KR100754556B1 - Vpn communication system - Google Patents

Abstract

By the device registration processing, the e-Key chips 6a to 6f mounted on the user terminals 5a to 5f are registered to the chip management center 2. Then, by the VPN service download process, the VPN service application software is downloaded from the VPN service provision center 3 and installed in the e-Key chips 6a to 6f. In addition, the VPN key is stored in the e-Key chips 6a to 6f by the VPN key generation process or the VPN key sharing process. Between the user terminals 5a to 5f belonging to the same VPN, a VPN connection is established using the VPN key stored in the e-Key chips 6a to 6f. This configuration makes it possible to communicate with other clients belonging to the same VPN regardless of the operation of the VPN server.

VPN, VPN Server, VPN Communication System, Secure Chip, e-Key Chip

Description

VP Communication System {VPN COMMUNICATION SYSTEM}

The present invention relates to a VPN communication system in which a plurality of VPNs (Virtual Private Networks) are established on a network with which terminals can communicate with each other, and only communication between users belonging to the same VPN is performed.

This application claims priority about Japanese Patent Application No. 2003-285944 for which it applied on August 4, 2003, and uses the content here.

Background Art Conventionally, a VPN communication system has a management server that distributes a communication encryption key for communicating in a VPN between those clients via a plurality of clients and a communication network. The management server manages which VPN the client belongs to using an IP (Internet Protocol) address used by the client.

Alternatively, as a refinement, the management server manages which VPN the user belongs to using the user's user ID (see, for example, Japanese Patent Laid-Open No. 2000-059357).

In these, dedicated software (VPN server software) is installed, a management server (VPN server, etc.), which has been pre-set, and dedicated software (VPN software) are installed. This is accomplished by executing a cryptographic communication protocol with security secured between the clients.

However, (1) If the management server is not operating at the time of VPN connection, VPN connection cannot be made. (2) The management server side must also install and set software software for communicating with dedicated software. (3) When a legitimate user uses a VPN on another client, the other client must install and configure dedicated software. (4) Since it is necessary to set dedicated software for the specified VPN server, the communication partner cannot be immediately changed to a client belonging to another VPN. (5) Since the authentication of the client is provided in a separate manner, it is inevitably determined whether or not the other client is a valid terminal from the beginning as the presence or absence of dedicated software.

<Start of invention>

Therefore, the present invention can not only communicate with other clients belonging to the same VPN regardless of the operation of the VPN server, but also reduce the burden of installing and setting software software on the VPN server and the clients. A VPN communication system.

In a first aspect of the present invention, a VPN communication system includes a communication terminal equipped with a secure chip and a chip management center for managing the secure chip, wherein the communication terminal is a secret key of the secure chip. Registration information signing means for signing registration information including chip information of the secure chip and the public key of the secure chip, and the public key of the chip manager of the chip management center, using the registration information signing means. Registration information encryption means for encrypting the registered information signed by the encryption registration information, encryption registration information transmission means for transmitting the encryption registration information obtained by encryption by the registration information encryption means to the chip management center; Chip public key certificate receiving means for receiving a chip public key certificate from the chip management center, and the chip; And a chip public key certificate confirming means for confirming validity of the chip public key certificate received by the open key certificate receiving means, and a chip public key certificate storing means for storing the chip public key certificate in the secure chip. The chip management center uses the encryption registration information receiving means for receiving the encryption registration information from the communication terminal and the encryption registration information received by the encryption registration information receiving means using a secret key of the chip manager of the chip management center. Registration information decrypting means for decrypting the information into the registration information attached with the signature, and a signature of the registration information obtained by decryption by the registration information decrypting means, and a public key of the secure chip included in the registration information. Signature signature verification means for verifying by using, and transmitting to said communication terminal Is a chip public key certificate creating means for creating a chip public key certificate including a public key of the secure chip, registration information registering means for registering the registration information obtained by decryption by the registration information decrypting means in a chip database; And a chip public key certificate transmitting means for transmitting the chip public key certificate created by the chip public key certificate creating means to the communication terminal.

