JPH1139261A - Device and method for generating access control information - Google Patents

Abstract

PROBLEM TO BE SOLVED: To enable a manager to control access by independently generating access control information for each user based on the disclosed information of the users in compliance with user' requests. SOLUTION: C=duE<m> .mod.nm and a modulus nm are inputted to an information inputting section 103 as the information on a user. The inputted C and nm are sent to a user secret information generating section 104 and the section 104 generates the secret information du of the user by decoding the C and nm to du=CDm .mod.nm by using the secret-key releasing key Dm of a manager stored in an internal information storing section 110. An access control information control section 106 generates access control information 109 (δus-Ds-du) from the secret information of the user and information 102 on resources. The user utilizes contents by using the access control information.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

The present invention relates to a technique for controlling access of a user.

[0002]

2. Description of the Related Art As a technique for controlling a user's access to information, for example, there is a technique described in Japanese Patent Application Laid-Open No. 4-157555 (referred to as prior art document [1]).
In this technique, the access control system includes a user, a host computer that holds the access control information of the user, a terminal that connects online to the host computer, and an ID card reader provided in the terminal. The actual access control is performed as follows. The user first inserts his / her ID card into the ID card reader. The user ID information stored in the ID card is I
It is read by a D card reader. The terminal makes an online connection with the host computer and sends the read user ID information to the host computer. The host computer searches for user access control information from the user ID. The user is permitted and controlled to access the information on the host computer only in a range corresponding to the access control information obtained as a result of the search.

[0003] A similar technique is UNIX Mag.
Azine April 1995, p96-103 (referred to as prior art document [2]).
s ". This system uses ke to authenticate users.
It is composed of an rberos server, a ticket issuing server for issuing access control information for information called a ticket or service, and a server for holding service or information.

[0004] Actual access control will be described by taking a case where a user uses a service or information on a server A as an example. First of all, Kerberos
Log in to the server. When the login is successful, user authentication information called an initial ticket is issued. Next, the user sends an access request to the server A to the ticket issuing server together with the initial ticket. The ticket issuing server verifies the transmitted ticket and issues a ticket as access control information for the service or information on the server A only when the ticket is authorized. The user issues an access request to the service or information to the server A together with the issued ticket. The server A verifies the ticket and permits the user to access services or information on the server A only when the ticket is valid.

[0005]

Since the conventional technology is configured as described above, it is necessary to centrally manage users and services or information provided to the users. . That is, in the prior art document [1], the host computer holds the user ID and the access control information. In the prior art document [2], the user ID information must be managed by a Kerberos server, and the service or information needs to be managed by a ticket issuing server. For this reason, if access control to information or services is newly performed, a large cost will be incurred. That is, in the prior art document [1], it is necessary to additionally register new access control information for a service or information in the access control information held on the host computer by requesting the administrator of the host computer. Further, in the prior art document [2], it is necessary to additionally register a service or information in a server registered in the ticket issuing server, and to register the added service or information in the ticket server.

Further, access control information can be issued only to a user who has already been managed. As a result, in order to grant access permission to a new user, it is necessary to start from the registration of the user.

[0007] Therefore, when the number of users and the number of services and information subject to access control increase, a heavy load is imposed on the host computer, the server, and the administrator thereof.

[0008]

According to the present invention, a service or information manager independently prepares information relating to a service or information, information held or generated by the manager, and user information. The above problem is solved by providing means for easily generating access control information for each user. That is, the administrator of the service or information can realize access control by generating access control information for each user alone in response to a request from the user. Further, according to the present invention, the generated access control information is generated by using information unique to the user, so that it becomes impossible for a user other than a legitimate user to use the access control information. Access only to authorized users is feasible. Furthermore, according to the present invention, if the generated access control information and the resource are held in the user's environment, the resource can be used. Therefore, when the resource is used, the environment of the administrator, that is, the host computer is used. Alternatively, there is no need to access a server, and resources can be used offline.

