JPH11202765A - Ciphered information processor, ciphered information processing method and recording medium - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a cipherer information processor, a ciphered information processing method and a recording medium capable of safely keeping and accessing a secret key without the need of troublesome time and labor. SOLUTION: Secret key data used by the respective kinds of ciphered softwares using a public key cipher system are gathered, a gathered secret key data group is generated as one piece of key bundle data, the key bundle data are ciphered based on a symmetrical key code and the ciphered key bundle data are transferred to a key bundle server 13 and kept. In performing ciphering communications, the key bundle data are down-loaded from the key bundle server 13 through a network 14 to a terminal equipment 12 and decoded, an optional secret key file required at the time of optional ciphering communication using a public key cipher from the decoded key bundle data composed of the secret key data group is selected from the secret key data group and the ciphering communications are performed by using the selected secret key file and the other required data.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an encrypted information processing apparatus, an encrypted information processing method, and a recording medium for generating, storing, or decrypting a secret key for keeping data confidential. Things.

[0002]

2. Description of the Related Art With the recent development of computer network technology, various types of digital information have been used on computer networks. However, such digital information can be easily viewed and falsified by others on a computer or a network. Therefore, it is necessary to obtain, transmit, process, and record private information and business information of a user who needs to be kept confidential after encrypting the information using an encryption technique.

In order to encrypt such information that needs to be kept secret, a data encryption standard (DES; Data Encrypt) is used.
ion standard) has been developed. In this method, since an encryption key for encrypting data is shared between users, it is necessary to deliver and record the encryption key so that another user does not obtain the encryption key. Therefore, in order to prevent the encryption key from being peeped, tampered, or acquired, a means has been proposed for delivering the encryption key as an encryption key that is further encrypted with another key.

[0004] In such a public key cryptosystem, a user private key is generally stored on a hard disk mounted on a personal computer (PC) or the like frequently used by a user, and is not protected from access. This is performed by storing each key pair in an external storage medium such as a floppy disk. Access control to a hard disk or the like is generally performed by inputting a password.

[0005]

However, in the method of storing a secret key for each key pair, if there are a plurality of secret keys, it is necessary to safely manage files by the number of the secret keys. Further, in the method of storing data on a hard disk mounted on a personal computer or the like of a client, it is necessary to set a plurality of difficult-to-guess passwords when access control is performed. In addition, there is a possibility that the password is forgotten. Furthermore, the method of storing the data on an external storage medium such as a floppy disk is complicated because it is necessary to carry it, and since it is common to store it in a fixed place, there is a danger of constant theft and unauthorized use. However, there is a disadvantage that the cost is increased.

[0006] The present invention has been made in view of such circumstances, and its object is to reduce the need for complicated work.
There is no need to provide an external storage device individually, and a secret key can be securely stored and accessed.
An object of the present invention is to provide an encrypted information processing method and a recording medium.

[0007]

In order to achieve the above object, an encrypted information processing apparatus according to the present invention comprises a key ring data storage means for storing key ring data, which can be accessed by a plurality of user terminals; Key ring data generating means for collecting a secret key for decoding the information encrypted in step 1, generating the collected secret key data group as one key ring data, and a key for encrypting the generated key ring data A key bundle data encrypting unit; and a transfer unit that transfers the encrypted key bundle data to the key bundle data storage unit for storage.

In the present invention, there is provided symmetric key code generation means for generating a symmetric key code for encrypting the key ring data, and the key ring data encryption means is generated by the symmetric key code generation means. The key ring data is encrypted based on the obtained symmetric key code.

Further, the present invention has a storage means for storing the symmetric key code generated by the symmetric key code generation means.

Further, the present invention has means for erasing the key ring data after transferring the encrypted key ring data to the key ring data storage means.

Further, the encrypted information processing apparatus of the present invention stores encrypted key ring data obtained by encrypting a secret key data group for decoding information encrypted with a public key as one key ring data. A key bundle data storage unit accessible by a plurality of user terminals, a decryption unit for reading and decrypting encrypted key bundle data stored in the key bundle data storage unit, and a key decrypted by the decryption unit. Secret key selecting means for selecting a desired secret key from a secret key data group constituting the bundle data.

Further, the present invention has means for performing encrypted communication using the secret key selected by the secret key selecting means.

