory.

As described above, according to the second invalid digital certificate distribution method of the present invention, the agent program in which the processing procedure for distributing the CRL is programmed is used.

According to the second invalid digital certificate list distribution method, when distributing the CRL,
First, the agent program stored in the certificate authority memory is started by the certificate authority CPU. That is, the execution of the agent program is started by the certificate authority CPU.

Next, by executing the agent program by the certificate authority CPU, the latest invalid digital certificate list issued by the certificate authority is stored in a memory area of the certificate authority memory used by the agent program. Is done.

Then, the agent program itself is:
Along with the latest revoked digital certificate list stored in the memory area, it is sent via the open network system and stored in the terminal memory. That is, the agent program moves to the terminal entity according to its own program.

Next, the agent program stored in the terminal memory is executed by the terminal CPU. As a result, the old invalid digital certificate list stored in the terminal memory is updated to the latest invalid digital certificate list according to the processing procedure of the agent program. In this way, the CRL is distributed from the certificate authority to the terminal entity by the agent program.

After updating the CRL, the agent program is sent to the certificate authority memory via the open network system and stored. That is, the agent program moves to the certificate authority memory according to its own program.

As described above, according to the second invalid digital certificate list distribution method of the present invention, an agent program is used. Then, the processing procedure of the CRL distribution mechanism is designed for this agent program. As a result, the design of the application system can be separated from the design of the CRL distribution mechanism. Therefore, it is possible to reduce the burden of designing the application system.

Further, according to the second method of distributing the revoked digital certificate list of the present invention, the agent program is started by the certificate authority CPU and the agent program is moved to the terminal memory. Therefore, the second
According to the method of distributing the invalid digital certificate list, the agent program does not flood the certificate authority from the terminal entity. As a result, an increase in the burden on the computer of the certificate authority can be suppressed. Therefore, the second method of distributing the revoked digital certificate list is particularly suitable for application when the processing capacity of the computer of the certificate authority is insufficient.

[Third Invalid Digital Certificate List Distribution Method] When a system in which a plurality of certificate authorities operate in cooperation is constructed, CRLs issued by the plurality of certificate authorities are distributed to each other. A mechanism is needed. However, in order to allow existing certificate authorities to operate in a coordinated manner later, a major change in the system has conventionally been required.

Therefore, according to the third method of distributing the invalid digital certificate list of the present invention, in order to operate the certificate authorities in cooperation without largely changing the system of the certificate authority, the first authentication method is used. An agent program in which a processing procedure for distributing the invalid digital certificate list is stored in a storage device (hereinafter, also referred to as a "first certificate authority memory") of the computer of the station, and the first authentication is performed. The central processing unit (hereinafter, also referred to as "first certificate authority CPU") of the computer of the station starts each agent program, and executes the agent program by the first certificate authority CPU, thereby storing the first certificate authority memory. In the memory area used by this agent program, the latest invalid digital certificate issued by the first certificate authority is stored. The certificate list is stored, and the agent program is stored in a storage device of the computer of the second certificate authority (hereinafter, also referred to as "second certificate authority memory") together with the latest invalid digital certificate list stored in the memory area. By storing and executing the agent program by a central processing unit (hereinafter, also referred to as a “second certificate authority CPU”) of the computer of the second certificate authority,
Updating the list of invalid digital certificates previously issued by the first certificate authority stored in the memory of the second certificate authority to the latest list of invalid digital certificates, and after the update, the agent program is first authenticated. It is stored in the station memory.

As described above, according to the third invalid digital certificate list distribution method of the present invention, the agent program in which the processing procedure for distributing the CRL is programmed is used.

According to the third method of distributing the revoked digital certificate list, the first certificate authority sends the C certificate to the second certificate authority.
In distributing the RL, first, the agent program stored in the first certificate authority memory is transferred to the first certificate authority C.
Activated by PU. That is, the execution of the agent program is started by the first certificate authority CPU.

Next, by executing the agent program by the first certificate authority CPU, the latest invalidity issued by the first certificate authority is stored in a memory area of the first certificate authority memory used by the agent program. A digital certificate list is stored.

Then, the agent program itself:
The certificate is sent via the open network system and stored in the second certificate authority memory together with the latest invalid digital certificate list stored in the memory area. That is, the agent program executes the second
Move to a certificate authority.