In a second aspect of the present invention, a VPN communication system includes a communication terminal equipped with a secure chip and a VPN service providing center for providing an application software for a VPN service to the communication terminal. A service provision request signing means for signing a service provision request for requesting provision of a VPN service application software to the VPN service provision center by using the secret key of the secure chip; Service providing request means for transmitting a chip public key certificate including an attached service providing request and a public key of the secure chip stored in the secure chip to the VPN service providing center, and received by the service providing request receiving means; Chip public key authentication to verify the chip public key certificate being A statement verification means, service receiving means for receiving the VPN service application software from the VPN service providing center, and service installation means for installing the VPN service application software received by the service receiving means on the secure chip. The VPN service providing center includes a service providing request receiving means for receiving the signed service providing request and the chip public key certificate from the communication terminal, and the service providing request receiving means. Service provision request signature verification means for verifying the signature of the service provision request received by the service provision request reception means using the public key of the secure chip included in the chip public key certificate, and the application software for the VPN service. The barrel It characterized in that it includes a service transfer means for transmitting to the terminal.

In a third aspect of the present invention, a VPN communication system provides a service for generating a communication encryption key for performing communication between a communication terminal equipped with a secure chip and the communication terminal belonging to the same VPN to the communication terminal. A VPN communication system having a center, wherein the communication terminal uses a secret key of a VPN service application stored in the secure chip, to request an encryption key generation request that requires the service providing center to generate a communication encryption key. The encryption key generation request signed by the encryption key generation request signature means by using a signing means for signing a cryptographic key generation request and a public key of a service provider managing the service providing center as an encryption encryption key generation request. Encryption key generation request encryption means for encryption, and the encryption key generation request encryption means An encryption encryption key generation request obtained by encryption, an encryption key generation request transmission means for transmitting a public key certificate of a VPN service application stored in the secure chip to the service providing center, and a signature is attached from the service providing center. A generation to verify the signature of the encryption generation encryption key information received by the generation encryption key information reception means, using the generation encryption key information reception means for receiving the encrypted encryption generation encryption key information and the public key of the service provider; Generation encryption key information for decrypting the encryption generation encryption key information into a generation encryption key information including a communication encryption key and an identifier of the communication encryption key by using an encryption key information signature verification means and a secret key of the VPN service application. Decrypting means by the decrypting means and the generated encryption key information decrypting means Generating encryption key information installation means for installing the generated encryption key information obtained by the secure chip, wherein the service providing center provides the encryption encryption key generation request from the communication terminal and disclosure of the VPN service application. Encryption key generation request receiving means for receiving a key certificate, service public key certificate verification means for verifying a public key certificate of the VPN service application received by the encryption key generation request receiving means, and a secret key of the service provider Encryption key generation request decrypting means for decrypting the encryption encryption key generation request received by the encryption key generation request receiving means into the encryption key generation request with the signature, and publishing the VPN service application. Decrypts the encryption key generation request using a key Generation request signature verification means for verifying a signature of the encryption key generation request obtained by decryption by the step, communication encryption key generation means for generating a communication encryption key to be distributed to the communication terminal, and communication encryption key generation means. Generated by the communication encryption key generation means using group information storage means for registering the communication encryption key generated by the communication key and an identifier of the communication encryption key in a group information database, and a public key of the VPN service application. Generated encryption key information encryption means for encrypting the generated encryption key information including the communication encryption key and the identifier of the communication encryption key with encryption generated encryption key information, and using the secret key of the service provider to the generated encryption key encryption means. Encryption-generated encryption key information obtained by encryption by means of It characterized in that it includes the generated encryption key information transmitting means for transmitting the encrypted generated encryption key information signature is attached by the signature generation encryption key information sign means for and the generated encryption key information, the signature means to the communication terminal.