In the present invention, there is provided symmetric key code generation means for generating a symmetric key code for decrypting the key ring data, and the decryption means is provided with a symmetric key code generated by the symmetric key code generation means. The key ring data is decrypted based on the code.

Further, the present invention has means for stopping the decryption processing when the decryption of the encrypted key ring data is not performed a predetermined number of times.

Further, the present invention has means for erasing the decrypted key ring data after predetermined processing is completed.

Further, the encrypted information processing apparatus of the present invention comprises a key ring data storage means for storing key ring data, which can be accessed by a plurality of user terminals, and for decoding information encrypted with a public key. A key ring data generating means for collecting a secret key and generating the collected secret key data group as one key ring data; a key ring data encrypting means for encrypting the generated key ring data; A first device having a transfer means for transferring and storing the key ring data to the key ring data storage means; a decryption means for reading and decrypting the encrypted key ring data stored in the key ring data storage means; ,
A secret key selecting means for selecting a desired secret key from a secret key data group constituting the key ring data decrypted by the decrypting means.

In the present invention, there is provided symmetric key code generation means for generating a symmetric key code for encrypting the key ring data, and the key ring data encryption means is generated by the symmetric key code generation means. The key ring data is encrypted based on the obtained symmetric key code.

Further, the present invention has storage means for storing the symmetric key code generated by the symmetric key code generation means.

In the present invention, the decryption means of the second device decrypts the read encrypted key ring data based on the symmetric key code stored in the storage means.

Further, the present invention has means for stopping the decryption process when the decryption of the encrypted key ring data is not performed a predetermined number of times.

Further, in the present invention, the first device has a means for deleting the key ring data after transferring the encrypted key ring data to the key ring data storage means.

In the present invention, The second device has means for erasing the decrypted key ring data after the predetermined processing is completed.

Also, the encrypted information processing apparatus of the present invention stores encrypted key ring data obtained by encrypting a secret key data group as one key ring data, and stores key ring data accessible by a plurality of user terminals. Means, a challenge device in which recognition data is written, and decryption means for reading and decrypting encrypted key ring data stored in the key ring data storage means when the challenge device is set,
A collation unit that collates the secret key data group constituting the key ring data decrypted by the decryption unit with the recognition data, and performs a predetermined process when a positive collation result is obtained.

Further, the present invention has means for deleting the decrypted key ring data after the collation processing is completed.

Further, the encrypted information processing method of the present invention collects a secret key for decoding information encrypted with a public key, generates a collected secret key data group as one key ring data, The generated key ring data is encrypted, and the encrypted key ring data is transferred to and stored in key ring data storage means accessible by a plurality of user terminals.

In the present invention, the key ring data is encrypted based on a symmetric key code generated in advance.

Further, according to the encrypted information processing method of the present invention, a secret key data group for decoding information encrypted with a public key is stored in a key ring data storage means accessible by a plurality of user terminals. The encrypted key ring data is stored as the key ring data, and when necessary, the encrypted key ring data stored in the key ring data storage unit is read and decrypted, and the decrypted key ring data is configured. A desired secret key is selected from the secret key data group to be executed.

In the present invention, encrypted communication is performed using the selected secret key.

In the present invention, the key ring data is decrypted based on a symmetric key code generated in advance.

In the present invention, the decryption processing is stopped when the decryption of the encrypted key ring data is not performed a predetermined number of times.

In the present invention, the decrypted key ring data is deleted after the predetermined processing is completed.

Further, the encrypted information processing method of the present invention collects a secret key for decoding information encrypted with a public key, generates a collected secret key data group as one key ring data, The generated key ring data is encrypted, and the encrypted key ring data is transferred to and stored in a key ring data storage unit accessible by a plurality of user terminals, and stored in the key ring data storage unit when necessary. The encrypted key ring data is read and decrypted, and a desired secret key is selected from a secret key data group constituting the decrypted key ring data.

Further, according to the encrypted information processing method of the present invention, the encrypted key ring data obtained by encrypting the secret key data group as one key ring data is stored in the key ring data storage means accessible by a plurality of user terminals. When the challenge device in which the recognition data is written is set and stored, the encrypted key ring data stored in the key ring data storage unit is read and decrypted, and the secret constituting the decrypted key ring data is read. The key data group is collated with the recognition data, and a predetermined process is performed when a positive collation result is obtained.