Next, the agent program stored in the second certificate authority memory is executed by the second certificate authority CPU. As a result, according to the procedure of the agent program, the old invalid digital certificate list previously issued by the first certificate authority and stored in the second certificate authority memory is updated to the latest invalid digital certificate list. You. Thus, the CRL is distributed from the first certificate authority to the second certificate authority by the agent program.

After updating the CRL, the agent program is sent to the first certificate authority memory via the open network system and stored. That is,
The agent program moves to the first certificate authority memory according to its own program.

As described above, according to the third invalid digital certificate list distribution method of the present invention, an agent program is used. Then, the processing procedure of the CRL distribution mechanism is designed for this agent program. As a result, the system design of each certificate authority can be performed separately from the design of the CRL distribution mechanism. For this reason, the burden of designing the system of the certificate authority can be reduced.

Further, the CRL is sent from the second certificate authority to the first certificate authority.
Is distributed from the first certificate authority to the second certificate authority.
The CRL can be distributed in the same manner as when the CRL is distributed. Further, by repeating the procedure for distributing the CRL from the first certificate authority to the second certificate authority, the CRLs can be mutually distributed among three or more certificate authorities.

[0046]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS The first to third examples of the invalid digital certificate list distribution method of the present invention will be described below with reference to the drawings.

[First Embodiment] In a first embodiment, an example of a method of distributing a first invalid digital certificate list (CRL) of the present invention will be described with reference to FIGS. I do.

FIGS. 1A to 1C are block diagrams for explaining a CRL distribution method according to the first embodiment. FIG. 2 is a flowchart for explaining a CRL distribution method according to the first embodiment.

First, an environment in which an agent program (hereinafter simply referred to as “agent”) 10 in which a processing procedure for distributing a CRL is programmed will be described. Normally, a CRL is distributed from a certificate authority to a number of terminal entities. Here, a method of distributing a CRL will be described focusing on one terminal entity and the certificate authority.

FIG. 1 shows a computer of a certificate authority (also referred to as “CA computer” or “certificate authority”) 12.
And the terminal entity computer (also referred to as “EE computer” or “terminal entity”) 14
Is shown. The certificate authority 12 and the terminal entity 14 are connected to each other by an open network system. Also, the certificate authority 12 and the terminal entity 14
Each has an environment in which the agent 10 can operate. The operable environment refers to, for example, a state in which the agent 10 can be transferred between the certificate authority 12 and the terminal entity 14.

The certificate authority 12 includes a certificate authority CPU 16 and a certificate authority memory 18. The certificate authority memory 18 stores a latest invalid digital certificate list (CRL) issued by the certificate authority as a first CRL file 20. In the first embodiment, the first
In the CRL file 20, the latest CRL is "CRL
2 "is stored.

The terminal entity 14 is a terminal CP.
U22 and terminal memory 24 are provided. The terminal memory 24 stores a second CRL file 26 for storing the CRL distributed from the certificate authority. Here, “CRL1” previously distributed from the certificate authority 12 is stored as an old CRL in the second CRL file ((A) in FIG. 1).

The contents of the second CRL file 26 may be the same as the contents of the first CRL file 20. In addition, the terminal memory 24 stores a file 28 in which a certain period of time during which the agent is stationed at the certificate authority is set.

The terminal memory 24 stores the agent program 10 in a compiled state (FIG. 1A).

Here, the storage devices of the computer such as the certificate authority memory 18 and the terminal memory 24 do not need to be limited to those built in the computer. For example, an external storage device connected to the computer, for example,
A hard disk device may be used.

Next, a CRL distribution method according to the first embodiment will be described.

To distribute the CRL, first, the agent 10 stored in the terminal memory 24 is transferred to the terminal C.
It is started by the PU 22 (S1 in FIG. 2). That is,
The execution of the agent program 10 is started by the terminal CPU 22. Upon activation, the execution of the agent 10 may be started by, for example, calling a local function stored in the terminal memory 24 by the terminal CPU 22.

Next, by executing the agent program 10 by the terminal CPU 22, a certain time is read into the agent program 10 (S in FIG. 2).
2). When reading for a certain period of time, the terminal memory 24
The fixed time stored in the file 28 in which the fixed time is set is stored in the agent program 10. That is, the agent program 10 is programmed to read a certain period of time stored in the file 28 when activated.