[0009]

Embodiments of the present invention will be described below in detail. First, an outline of the configuration of the embodiment will be described.
Thereafter, the outline of the operation will be described. Thereafter, the configuration and operation will be described in detail with reference to the drawings.

[Summary] As a premise, consider a situation in which an administrator who owns some information, device, or resource (hereinafter collectively referred to as content) controls user's access to it. In an embodiment according to the present invention, there are three entities: administrator, user and center. It is assumed that the administrator and the user have an access control device according to the present invention called a “token”. The token securely holds information unique to its owner and information necessary for access control. As a token,
A portable storage medium is used and is actually realized by a floppy disk, an IC card, an optical card, a magnetic card, or the like.

The role of each entity is as follows. The center generates the necessary information according to the invention and encapsulates them in tokens as needed. Furthermore, unique information is contained as needed for each manager and each user, and a unique token is issued for each. The administrator owns the content and controls user access to it. The user uses the content using his / her own token.

The user provides secret information unique to the user himself / herself to the manager of the content that he / she wants to use (that is, keeps the administrator of the content secret). The administrator uses the provided unique secret information of the user (which is kept secret from the administrator) and information provided by the administrator for each individual content related to the content. It generates access control information for controlling access to content by a user and sends it to the user. The user can access the content by using the sent access control information, and can use the content.

[Background Art] In the present invention, it is necessary for a user and an administrator to secretly share secret information unique to the user himself. In such a case, a public key encryption technique that is a known technique can be used. Of the public key cryptography, the Rabin cryptography and the RSA cryptography will be briefly described.

Suppose that a Rabin-encrypted sender wants to secretly transmit information M to a recipient. The following information is generated as preparation.

[0015]

[Formula 1] Prime numbers: p, q where p た だ し q≡3 mod 4 Common modulus: n = p · q n is public information. p and q are secret constants other than the sender and receiver. Sender and receiver share n, p, and q.

The sender of the information retrieves the information M to be transmitted,
The information Pu and Su are calculated as follows. The sender generates a random number e,

[0017]

## EQU2 ## Pu = M + e mod n Su = M ・ e mod n The sender sends Pu and Su as ciphertext to the receiver.

The receiver solves the following equation:

[0019]

X ² + Pu · X + Su≡0 mod n (1) It is impossible for a third party who does not know p and q to solve equation (1) because of the computational complexity. Further, since M and e are solutions of equation (1), only the receiver sharing p and q with the sender can solve equation (1) and decrypt the ciphertext.

Now, consider solving equation (1). As described above, since p and q are taken as p≡q≡3 mod 4, those who know p and q can obtain the following equation

[0021]

The solution η ₁ , η ₂ , η ₃ , and η ₄ of x ² ≡4 ^-1 (Su ² -4Pu) mod n is a = 4 ^-1 (Su ² -4Pu)
As

[0022]

Η ₁ ≡a ^{(p + 1) / 4} ≡a ^{(q + 1) / 4} η ₂ ≡a ^{(p + 1) / 4} ≡-a ^{(q + 1) / 4} η ₃ ≡-a ^{(p + 1) / 4} ≡a ^{(q + 1) / 4} η ₄ ≡−a ^{(p + 1) / 4} ≡−a ^{(q + 1) / 4} . Using this, p, q
The receiver who knows the solution of equation (1) ξ ₁ , ξ ₂ , ξ
₃ , ξ ₄

[0023]

The [6] it is determined as ^{_{ξ 1 ≡2 -1 Su + η 1}} mod n ξ 2 ≡2 -1 Su + η 2 mod n ξ 3 ≡2 -1 Su + η 2 mod n ξ 4 ≡2 -1 Su + η 4 mod n it can.

Furthermore, the sender of the ciphertext teaches a part of M to the receiver. The recipient includes a portion of the M.
Select _i (i = 1, 2, 3, 4) as the correct M. This allows the recipient to decrypt the ciphertext.

RSA Encryption Next, the RSA encryption will be described. Suppose that a sender wants to secretly transmit information M to a receiver. As preparation, the sender generates the following information.