The recording medium of the present invention collects a secret key for decoding information encrypted with a public key, generates a collected secret key data group as one key ring data, and generates the generated key ring data. And a program for causing a computer to execute processing steps of transferring the encrypted key ring data to key ring data storage means accessible by a plurality of user terminals and storing the encrypted key ring data.

In the recording medium of the present invention, a key ring data storage means accessible by a plurality of user terminals stores a secret key data group for decoding information encrypted with a public key into one key ring data. The encrypted key ring data is stored as encrypted, and when necessary, the encrypted key ring data stored in the key ring data storage means is read and decrypted,
A program for causing a computer to execute processing steps of selecting a desired secret key from a secret key data group constituting the decrypted key ring data is recorded.

Further, the recording medium of the present invention collects a secret key for decoding information encrypted with a public key, generates a collected secret key data group as one key ring data, and generates the generated key data. The key data is encrypted and transferred to a key data storage unit accessible by a plurality of user terminals for storage, and the encrypted key data is stored in the key data storage unit when necessary. A program is recorded which reads and decrypts the key ring data and causes the computer to execute processing steps of selecting a desired secret key from a secret key data group constituting the decrypted key ring data.

The recording medium of the present invention stores encrypted key ring data obtained by encrypting a secret key data group as one key ring data in key ring data storage means accessible by a plurality of user terminals. When the challenge device in which the recognition data is written is set, the encrypted key ring data stored in the key ring data storage unit is read and decrypted, and a secret key data group constituting the decrypted key ring data is read. A program is recorded that causes the computer to execute processing steps for performing predetermined processing when the recognition data is verified and a positive verification result is obtained.

According to the present invention, for example, singular or plural (n) data of a secret key used in various encryption software using a public key cryptosystem is collected, and the collected secret key file (data) is collected. ) A group is generated as one key ring data. The generated key ring data is encrypted based on a symmetric key code generated in advance.
Then, the encrypted key ring data is transferred to the key ring data storage means and stored.

When performing encrypted communication, for example, key ring data is read from the key ring data storage means via, for example, a network and decrypted using, for example, symmetric key data stored in the storage means. . And
From the key ring data consisting of the decrypted private key data group, any private key file required for any encrypted communication using public key encryption is selected from the private key data group,
Encrypted communication is performed using the selected secret key file and other data required for the public key cryptosystem.

According to the present invention, the encrypted key ring data obtained by encrypting the secret key data group as one key ring data is stored in the key ring data storage means accessible by a plurality of user terminals. Here, when the challenge device in which the recognition data is written is set in a predetermined device processing device, the encrypted key ring data stored in the key ring data storage means is read and decrypted. Then, the secret key data group forming the decrypted key ring data is collated with the recognition data, and a predetermined process is performed when a positive collation result is obtained.

[0041]

Embodiments of the present invention will be described below in detail with reference to the drawings.

First Embodiment FIG. 1 is a basic configuration diagram of an encrypted information processing device according to the present invention, and FIG. 2 is a block diagram showing a specific configuration example of a client terminal device according to the present invention.

The encrypted information processing apparatus 10 according to the present embodiment
Are, as shown in FIG.
A key ring server 13 is connected to a network (for example, the Internet) 14.

The client-side terminal devices 11 and 12 aggregate the single or plural private key file data, encrypt the key bundle composed of the private key file group, and transfer (upload) the key bundle data to the key bundle server 13; The key bundle application and the installer 100 that download the key bundle data stored and stored in the key bundle server 13 to decrypt the encrypted key bundle data, and perform the encrypted communication using the decrypted secret key. Have. In FIG. 1, for simplicity of description, the client-side terminal device 11 is shown as a device that generates key ring data, and the terminal device 12 is shown as a device that decrypts key ring data.

As shown in FIG. 2, the key bundle application and installer 100 include a secret key file search / collection unit 101, a key bundle data generation unit 102, a key bundle data encoding unit 103, a key bundle data decode unit 104, a key bundle data A data decode challenge module 105, a symmetric key code generation unit 106, a symmetric key code transfer module 107,
And key ring transfer module 108, key ring data erasing unit 1
09.

The secret key file search / collection unit 101 performs the processing on one or more (n) pieces of data of the secret key used in various kinds of encryption software using the public key encryption system existing in the client side terminal device. Search and collect them all.

The key ring data generation unit 102 generates a group of secret key files (data) collected by the secret key file search / collection unit 101 as one key ring data.