Therefore, by storing a predetermined value of a predetermined time (for example, setting of minutes, hours, or days) in the file 28, the time during which the agent program is stationed at the certificate authority 12 is stored. Can be a desired length. As a result, the timing at which the agent program 10 returns from the certificate authority 12 to the terminal entity 14 can be set to a desired timing. Therefore, the CRL can be updated at a desired timing.

Next, by executing the agent program 10 by the terminal CPU 22, the agent program 10 itself is sent to the certificate authority 12 via the open network system and stored in the certificate authority memory 18 (FIG. 1). (B)). That is, the agent program 10 moves to the certificate authority memory (CA memory) 18 according to its own program (S3 in FIG. 2).

Next, the agent program 10 is executed by the certificate authority CPU 16 so that the latest CRL issued by the certificate authority is stored in the memory area of the certificate authority memory 18 used by the agent program 10.
Is stored ((B) in FIG. 1). Here, “CRL2” is read from the first CRL file 20 as the latest CRL into the CRL read file 10a in this memory area (S4 in FIG. 2). In FIG. 1B, “CRL” is added to the CRL read file 10a of the agent 10.
"2" is read.

Next, the agent program 10 resides in the certificate authority memory 18 for a fixed time. While resident, the agent station 10 executes the agent program 10 to measure the elapsed time. In addition, by executing the agent program 10 by the certificate authority CPU 16 while being stationed, the first C
The update status of the contents of the RL file 20 is monitored. In monitoring, for example, it is preferable to check the update date and time of the first CRL file 20 and the file version. Then, when the contents of the latest CRL 20 are updated while being stationed, the updated new CRL is
The data is read into the RL read file 10a (S5 in FIG. 2).

In FIG. 2, S shown by a thick frame
The processing of the steps 5 and S6 is performed by the certificate authority CPU 16 executing the agent program 10. Processing other than the steps of S5 and S6 (steps S1 to S4 and S7 indicated by a thin line frame)
Is executed by the terminal CPU 22 in the agent program 1
0 is performed.

Next, the agent program 10 is executed by the certificate authority CPU 16 so that, after a certain period of time, the agent program 10 is stored in the first CRL file 20 stored in the memory area (the content of which is "CR
L2 ". ), And sends it via the open network system to store it in the terminal memory 24 (FIG. 1C). That is, the agent program 10
CRL read file 10 according to own program
The user moves the terminal a to the terminal memory (EE memory) 24 (S6 in FIG. 2).

Next, the agent program 10 stored in the terminal memory 24 is executed by the terminal CPU 22. As a result, according to the processing procedure of the agent program 10, the second C stored in the terminal memory 24 is stored.
RL file (contents before update are "CRL1")
The content of 26 is updated to "CRL2" which is the latest CRL brought back from the certificate authority computer 12 by the agent program 10 (S7 in FIG. 2). FIG. 1C shows a state in which the content of the second CRL file 26 has been updated from “CRL1” to “CRL2”. In this way, the CRL is distributed from the certificate authority 12 to the terminal entity 14 by the agent program 10.

As described above, according to the CRL distribution method of the first embodiment, the agent program 10 in which the processing procedure for distributing the CRL is programmed is used. As a result, the application system and CRL distribution can be separated. For this reason, the design of the application system can be performed separately from the design of the CRL distribution mechanism. Therefore, it is possible to reduce the burden of designing the application system.

[Second Embodiment] Next, in a second embodiment, referring to FIGS. 3 and 4, a second embodiment of the present invention will be described.
An example of a method of distributing the invalid digital certificate list (CRL) will be described.

FIGS. 3A to 3C are block diagrams for explaining a CRL distribution method according to the second embodiment. FIG. 4 is a flowchart for explaining a CRL distribution method according to the first embodiment.

Also, the CRL is normally distributed from the certificate authority to many terminal entities, but in the second embodiment, as in the first embodiment, attention is paid to one terminal entity and the certificate authority. Next, a CRL distribution method will be described.