[0026]

## EQU7 ## Prime number: p, q Common modulus: n = p · q n is public information. p and q are secret constants except for the sender. In addition, the sender

[0027]

## EQU8 ## Generate e and d such that ed≡1 mod Φ (n), and let e be a public key and d be a secret key. Here, Φ (n) = (p−1) (q−1).

The sender encrypts the message M with his / her secret key d as follows to create a ciphertext C.

[0029]

C = M ^d mod n The sender sends C to the receiver.

The receiver decrypts the ciphertext C using the sender's public key e as follows to obtain a message M.

[0031]

## EQU10 ## M = C ^e mod n

[Details of Operation of Embodiment] Resource Administrator MA
However, the access control operation according to the present invention will be described in detail by taking, as an example, a case where the user U's access to the resource S is controlled. First, the case where the Rabin encryption is used will be described, and then the case where the RSA encryption is used will be described.

When using the Rabin encryption (preparation) The center C generates prime numbers p and q and a common modulus n according to the above-described Rabin encryption method. Further, a unique secret key du is generated for each user. Center C
Encloses the common information n, p, q generated as described above and the secret key du generated for the user U in the token Tu of the user U, and issues it to the user U. Similarly,
The center C stores the common information n, in the token Tm of the administrator MA.
p, q and the secret key dm of the administrator MA are contained, and the administrator M
Issue to A.

The administrator MA of the content S sets the constants Es and Ds corresponding to the content S in his / her token Tm.
To

[0035]

[Expression 11] Es · Ds≡1 mod Φ (n) (2) Where Φ (n) is the Euler number, in this case

[0036]

Φ (n) = (p−1) (q−1) (3)

(Generation of Access Control Information) The center C
Using the secret key du of the user U and the newly generated random number ec, Pu and Su are also obtained according to the Rabin encryption method.

[0038]

## EQU13 ## Pu = du + ec mod n (4) Su = du · ec mod n (5) Generated and published.

The content administrator MA generates a random number em in the token Tm and sends it to the user U. The user U inputs em to the token Tu. User U's token Tu is inside it

[0040]

Calculate v = em ^du mod n (6) and output v. The user U sends v to the administrator MA. The administrator MA inputs v to the token Tm.
The content manager MA obtains the solutions ξ ₁ , ξ ₂ , ξ ₃ , and の₄ of the equation (1) from Pu and Su of the user U in the token Tm according to the Rabin encryption method. Token Tm further inside,

[0041]

## EQU15 ## e ′ = ξ _i (i = 1, 2, 3, 4) = du that satisfies v≡em ^{e ′} mod n is obtained. The token Tm of the administrator MA internally stores the access control information δus.

[0042]

Δ us = D−F (n, du) (7) or Ls describing how to use the content S is used together,

[0043]

[Mathematical formula-see original document] δus = DF (n, Ls, du) (8) is calculated, and δus is sent to the user U. Where F ()
Is a one-way function. In the following, the access control information δu
The description will be made assuming that s is calculated by Expression (8).

(Locking of Content) The administrator MA locks the content S to be accessed with the key Ks.
Is encrypted with Es as follows.

[0045]

K ′ = Ks ^Es mod n (9) This is embedded in the encrypted data itself.

(Access Control) The user enters the token Tu
And access to the content by using a user program P which is an auxiliary for using the content. User program P uses K '

[0047]

K ″ = r ^Es K ′ (10) and is sent to the token Tu together with the access control information δus.

In the token Tu of the user U, the following calculation is performed to extract the key K. 1) The token Tu of the user U performs the following calculation on the received K ″.

[0049]

Τ = K ″ ^{F (n, Ls, du)} mod n (11) The token of the user U outputs τ ′. 2) The user program P performs the following calculation and extracts the encryption key K.

[0050]

Ks = r ⁻¹ τ ′ mod n (13) 3) With the extracted key Ks, the user program P decrypts the encrypted content and uses the content.