The key ring data encoding unit 103 encrypts the key ring data generated by the key ring data generation unit 102 with the symmetric key code generated by the symmetric key code generation unit 106.

The key ring data decoding unit 104 is transferred from the key ring server 13 obtained through the key ring transfer module 108 using the symmetric key data obtained through the key ring data decoding challenge module 105. Decrypt the key ring data.

The key ring data decoding challenge module 105 transfers the symmetric key data stored in the portable storage device 200 to the key ring data decoding unit 104 and a key ring server obtained through the key ring transfer module 108. The transfer of the key ring data transferred from the key block 13 to the key ring data decoding unit 104 is controlled. Further, the key ring data decode challenge module 105 has a function of locking out the decryption if the decryption has not been properly performed a certain number of times.

The symmetric key code generation section 106 generates a symmetric key code for encrypting the key ring data generated by the key ring data generation section 103 at the time of activation or the like, and supplies it to the key ring data encoding section 103. And portable storage device 2
00 to the symmetric key code memory module 201.

The symmetric key code transfer module 107 controls the transfer of symmetric key data between the symmetric key decoding unit 106 and the key ring data decode challenge module 105 and the portable storage device 200.

The key ring transfer module 108 transfers (uploads) the encrypted key ring data to the key ring server 13 and transmits the key ring data stored in the key ring server 13 to the client side terminal devices 11 and 12. Transfer (download).

The key ring data erasing section 109 includes key ring data that has been encrypted and transferred to the key ring server 13, key ring data decoded by the key ring data decoding section 104 including a secret key file, and a portable storage device. The symmetric key code data transferred to 200 is deleted from the client side terminal devices 11 and 12.

The key ring server 13 records and stores the data in the encrypted key ring data storage unit sent from the client side terminal devices 11 and 12. In addition, it has a key ring transfer module 131 that controls the transfer of key ring data to and from the client terminal device via the network 14.

Next, the operation of the above configuration will be described with reference to the drawings.

First, the generation and storage of symmetric keys and key ring data will be described with reference to the flowcharts of FIGS.

In the client terminal device 11, the key bundle application and the installer 100 are activated, a symmetric key code is generated, and supplied to the key bundle data encoding unit 103 (S1).

In the key ring application and the installer 100, the secret key file search / collection unit 101
In the above, all or one or more (n) pieces of private key data used in various kinds of encryption software using the public key cryptosystem existing in the client terminal device 11 (in the client PC) are searched. ,
Collected (S2, S3).

Then, in the key ring data generation unit 102, the secret key file (data) group collected by the secret key file search / collection unit 101 is generated as one key ring data (S4), and the key ring data encoding is performed. It is provided to the unit 103.

The key ring data encoding unit 103 encrypts the key ring data generated by the key ring data generation unit 102 based on the symmetric key code generated by the symmetric key code generation unit 106 (S5).

The encrypted key ring data is transmitted to the key ring server by encrypted communication via the network 14 under the control of the key ring transfer module 108 (S 6), and thereafter remains in the client terminal device 11. The key ring data is deleted by the key ring data deleting unit 109.

Further, the data of the symmetric key code used for encrypting the key ring data is transferred to the portable storage device by the key ring application and the installer 100 under the control of the symmetric key code transfer module 107 irrespective of wired or wireless. 200, and then the client-side terminal device 1
The symmetric key code data remaining in 1 is deleted.

Next, the download of the key ring data, the decryption of the data and the collation of the necessary symmetric key data will be described with reference to the flowcharts of FIGS.

First, a user sends a network 1 from the client side terminal device 12 to the key ring server 13.
4 (ST1). As a result, the key ring data is downloaded to the client terminal device 12 (ST2).

Next, the key bundle application and the key bundle data decoding challenge section 105 which is a part of the installer 100 are started by the user, and the portable storage device 2 is activated.
The symmetric key data stored in 00 is transferred to the client terminal device 12 regardless of whether it is wired or wireless. Then, the key ring data decoding unit 104 uses the symmetric key data obtained through the key ring data decoding challenge module 105 to transmit the key transferred from the key ring server 13 obtained through the key ring transfer module 108. The bundle data is decrypted. Note that the decoding is performed a certain number of times, for example, 3
If the processing has not been properly performed, the decoding processing is stopped and the system is locked (ST3, ST4, ST4).
ST5).