In an environment in which an agent program (hereinafter, simply referred to as an “agent”) 30 in which a processing procedure for distributing a CRL is programmed is operated, the agent 30 before activation is used to authenticate a computer of a certificate authority. The environment is the same as that of the first embodiment described above, except that the environment is compiled and stored in the station memory. Therefore, components of the same environment as the components of the environment shown in FIG. 1 are denoted by the same reference numerals in FIG. 3, and detailed description thereof will be omitted.

Next, a CRL distribution method according to the second embodiment will be described.

In distributing the CRL, first, the agent program 30 stored in the certificate authority memory 18 is started by the certificate authority CPU 16 (S in FIG. 4).
1). That is, the execution of the agent program 30 by the certificate authority CPU 16 is started. Upon activation, for example, the execution of the agent 30 may be started by calling a local function stored in the certificate authority memory 18 by the certificate authority CPU 16.

Next, by executing the agent program 30 by the certificate authority CPU 16, the latest invalid digital certificate issued by the certificate authority is stored in the memory area of the certificate authority memory 18 used by the agent program 30. The list (CRL) is stored (S2 in FIG. 4). Here, “CRL2” is read from the first CRL file 20 into the CRL read file 30a in the memory area as the latest CRL ((A) in FIG. 3). FIG. 3A shows a state in which “CRL2” has been read into the CRL read file 30a of the agent 30.

Next, the agent program 30 is executed by the certificate authority CPU 16 so that the agent program 30 itself is stored in the CRL read file 30a.
Is sent to the terminal entity 14 via the open network system together with the latest CRL (“CRL2”) stored in the terminal memory (EE memory) 24 (S3 in FIG. 4). That is, the agent program 30 moves to the terminal entity 14 according to its own program ((B) in FIG. 3).

Next, the agent program 30 stored in the terminal memory 24 is executed by the terminal CPU 22. As a result, the contents of the second CRL file 26 stored in the terminal memory 24 are updated to the contents of the CRL read file 30a according to the processing procedure of the agent program 30 (S4 in FIG. 4). here,
The contents of the second CRL file 26 from "CRL1" to "CR
L2 ". In this way, the latest CRL is distributed from the certificate authority to the terminal entity by the agent program 30 ((B) in FIG. 3).

In FIG. 3B, the second CRL is
The content of the file 26 is changed from “CRL1” to “CRL2”
Shows the updated state. Also, in FIG. 4, the processing of the steps S4 and S5 shown by the thick frame
This is performed by the PU 22 executing the agent program 30. The processes other than the steps S4 and S5 (the steps S1 to S3 and S5 shown by thin lines) are performed by the certificate authority CPU 16 executing the agent program 30.

Next, the agent program 30 is executed by the certificate authority CPU 16 to execute the agent program 30 so that the certificate authority memory (CA memory) 1
8 is sent via the open network system and stored (S5 in FIG. 4). That is, the agent program moves to the certificate authority memory 18 according to its own program ((C) in FIG. 3).

Then, the agent program 30 returning to the certificate authority reports to the certificate authority CPU 16 that the distribution of the CRL has been completed.

In the second embodiment, an example in which the CRL is distributed to one terminal entity has been described. However, in the second CRL distribution method of the present invention, the CRL is distributed to a plurality of terminal entities. It is also possible.

In this case, for example, one agent:
After distributing the CRL to one terminal entity, the CRL may be sequentially distributed to a plurality of terminal entities without returning to the certificate authority, and finally returned to the certificate authority. That is, FIG.
In the flowchart shown in the above, steps S3 and S4 may be repeated.

When the agent sequentially distributes CRLs to a plurality of terminal entities, the completion report to the certificate authority may include, for example, a list of terminal entities that have actually distributed the CRLs. And the certificate authority CPU
Alternatively, the certificate authority CPU may be made to recognize terminal entities that are not included in the list of terminal entities, that is, terminal entities for which CRLs could not be distributed due to connection failure or insufficient terminal memory capacity. Further, the distribution of the CRL may be attempted again only to the terminal entity that has failed to distribute the CRL.

According to the second CRL distribution method of the present invention, for example, a plurality of agents may be executed simultaneously.

As described above, according to the CRL distribution method of the second embodiment, the agent program 30 is used. Then, CRL is added to this agent program 30.
The processing procedure of the distribution mechanism of the system. As a result, the design of the application system can be separated from the design of the CRL distribution mechanism. Therefore, it is possible to reduce the burden of designing the application system.