Δus is secret information du that differs for each user.
And Ds that is different for each content,
It is possible to easily and reliably realize different access control for each user and each content.

In the case of using the RSA encryption When using the RSA encryption, the token issuance and the method of extracting the user's secret information are different from the case where the above-mentioned Rabin encryption is used.

(Preparation) When the token is issued, the center
In accordance with the method of A public key encryption, the secret key dm of the administrator MA and the corresponding public key em (modulo _nm )
And generate The center encloses dm in the token Tm of the administrator MA and issues it to the administrator MA. em is public information. Furthermore, a unique secret key du is generated for each user, and the secret key du is sealed to the user's token and issued to the user.

(Retrieval of User's Secret Information) The user's token Tu is the public key em of the administrator MA and the user's secret key du.

[0055]

## ^EQU22 ## C = ^duem mod _nm (14) Encrypt and send it to the administrator. Administrator MA
Is a private key dm, which is decrypted to obtain the user's private key.

[0056]

## ^EQU23 ## du = C ^dm mod _nm (15)

The procedures for generating the access control information, locking the contents, and controlling the access are the same as in the case of using the Rabin encryption, and the description will not be repeated.

[Configuration of Access Control Information Generating Apparatus] Next, the configuration of the access control information generating apparatus according to the present invention will be described. In the present embodiment, the access control information generation device is realized as a token of a content administrator. FIG. 1 shows an access control information generating apparatus 1 according to the present invention.
08 shows the basic configuration. In FIG. 1, an access control information generation device 108 receives a user's public information 101 and information 102 on resources and
09 is output. The access control information generation device 108 includes an information input unit 103, a user secret information generation unit 1
04, data bus 105, access control information generator 10
6. It includes an information output unit 107 and an internal information storage unit 110.

In this configuration, the user information 101 input from the information input unit 103 is sent to the user secret information generation unit 104 via the data bus 105. The user secret information generation unit 104 generates user secret information from the user information 101. For example, consider generating a user secret key du as user secret information.
In this case, RSA (Rivest-S) which is a known technique is used.
hamir-Adelman) encryption. As the user information, C is encrypted by using the public key Em (modulus n _m ) of the administrator (hereinafter, simply referred to as an administrator) who is the owner of the access control information generation device 108. . That is,

[0060]

The [number 24] C = du ^Em mod n _m. C and _nm are input to the information input unit 1 as user information.
Enter 03. The input C and _nm are data bus 10
5 to the user secret information generation unit 104.
In the user secret information generation unit 104, the internal information storage unit 11
Using the secret key release key Dm of the administrator stored in

[0061]

Equation 25] As du = C ^Dm mod n _m, decodes, generates secret information du users.
Here, Em and Dm are key pairs generated based on the RSA public key method,

[0062]

[Equation 26] Em · Dm≡1 mod Φ (n _m ) Where Φ ( _nm ) is the Euler number of _nm .

The generated user secret information is sent to the access control information control unit 106 via the data bus 105. Further, the information 102 on the resources input from the information input unit 103 is also sent to the access control information control unit 106 via the data bus 105. Access control information control unit 1
Reference numeral 06 generates access control information 109 from the user's secret information and the information 102 on resources. Specifically, using the above-mentioned du and Ds as information on resources, access control information δus is

[0064]

Calculated as δus = Ds-du. Here, Ds is calculated using a certain modulus n.

[0065]

## EQU28 ## This is a number generated as Es.Ds≡1Φ (n), and Es is used to lock the content.

FIG. 2 shows another configuration example of the access information generation device 108 according to the present invention. 2, portions corresponding to those in FIG. 1 are denoted by corresponding reference numerals, and detailed description thereof is omitted. A resource information generation unit 201 is provided, and the resource information 202 is generated in the access control information generation device 108.

In this configuration, the operation for generating the user's secret information is the same as in FIG. The resource information generation unit 201 generates resource information 202. Specifically, first, a modulus n is generated. Next, generate Es,

[0068]

## EQU29 ## Ds satisfying Es · Ds≡1 mod n is generated by using, for example, the Euclidean algorithm. The generated Ds is sent to the access control information generator 106 via the data bus. The access control information generator 106 generates and outputs the access control information 109 as described above. Further, the resource information 2 for which Es is generated
02 and output. The administrator locks the content using the output Es.