The key ring data decrypted here is composed of secret key data used in various kinds of encryption software using the public key cryptosystem. An arbitrary private key file required for the encrypted communication is selected from the private key data group.
Then, the user performs encrypted communication using the selected secret key file and other data required for the public key cryptosystem (ST6).

When the encrypted communication in step ST6 is completed and the encryption software is terminated, the decrypted key ring data including the secret key file used by the key ring data erasing section 109 is transferred to the client terminal device. 12
Deleted from

As described above, according to the present embodiment, one or a plurality (n) of secret keys used in various kinds of encryption software using the public key cryptosystem existing in the client-side terminal device 11. ), Collects the generated secret key file (data) group as one key ring data, encrypts this key ring data based on the symmetric key code generated at the time of startup, and encrypts the encrypted key ring data. Is transferred and stored in a key ring server 13 provided separately from the terminal device, and when performing encrypted communication,
The key ring data is downloaded from the key ring server 13 to the client terminal device 12 via the network 14 and the key ring data transferred from the key ring server 13 is decrypted using the symmetric key data stored in the portable storage device 200. And
From the key ring data consisting of the decrypted secret key data group,
Any private key file required for any encrypted communication using public key cryptography is selected from the private key data group,
Encrypted communication is performed using the selected secret key file and other data required for the public key encryption method, so that there is no need for cumbersome work and no need to provide an external storage device individually. This has the advantage that the secret key can be safely stored, and the encrypted communication can be performed without depending on the client side terminal device and without storing the recognition information such as a plurality of passwords.

Second Embodiment FIG. 5 is a diagram for explaining a second embodiment of the encrypted information processing apparatus according to the present invention. In the second embodiment, the encrypted key ring data obtained by encrypting the secret key data group as one key ring data is stored in the key ring server 20 as a key ring data storage unit accessible by a plurality of user terminals. When a challenge device 31 such as a key in which recognition data (ID) is written is set in a device processing device 30 such as a key device, the encrypted key ring data stored in the key ring server 20 is read out. The secret key data group constituting the decrypted key ring data is collated with the recognition data, and when a positive collation result is obtained, predetermined processing such as unlocking is performed. .

According to the second embodiment, the first
The same effect as that of the embodiment can be obtained.

In the above embodiments, the recording media for various encrypted information processing programs processed by the encrypted information processing apparatus include the following. That is, for example, a magnetic recording medium using a storage recording principle such as a floppy disk or a hard disk, an MO (M
a password management program is temporarily stored in a magneto-optical recording medium based on the magneto-optical principle such as an agnet-Optical Disc or a CD-ROM, an IC card or a semiconductor ROM for electrically storing data, or a computer network such as the Internet. The main storage memory of a server computer or a client computer to be transmitted, and a data transmission path or the like that dynamically holds the program for a certain period of time when transmitting the program to a communication line such as a dedicated line or a telephone line of the Internet. is there.

[0073]

As described above, according to the present invention,
The secret key can be safely stored without the need for cumbersome work and without having to provide an external storage device individually, and it stores the recognition information such as a plurality of passwords without depending on the client terminal device. There is an advantage that encrypted communication is possible without the necessity.

[Brief description of the drawings]

FIG. 1 is a basic configuration diagram of an encrypted information processing apparatus according to the present invention.

FIG. 2 is a block diagram showing a specific configuration example of a client-side terminal device according to the present invention.

FIG. 3 is a flowchart for explaining a key ring generation and upload operation to a key ring server.

FIG. 4 is a flowchart for explaining download of key ring data from a key ring server and an encryption communication operation;

FIG. 5 is a diagram illustrating a second embodiment of the encrypted information processing apparatus according to the present invention.

[Explanation of symbols]

DESCRIPTION OF SYMBOLS 10 ... Encryption information processing apparatus, 11, 12 ... Client side terminal device, 13 ... Key ring server, 14 ... Network,
100 ... key ring application and installer, 1
01: secret key file search / collection unit, 102: key ring data generation unit, 103: key ring data encoding unit, 104:
Key ring data decoding unit, 105: Key ring data decoding challenge module, 106: Symmetric key code generation unit, 1
07 ... symmetric key code transfer module, 108 ... key bundle transfer module, 109 ... key bundle data erasing unit, 200 ... portable storage device, 20 ... key bundle server, 30 ... device processing unit, 31 ... challenge device.