Further, according to the CRL distribution method of the second embodiment, the certificate authority CPU 16 activates the agent program 30 and moves the agent program 30 to the terminal memory 24. As a result, even when the CRL is distributed to many terminal entities, the agent program does not flood the certificate authority 12 from the terminal entities. For this reason, an increase in the burden on the computer 12 of the certificate authority can be suppressed. Therefore, it is particularly suitable to be applied to a case where the processing capacity of the computer 12 of the certificate authority is not sufficient.

[Third Embodiment] In a third embodiment, referring to FIGS. 5, 6, and 7, a third embodiment of the present invention will be described.
An example of a method of distributing the invalid digital certificate list (CRL) will be described.

FIG. 5A to FIG. 5C and FIG.
FIGS. 9A to 9C are block diagrams for explaining a CRL distribution method according to the third embodiment. FIG. 7 is a flowchart for explaining a CRL distribution method according to the third embodiment.

First, CR from one certificate authority to another certificate authority
An environment in which an agent program (hereinafter, simply referred to as “agent”) in which a processing procedure for distributing L is programmed will be described. Usually, CRLs are distributed among many certificate authorities,
Here, focusing on the first certificate authority and the second certificate authority, the CR
A method of distributing L will be described.

FIGS. 5 and 6 show a computer of a first certificate authority (also referred to as a “first CA computer” or “first certificate authority”) 32 and a computer of a second certificate authority (“second CA computer” or “second CA computer”). This is also referred to as "the second certificate authority." The first certificate authority 32 and the second certificate authority 34 are connected to each other by an open network system. The first and second certificate authorities 32 and 34 are both a first agent 36 that distributes a CRL issued by the first certificate authority 32 and a second agent that distributes a CRL issued by the second certificate authority 34. 38 has an operable environment. The operable environment refers to, for example, a state in which the first and second agents 36 and 38 can be passed between the first and second certificate authorities 32 and 34.

Further, the first certificate authority 32 has a first certificate authority CP.
U40 and a first certificate authority memory 42. The first certificate authority memory 42 stores a first CRL file 44 containing the latest invalid digital certificate list (CRL) issued by the computer 32 of the first certificate authority. FIG. 5A shows a state in which “CRL2” is stored as the latest CRL in the first CRL file 44.

The first certificate authority memory 42 stores a second CRL file 46 containing the CRL distributed from the computer 34 of the second certificate authority. Also, in FIG. 5A, the state before the distribution of the CRL in this embodiment is assumed to be the second CRL file 46.
Shows a state in which “CRL3” is stored.

The first certificate authority memory 42 stores the first
The agent program 36 is stored in a compiled state (FIG. 5A). In addition, FIG.
In (C), the illustration of the first agent program 36 is omitted.

Further, the second certificate authority 34 has a second certificate authority CP.
U48 and a second certificate authority memory 50. The second certificate authority memory 50 has a third CR containing the latest CRL issued by the computer 34 of the second certificate authority.
The L file 52 is stored. In the third embodiment, “CRL4” is stored in the third CRL file 52 as the latest CRL.

Further, in the second certificate authority memory 50, a fourth CRL file 54 containing the CRL distributed from the computer 32 of the first certificate authority is stored. In FIG. 5A, the CR described in this embodiment is used.
As a state before the distribution of L, a state in which “CRL1” is stored in the fourth CRL file 54 is shown.

The second certificate authority memory 50 stores the second
The agent program 38 is stored in a compiled state. In FIGS. 5A to 5C, the illustration of the second agent program 38 is omitted.

Next, a description will be given of a CRL distribution method according to the third embodiment. Here, the computer 32 of the first certificate authority sends the C to the computer 34 of the second certificate authority.
An example in which the CRL is distributed from the computer 34 of the second certificate authority to the computer 32 of the first certificate authority after distributing the RL will be described.

First, the first certificate authority 32 to the second certificate authority 34
To distribute the CRL to the first certificate authority memory 4
2 is started by the first certificate authority CPU 40 (S in FIG. 7).
1). That is, the execution of the first agent program 36 by the first certificate authority CPU 40 is started. Upon activation, for example, a call to a local function stored in the first certificate authority memory 42 is performed by the first certificate authority CPU 4.
It is preferable that the execution of the first agent program 36 be started by performing the setting with 0.