FIG. 3 shows another configuration example of the access control information generating device 108 according to the present invention. In this configuration example, access control information 109 and resource information 202 are generated by receiving user public information 101 and resource information 102. In FIG. 3, FIG.
Alternatively, parts corresponding to those in FIG. 2 are denoted by corresponding reference numerals.

In this configuration, the operation for generating the user's secret information is the same as in the case of FIGS. As information 102 on resources, Ds and modulus n are input. The input Ds is sent to the resource information generation unit 201 via the data bus 105. The resource information generation unit 201 generates Es corresponding to Ds as resource information 202. In particular,

[0071]

The Es that satisfies Es · Ds≡1 mod n is generated by using, for example, the Euclidean algorithm. The input Ds is sent to the access control information generation unit 106 via the data bus 105. The access control information generator 106 generates the access control information 1 as described above.
09 is generated and output. Further, the generated Es is output as the generated resource information 202.

FIG. 4 shows an example of the configuration of information relating to resources. In FIG. 4, reference numeral 102 denotes information on resources;
Is first resource information, and 402 is second resource information. One of Es and Ds described above corresponds to the first resource information. For example, in the configuration of FIG.
In the configuration, Es is obtained. The second resource information is information describing a method of using resources. Specifically, an expiration date, a usage fee, the number of effective uses, and the like are listed. Also, in FIG. 3, only the second resource information may be input as information about resources, and both Es and Ds may be generated as in the configuration example of FIG.

FIG. 5 shows an example of the configuration of the access control information generator 106. In FIG. 5, the access control information generation unit 106 includes an internal data bus 501, a data conversion unit 50
2 and an information generation unit 503.
In this figure, the portions corresponding to FIGS. 1 to 3 are denoted by the corresponding reference numerals.

In this configuration, the secret information of the user and the information 102 related to the resources input via the data bus 105 are sent to the data conversion section 502 via the internal data bus 501. Here, for the input, the one-way conversion F
() Is performed, and the result is sent to the information generation unit 503. As described above, the information generation unit 503 uses the transmitted one-way conversion result and the information on the resources transmitted via the data bus 105 and the internal data bus as described above.
Generate access control information 106. For example, the user's secret information is du. Further, as the information on the resources, the modulus n corresponding to Es and Ds and the information L describing the use method of the resources are adopted. Then, F () is calculated using as an argument a bit combination of the secret information du of the user and information n and L on the resource, and outputs the calculation result. The output is sent to the information generating unit 503 via the internal data bus 501, and the access control information is generated by using the above Ds together. The generated access control information is output from the device via the internal data bus 501 and the data bus 105. in this case,
The access control information δus is as follows.

[0075]

Here, δus = Ds−F (n, L, du) Here, specifically, as the one-way conversion F (), a one-way hash function (for example, MD5, SHA, etc.) or a conventional key encryption (DES) , IDEA) can be used, but it is desirable that the number of bits of the output be approximately equal to the number of bits of Ds.

FIG. 6 shows an example of a configuration of the user secret information generation unit 104 of the access control information generation device (token for administrator) 108. 6, the user secret information generation unit 104 includes an internal data bus 601 and a common information storage unit 60.
2 and a data processing unit 603. In this figure, the portions corresponding to FIGS. 1 to 3 are denoted by the corresponding reference numerals.

In this configuration, the common information storage unit 603
Contains a user access control device (user token)
Is issued to the user, the issuer (specifically, the center described above) generates primes p and q in advance,
Contain it. As user information 102, public information Pu and Su when Rabin encryption is used is

[0078]

[Formula 32] Pu = du + r Su = du · r Here, r is a random number, and du is user secret information. These Pu and Su are used as user information 102.
The data is input via the data bus 105 and the internal data bus 601. In the data processing unit 603, Pu, Su,
The user's secret information du is extracted from p and q by the Rabin encryption method. The extracted du is output to the data bus via the internal data bus.