Claims (37)

[Claims] 1. A key ring data storage means for storing key ring data, which can be accessed by a plurality of user terminals, and a secret key for decoding information encrypted with a public key, and the collected secret key Key ring data generating means for generating a data group as one key ring data; key ring data encrypting means for encrypting the generated key ring data; and key ring data storing means for storing the encrypted key ring data. And a transfer means for transferring and storing the encrypted information in the encrypted information processing apparatus. 2. A symmetric key code generating means for generating a symmetric key code for encrypting the key ring data, wherein the key ring data encrypting means comprises a symmetric key generated by the symmetric key code generating means. 2. The encrypted information processing apparatus according to claim 1, wherein the key ring data is encrypted based on a code. 3. The encrypted information processing apparatus according to claim 2, further comprising storage means for storing the symmetric key code generated by said symmetric key code generation means. 4. The encrypted information processing apparatus according to claim 1, further comprising: means for deleting the key ring data after transferring the encrypted key ring data to the key ring data storage means. 5. A key that can be accessed by a plurality of user terminals and stores encrypted key ring data obtained by encrypting a secret key data group for decoding information encrypted with a public key as one key ring data. Bunch data storage means, decryption means for reading and decrypting encrypted key bunch data stored in the key bunch data storage means, and a secret key data group constituting the key bunch data decrypted by the decryption means. An encrypted information processing device having secret key selecting means for selecting a desired secret key. 6. The encrypted information processing apparatus according to claim 5, further comprising means for performing encrypted communication using the secret key selected by said secret key selecting means. 7. Symmetric key code generation means for generating a symmetric key code for decrypting the key ring data, wherein the decryption means is based on the symmetric key code generated by the symmetric key code generation means. 7. The encrypted information processing device according to claim 5, wherein the key ring data is decrypted. 8. The encrypted information processing apparatus according to claim 5, further comprising means for stopping the decryption process when the decryption of the encrypted key ring data is not performed a predetermined number of times. 9. The apparatus according to claim 5, further comprising means for erasing the decrypted key ring data after the predetermined processing is completed.
An encrypted information processing apparatus according to claim 1. 10. A key ring data storage means for storing key ring data and accessible by a plurality of user terminals, and a secret key for decoding information encrypted with a public key is collected. Key ring data generating means for generating a data group as one key ring data; key ring data encrypting means for encrypting the generated key ring data; and key ring data storing means for storing the encrypted key ring data. A first device having transfer means for transferring and storing the encrypted key ring data stored in the key ring data storage means, a decryption means for reading and decrypting the encrypted key ring data, and a key decrypted by the decryption means. Secret key selecting means for selecting a desired secret key from a secret key data group constituting the bundle data.
Encrypted information processing apparatus comprising: 11. A symmetric key code generating means for generating a symmetric key code for encrypting the key ring data, wherein the key ring data encrypting means includes a symmetric key generated by the symmetric key code generating means. The encrypted information processing device according to claim 10, wherein the key ring data is encrypted based on a code. 12. The encrypted information processing apparatus according to claim 11, further comprising storage means for storing the symmetric key code generated by said symmetric key code generation means. 13. The encrypted information processing according to claim 12, wherein the decryption means of the second device decrypts the encrypted key ring data read based on the symmetric key code stored in the storage means. apparatus. 14. The encrypted information processing apparatus according to claim 10, further comprising means for stopping the decryption process when the decryption of the encrypted key ring data is not performed a predetermined number of times. 15. The device according to claim 10, wherein the first device has a unit for deleting the key ring data after transferring the encrypted key ring data to the key ring data storage unit. Encrypted information processing device. 16. The encrypted information processing apparatus according to claim 10, wherein said second apparatus has means for erasing the decrypted key ring data after a predetermined process is completed. 17. A key ring data storage means for storing encrypted key ring data obtained by encrypting a secret key data group as one key ring data and accessible by a plurality of user terminals, and a challenge in which the recognition data is written. A device, when the challenge device is set, a decryption unit for reading and decrypting the encrypted key ring data stored in the key ring data storage unit; and a key bundle data decrypted by the decryption unit. An encryption information processing apparatus comprising: a verification unit that verifies a secret key data group to be verified with the recognition data and performs a predetermined process when a positive verification result is obtained. 18. The encrypted information processing apparatus according to claim 17, further comprising means for deleting the decrypted key ring data after the collation processing is completed. 