Next, the first certificate authority CPU 40
By executing the agent program 36, the latest invalid digital certificate list (CRL) issued by the first certificate authority is stored in a memory area of the certificate authority memory 42 used by the first agent program 36. (S2 in FIG. 7). Here, C in this memory area
The first CRL file 44 is added to the RL read file 36a.
"CRL2" is read as the newest CRL from (1) in FIG. FIG. 5A shows a state where “CRL2” is read into the CRL read file 36a.

Next, the first certificate authority CPU 40
By executing the agent program 36, the first agent program 36 itself is updated to the latest CRL stored in the CRL read file 36a, "CRL.
2 ”and transmitted to the second certificate authority 34 via the open network system, and stored in the second certificate authority memory 50 (FIG. 5B). That is, the first agent program 36 moves to the second certificate authority (second CA) 34 according to its own program (S3 in FIG. 7).

Next, the first agent program 36 stored in the second certificate authority memory 50 is
48. As a result, according to the processing procedure of the first agent program 36, the old C stored in the fourth CRL file 54 of the second certificate authority memory 50 is stored.
RL (here, “CRL1”) is the latest CRL (“C
RL2 ”) (S4 in FIG. 7). In this way, the first CRL (“CRL”) is sent from the first certificate authority 32 to the second certificate authority 34 by the first agent program 36.
2 ") is distributed (FIG. 5B).

In FIG. 5B, the fourth CRL is
This shows a state before the content of the file 54 is updated to “CRL2”. Further, S1 to S1 shown by a thin line frame in FIG.
The process of step S3 is performed by the first certificate authority CPU 40 executing the first agent program 36, as described above. On the other hand, the processing of steps S4 to S5 indicated by the thick frame is performed by the second certificate authority CPU.
48 is performed by executing the first agent program 36. Further, the processing in steps S6 to S8 indicated by the thick frame in FIG.
8 is performed by executing the second agent program 38. On the other hand, S indicated by a thin line frame
9 and S10 are performed by the first certificate authority CPU
40 is performed by executing the second agent program 38.

Next, the first agent program 36
The first agent program 36 is executed by the second certificate authority CPU 48 so that the first certificate authority 32
Via the open network system and stored in the first certificate authority memory 42 (FIG. 5C). That is, the agent program 36 moves to the first certificate authority (first CA) 32 according to its own program (S5 in FIG. 7).

The first agent program 36 returning to the first certificate authority 32 reports to the first certificate authority CPU 40 that the distribution of the CRL has been completed.

Next, from the second certificate authority 34 to the first certificate authority 32
To distribute the CRL to the second certificate authority memory 5
0 is started by the second certificate authority CPU 48 (see S in FIG. 7).
6). That is, the execution of the second agent program 38 by the second certificate authority CPU 48 is started. For activation, for example, a call to a local function stored in the second certificate authority memory 50 is performed by the second certificate authority CPU4.
8 to start the execution of the second agent program 38.

Next, the second certificate authority CPU 48
By executing the agent program 38, the latest invalid digital certificate list (CR) issued by the second certificate authority 34 is stored in a memory area of the second certificate authority memory 50 used by the second agent program 38.
L) is stored (S7 in FIG. 7). Here, “CRL4” is read from the third CRL file 52 as the latest CRL into the CRL read file 38a in this memory area (FIG. 6A). FIG. 6A shows a state in which “CRL4” has been read into the CRL read file 38a.

Next, the second certificate authority CPU 48
By executing the agent program 38, the second agent program 38 itself is updated with the latest CRL stored in the CRL read file 36a, "CRL.
4 ”to the first certificate authority 32 via the open network system and stored in the first certificate authority memory 42 (FIG. 6B). That is, the second agent program 38 moves to the first certificate authority (first CA) 32 according to its own program (S8 in FIG. 7).

Next, the second agent program 38 stored in the first certificate authority memory 42 is
40 is performed. As a result, according to the processing procedure of the second agent program 38, the old C stored in the second CRL file 46 of the first certificate authority memory 42 is stored.
RL (here, “CRL3”) replaces the latest CRL (“C
RL4 ”) (S9 in FIG. 7). In this way, the second CRL (“CRL”) is sent from the second certificate authority 34 to the first certificate authority 32 by the second agent program 38.
4 ") is distributed (FIG. 6B). FIG. 6B shows a state before the content of the second CRL file 46 is updated to “CRL4”.