[Modification] Next, a modification of the above-described embodiment will be described. (Composition of Common Information) First, external access to the common information p and q stored in the token may be prohibited. Alternatively, as another configuration, it may be configured such that reading and writing are possible after performing a special condition, for example, authentication of the center.

Φ (n) may be included in the common information and sealed in the token in advance, or if necessary, using p and q of the common information,

[0081]

３３ (n) = (p−1) (q−1)

In the above embodiment, the configuration is based on the premise that Pu and Su are held by the token issuing center and transmitted in response to a request. As another configuration example, it may be generated as follows in the token of the user. That is, the user's token is a random number e
Is newly generated. Using the generated random number e and the secret key du, Pu and Su are

[0083]

34] Pu = du + e mod n (2) Su = du ・ e mod n (3)

Further, as still another configuration example, the center may issue Pu and Su calculated in advance by enclosing them only in the token of the user.

(Another Configuration Example of Access Control Processing) When accessing a content, the token generally does not have such a high computational power. For example, the configuration may be such that the program is carried out by a user. 1) The user's token performs the following calculation on the received K ″.

[0086]

Τ = K ″ ^{F (n, L, du)} mod n The user's token outputs τ. 2) The user program uses τ output from the token.
Then, the following calculation is performed.

[0087]

[Equation 36] 3) The user's program (or an authentication program called from it) performs the following calculation, extracts the encryption key K, and decrypts the encrypted content.

[0088]

K = r ⁻¹ τ ′ mod n When decoding the content, the content may be decoded using K in the access control unit or inside the apparatus.

(Example of Configuration of Centralized Management Type) In the present invention, unlike the conventional example, it is configured such that it is not necessary to centrally manage user information in one place. It is possible to adopt a configuration for centrally managing the information of persons.
For example, one configuration example for centrally managing user and content information is as follows.

It is assumed that the center manages user information collectively. The role of each entity is as follows.

The center generates necessary information based on the present invention, and seals them in a token as needed. Furthermore, unique information is contained as needed for each manager and each user, and a unique token is issued for each. In addition, the center has the name of each user and each administrator,
Register the issued token and the unique information contained in it in the database.

The content manager registers the content to be managed in the center. The center generates Es, Ds and modulus n for each registered content, and sends Es and n to the administrator. The center registers the generated contents corresponding to Es, Ds and the modulus n in the database. The administrator locks the content using the transmitted Es.

The user sends a content use request to the center. The center searches the content database and extracts Ds. Further, the user's database is searched to extract the user's secret information du. The center uses the extracted Ds and du to access control information δ
us

[0094]

[Formula 38] δus = Ds-du is generated, and δus is sent to the user. The user accesses the content using the δus.

[0095]

As described above, according to the present invention,
In response to a request from a user, the administrator can independently generate access control information for each user and realize access control. In addition, since the generated access control information is generated using information unique to the user, it cannot be used by users other than the legitimate users, and access by only valid users Is feasible. Furthermore, if the generated access control information and the resources are placed in the user's environment, the resources can be used. Therefore, when the resources are used, it is necessary to access the administrator's environment, that is, the host computer or the server. Without
Resources can be used offline.

[Brief description of the drawings]

FIG. 1 is a block diagram illustrating a configuration example of an access control information generation device according to an embodiment of the present invention.

FIG. 2 is a block diagram illustrating another configuration example of the access control information generation device.

FIG. 3 is a block diagram showing another example of the configuration of the access control information generation device.

FIG. 4 is a diagram illustrating information on resources used in the access control information generation device.

FIG. 5 is a block diagram illustrating a configuration example of an access control information generation unit of the access control information generation device.

FIG. 6 is a block diagram illustrating a configuration example of a user secret information generation unit of the access control information generation device.