19. A secret key for decoding information encrypted with a public key is collected, a collected secret key data group is generated as one key ring data, and the generated key ring data is encrypted. An encrypted information processing method in which encrypted key ring data is transferred to key ring data storage means accessible by a plurality of user terminals and stored. 20. The encryption information processing method according to claim 19, wherein the encryption of the key ring data is performed based on a symmetric key code generated in advance. 21. An encryption key obtained by encrypting a secret key data group for decoding information encrypted with a public key as one key ring data in a key ring data storage means accessible by a plurality of user terminals. The key data is stored, and when necessary, the encrypted key data stored in the key data storage means is read and decrypted, and a desired secret key is obtained from a secret key data group constituting the decrypted key data. An encrypted information processing method for selecting 22. The encrypted information processing method according to claim 21, wherein encrypted communication is performed using the selected secret key. 23. The encrypted information processing method according to claim 21, wherein the decryption of the key ring data is performed based on a symmetric key code generated in advance. 24. The encryption information processing method according to claim 21, wherein the decryption processing is stopped when the decryption of the encrypted key ring data is not performed a predetermined number of times. 25. The encrypted information processing method according to claim 21, wherein the decrypted key ring data is deleted after the predetermined processing is completed. 26. A secret key for decoding information encrypted with a public key is collected, a collected secret key data group is generated as one key ring data, and the generated key ring data is encrypted. The encrypted key ring data is transferred to and stored in a key ring data storage unit accessible by a plurality of user terminals. When necessary, the encrypted key ring data stored in the key ring data storage unit is read and decrypted. And an encryption information processing method for selecting a desired secret key from a secret key data group constituting the decrypted key ring data. 27. The encrypted information processing method according to claim 26, wherein the encryption of the key ring data is performed based on a symmetric key code generated in advance. 28. The encrypted information processing method according to claim 26, wherein encrypted communication is performed using the selected secret key. 29. The key ring data is decrypted based on a symmetric key code generated in advance.
29. The encrypted information processing method according to 28. 30. The encrypted information processing method according to claim 26, 27, 28, or 29, wherein the decryption processing is stopped when the decryption of the encrypted key ring data is not performed a predetermined number of times. 31. The encrypted information processing method according to claim 26, wherein the decrypted key ring data is deleted after the predetermined processing is completed. 32. Encrypted key ring data obtained by encrypting a secret key data group as one key ring data in key ring data storage means accessible by a plurality of user terminals, and the recognition data is written. When the challenge device is set, the encrypted key ring data stored in the key ring data storage means is read and decrypted, and the secret key data group constituting the decrypted key ring data is compared with the recognition data. And an encrypted information processing method for performing a predetermined process when a positive collation result is obtained. 33. The encrypted information processing method according to claim 32, wherein the decrypted key ring data is deleted after the collation processing is completed. 34. A secret key for decoding information encrypted with a public key is collected, a collected secret key data group is generated as one key ring data, and the generated key ring data is encrypted. A computer-readable recording medium storing a program for causing a computer to execute processing steps for transferring and storing the converted key ring data to key ring data storage means accessible by a plurality of user terminals. 35. An encryption key obtained by encrypting a secret key data group for decoding information encrypted with a public key as one key bundle data in a key bundle data storage unit accessible by a plurality of user terminals. The key data is stored, and when necessary, the encrypted key data stored in the key data storage unit is read and decrypted, and a desired secret key is obtained from a secret key data group constituting the decrypted key data. A computer-readable recording medium in which a program for causing a computer to execute a processing step of selecting a computer is recorded. 36. A secret key for decoding information encrypted with a public key is collected, a collected secret key data group is generated as one key ring data, and the generated key ring data is encrypted. The encrypted key ring data is transferred to and stored in a key ring data storage unit accessible by a plurality of user terminals, and when necessary, the encrypted key ring data stored in the key ring data storage unit is read and decrypted. And a computer-readable recording medium storing a program for causing a computer to execute a processing step of selecting a desired secret key from a secret key data group constituting the decrypted key ring data. 37. Encrypted key ring data obtained by encrypting a secret key data group as one key ring data in key ring data storage means accessible by a plurality of user terminals, and the recognition data is written. When the challenge device is set, the encrypted key ring data stored in the key ring data storage means is read and decrypted, and the secret key data group constituting the decrypted key ring data is compared with the recognition data. And a computer-readable recording medium storing a program for causing a computer to execute processing steps for performing predetermined processing when a positive collation result is obtained.