Next, the second agent program 38
Is executed by the first certificate authority CPU 40 to execute the second agent program 38 so that the second certificate authority 34
Via the open network system and stored in the second certificate authority memory 50 (FIG. 6C). That is, the agent program 36 moves to the second certificate authority (second CA) 34 according to its own program (S10 in FIG. 7).

Then, the second agent program 38 returning to the second certificate authority 34 reports to the second certificate authority CPU 48 that the distribution of the CRL has been completed.

As described above, according to the invalid digital certificate list distribution method of the third embodiment, the first and second agent programs 36 and 38 are used. Then, the first and second agent programs 36
And 38, the processing procedure of the CRL distribution mechanism is designed. As a result, individual certificate authorities 32 and 34
Can be designed separately from the design of the CRL distribution mechanism. For this reason, the first and second
The burden on the system design of the certificate authorities 32 and 34 can be reduced.

Further, in the third embodiment, the first
Although the case where the CRL is distributed between the certificate authority 32 and the second certificate authority 34 has been described, according to the third CRL distribution method of the present invention, the CRL is distributed among three or more certificate authorities.
Can also be distributed to each other.

In the third embodiment, the first
After the CRL is distributed from the certificate authority to the second certificate authority, the CRL is distributed from the second certificate authority to the first certificate authority. However, in the third CRL distribution method of the present invention, the order of CRL distribution is not limited. . For example, the distribution of the CRL between the first certificate authority and the second certificate authority may be performed simultaneously. More specifically,
For example, steps S1, S6, S2, and S shown in FIG.
7, S3, S8, S9, and S10 may be executed in this order.

[0112]

【The invention's effect】

[Regarding the first invalid digital certificate list distribution method] According to the first invalid digital certificate list distribution method of the present invention, an agent program is used. Then, the processing procedure of the CRL distribution mechanism is designed for this agent program. As a result, the design of the application system can be separated from the design of the CRL distribution mechanism. Therefore, it is possible to reduce the burden of designing the application system.

In implementing the first method of distributing the revoked digital certificate list according to the present invention, a certain period of time during which the agent resides at the certificate authority is set and stored in the terminal memory, and this is stored in the agent program. By reading and setting, the length of time during which the agent program is stationed at the certificate authority can be set to a desired length. As a result, the timing at which the agent program returns from the certificate authority to the terminal entity can be set as a desired timing. Therefore, the timing of updating the CRL can be set to a desired timing.

[Distribution Method of Second Invalid Digital Certificate List] According to the second invalid digital certificate list distribution method of the present invention, an agent program is used. Then, the processing procedure of the CRL distribution mechanism is designed for this agent program. As a result, the design of the application system can be separated from the design of the CRL distribution mechanism. Therefore, it is possible to reduce the burden of designing the application system.

Further, according to the second invalid digital certificate list distribution method of the present invention, the certificate authority CPU activates the agent program and moves the agent program to the terminal memory. Therefore, the second
According to the method of distributing the invalid digital certificate list, the agent program does not flood the certificate authority from the terminal entity. As a result, an increase in the burden on the computer of the certificate authority can be suppressed. Therefore, the second method of distributing the revoked digital certificate list is particularly suitable for application when the processing capacity of the computer of the certificate authority is insufficient.

[Third Invalid Digital Certificate List Distribution Method] According to the third invalid digital certificate list distribution method of the present invention, an agent program is used. Then, the processing procedure of the CRL distribution mechanism is designed for this agent program. As a result, the system design of each certificate authority can be performed separately from the design of the CRL distribution mechanism. For this reason, the burden of designing the system of the certificate authority can be reduced.

[Brief description of the drawings]

FIG. 1 is a block diagram for explaining a method of distributing an invalid digital certificate list according to a first embodiment;

FIG. 2 is a flowchart for explaining a method of distributing an invalid digital certificate list according to the first embodiment;

FIG. 3 is a block diagram for explaining a method of distributing an invalid digital certificate list according to a second embodiment;

FIG. 4 is a flowchart for explaining a method of distributing an invalid digital certificate list according to the second embodiment;

FIG. 5 is a first half block diagram illustrating a method of distributing an invalid digital certificate list according to a third embodiment;

FIG. 6 is a second half block diagram for describing a method of distributing an invalid digital certificate list according to the third embodiment;

FIG. 7 is a flowchart for explaining a method of distributing an invalid digital certificate list according to the third embodiment.