[Explanation of symbols]

 Reference Signs List 101 Public information of user 102 Information about resources 103 Information input unit 104 User secret information generation unit 105 Data bus 106 Access control information generation unit 107 Information output unit 108 Access control information generation device 109 Access control information 110 Internal information storage unit 201 Resource information generation unit 202 Generated resource information

Claims (17)

[Claims] 1. A method for generating access control information for controlling access to a resource from secret information of a user and information on a resource, wherein the secret information of the user is generated from public information of the user. A method for generating access control information, characterized by being performed. 2. The access control information generation method according to claim 1, wherein the information on the resource is first resource information uniquely assigned to the resource and second resource information describing a method of using the resource. And a method for generating access control information. 3. A means for inputting user information, a means for inputting resource information, a means for generating user secret information from the input user information, and a generated user secret An access control information generation apparatus, comprising: means for generating access control information from information and input information about a resource; and means for outputting the generated access control information. 4. The access control information generation device according to claim 3, wherein the information on the resource is first resource information uniquely assigned to the resource and second resource information describing a method of using the resource. And an access control information generation device. 5. A means for inputting information of a user, a means for generating information about a resource, a means for outputting information about the generated resource or a part thereof, and a method for using the information of the input user. Means for generating user's secret information; means for generating access control information from the generated user's secret information and the information on the generated resources; and means for outputting the generated access control information. An access control information generating device characterized by the above-mentioned. 6. The access control information generating apparatus according to claim 5, further comprising: means for inputting information describing a method of using the resource, wherein the means for generating the access control information includes a method of using the resource. An access control information generating apparatus for generating access control information from information describing the above, the above-mentioned user secret information, and the above-mentioned information on resources. 7. A means for inputting user information, a means for inputting resource information, a means for generating resource information corresponding to this information from the input resource information, and the input user Means for generating secret information of a user from the information of the above, means for generating access control information from the generated secret information of the user and the generated resource information, and means for outputting the generated access control information. An access control information generation device, comprising: 8. The access control information generating device according to claim 7, wherein the information on the resource is first resource information uniquely assigned to the resource and second resource information describing a method of using the resource. And an access control information generation device characterized by comprising: 9. The access control information generating device according to claim 4, wherein the secret information of the user and second resource information describing a method of using the resource are stored in the access control information generating device. Means for performing one-way conversion, wherein the means for generating access control information generates access control information from a result of the one-way conversion and first resource information uniquely assigned to the resource. An access control information generation device characterized by the above-mentioned. 10. The access control information generating device according to claim 3, 4, 5, 6, 7, 8, or 9, wherein the access control information generating device is stored or generated in the device. An access control information generating apparatus, comprising: a protection unit for preventing information to be leaked and progress of processing performed in the apparatus from leaking outside. 11. The method of claim 3, claim 4, claim 5, claim 6, claim 7, claim 8, claim 9, or claim 1.
0. An access control information generating apparatus according to claim 1, further comprising a common information holding unit for holding common information with a user. 12. The access control information generation device according to claim 11, wherein the means for generating the secret information of the user includes: a common information held in the common information holding means; and information of the user. An access control information generation device, wherein the user's secret information is generated. 13. The access control information generating apparatus according to claim 12, further comprising: means for generating test information for a user; and means for outputting the test information. 14. The access control information generating apparatus according to claim 13, further comprising means for inputting access permission application information of a user corresponding to the examination information. 15. The access control information generation device according to claim 14, wherein the means for generating the user's secret information includes: the inspection information; the access permission application information;
An access control information generating device, wherein secret information of a user is generated from the common information and the information of the user. 16. Claim 3, Claim 4, Claim 5, Claim 6, Claim 7, Claim 8, Claim 9, or Claim 1.
0, further comprising encryption information holding means for holding the first encryption key information,
The access control information generating apparatus, wherein the means for generating the user secret information generates the user secret information from the user information using the first encryption key information. 17. The access control information generation device according to claim 16, wherein the input user information is encrypted by second encryption key information paired with said first encryption key information. An access control information generation device characterized by the above-mentioned.