[Explanation of symbols]

10: Agent program 10a: CRL read file 12: Computer of certificate authority (certificate authority) 14: Computer of terminal entity (terminal entity) 16: Certificate authority CPU 18: Certificate authority memory 20: First CRL file 22: Terminal CPU 24: Terminal memory 26: Second CRL file 28: File for setting a fixed time 30: Agent program 30a: CRL read file 32: Computer of first certificate authority (first certificate authority) 34: Computer of second certificate authority (second certificate) (Authority) 36: First agent program 36a: CRL read file 38: Second agent program 38a: CRL read file 40: First certificate authority CPU 42: First certificate authority memory 44: First CRL file 46: Second CRL file 48: second certificate authority CPU 50: second certificate authority memory 52: third CRL file 54: fourth CRL file

Claims (4)

[Claims] An agent program in which a processing procedure for distributing an invalid digital certificate list is stored in a storage device (hereinafter, also referred to as “terminal memory”) of a computer of a terminal entity. The agent program is started by a central processing unit (hereinafter, also referred to as “terminal CPU”) of a computer of the entity, and the agent program is executed by the terminal CPU, thereby storing the agent program in a computer of a certificate authority. Device (hereinafter “certificate authority memory”)
Also called. ), And the agent program is executed by a central processing unit (hereinafter, also referred to as a “certificate authority CPU”) of the computer of the certificate authority, so that the memory used by the agent program in the certificate authority memory In the area, the latest invalid digital certificate list issued by the certificate authority is stored, and after a certain period of time, the agent program is updated together with the latest invalid digital certificate list stored in the memory area. An invalid digital certificate list stored in the terminal memory is updated by updating the invalid digital certificate list stored in the terminal memory to the latest invalid digital certificate list by executing the agent program by the terminal CPU. Digital certificate list distribution method. 2. The method of distributing an invalid digital certificate list according to claim 1, wherein the predetermined time is stored in the terminal memory, and before the agent program is stored in the memory of the certificate authority, A method of distributing a list of invalid digital certificates, wherein said fixed time is read from said terminal memory to said agent program by executing said agent program by said terminal CPU. 3. An agent program in which a processing procedure for distributing an invalid digital certificate list is stored in a storage device of a computer of a certificate authority (hereinafter, also referred to as a “certificate authority memory”). The agent program is started by a central processing unit (hereinafter, also referred to as a “certificate authority CPU”) of the computer of the certificate authority, and the agent program is executed by the certificate authority CPU. The latest invalid digital certificate list issued by the certificate authority is stored in the memory area used by the agent program, and the latest invalid digital certificate list stored in the memory area is stored in the agent program. With the end entity's computer storage ( In the following, the terminal program is stored in the terminal memory, and the agent program is executed by the central processing unit of the computer of the terminal entity, whereby the invalid digital certificate list stored in the terminal memory is updated to the latest one. A method of distributing an invalid digital certificate list, comprising updating the invalid digital certificate list and storing the agent program in the certificate authority memory after the update. 4. An agent program in which a processing procedure for distributing an invalid digital certificate list is stored in a storage device of a computer of a first certificate authority (hereinafter, also referred to as “first certificate authority memory”). The agent programs are respectively activated by a central processing unit (hereinafter, also referred to as a "first certificate authority CPU") of a computer of the first certificate authority, and the agent program is activated by the first certificate authority CPU. By executing the program, the latest invalid digital certificate list issued by the first certificate authority is stored in a memory area of the first certificate authority memory used by the agent program; and The agent program is stored in the second memory together with the latest invalid digital certificate list stored in the memory area. Storage of the authentication station computer (hereinafter, referred to as "second authentication station memory".)
By executing the agent program by a central processing unit of the computer of the second certificate authority,
Updating the list of invalid digital certificates issued by the first certificate authority stored in the second certificate authority memory to the latest invalid digital certificate list; and
A method for distributing a list of invalid digital certificates, wherein the agent program is stored in the first certificate authority memory after updating.