In a fourth aspect of the present invention, a VPN communication system manages a communication encryption key for performing communication between a communication terminal equipped with a secure chip and the communication terminal belonging to the same VPN, and delivers it to the communication terminal. A VPN communication system having a providing center, wherein the communication terminal uses a secret key of a VPN service application stored in the secure chip to request an encryption key sharing request to share the communication encryption key to the service providing center. Encrypting the encryption key sharing request signed by the encryption key sharing request signing means using a cryptographic key sharing request signing means for signing a signature and a public key of a service provider managing the service providing center; Encryption key sharing request encryption means for encrypting using the encryption key sharing request encryption means. An encryption encryption key sharing request obtained by encryption, an encryption key sharing request transmission means for transmitting a public key certificate of a VPN service application stored in the secure chip to the service providing center, and a signature is attached from the service providing center. A shared encryption key information receiving means for receiving encrypted encrypted shared encryption key information and a signature for verifying a signature of the encrypted shared encryption key information received by the shared encryption key information receiving means, using a public key of the service provider; Shared encryption key information for decrypting the encrypted shared encryption key information into shared encryption key information including a communication encryption key and an identifier of the communication encryption key by using an encryption key information signature verification means and a secret key of the VPN service application. Decrypting means by the decrypting means and the shared encryption key information decrypting means And a shared encryption key information installation means for installing the shared encryption key information obtained by the secure chip. The service providing center includes the encryption encryption key sharing request from the communication terminal and the disclosure of the VPN service application. Encryption key sharing request receiving means for receiving a key certificate, service public key certificate verifying means for verifying a public key certificate of the VPN service application received by the encryption key sharing request receiving means, and a public key of the service provider Encryption key sharing request decrypting means for decrypting the encrypted encryption key sharing request received by the encryption key sharing request receiving means into the encryption key sharing request with the signature, and a secret key of the service provider. By the encryption key sharing request decrypting means A shared request signature verification means for verifying a signature of the encryption key sharing request obtained by decryption, communication encryption key search means for searching for a communication encryption key to be distributed to the communication terminal, and user information of the user terminal in a group information database. And a shared encryption key including an identifier of the communication encryption key and the communication encryption key retrieved by the communication encryption key retrieval means, using group information additional registration means for registering in addition to the public key of the VPN service application. A shared encryption key information encryption means for encrypting the information into encrypted shared encryption key information, and a share for signing the encrypted shared encryption key information obtained by encryption by the shared encryption key encryption means, using a secret key of the service provider. Encryption key information signing means and the shared encryption key information The signature is attached to the encrypted shared secret key information by name means characterized by having a shared secret key information transmitting means for transmitting to the communication terminal.

In a fifth aspect of the present invention, a VPN communication system is a VPN communication system including a communication terminal equipped with a secure chip, wherein the communication terminal is connected to the same VPN using a communication encryption key stored in the secure chip. It is characterized by performing encrypted communication with another communication terminal to which it belongs.

1 is a diagram showing an outline of a VPN communication system according to an embodiment of the present invention.

2 is a diagram illustrating a configuration related to device registration processing of a VPN communication system.

3 is a diagram illustrating a procedure of device registration processing of the VPN communication system.

4 is a diagram illustrating a configuration related to VPN service download processing of a VPN communication system.

5 is a diagram illustrating a procedure of VPN service download processing of the VPN communication system.

Fig. 6 is a diagram showing a configuration related to VPN key generation processing of the VPN communication system.

7 is a diagram showing a procedure of VPN key generation processing of the VPN communication system.

8 is a diagram illustrating a configuration related to VPN key sharing processing of a VPN communication system.

9 is a diagram showing a procedure of VPN key sharing processing of the VPN communication system.

10 is a diagram illustrating a procedure of VPN establishment processing of the VPN communication system.

11 is a diagram illustrating a configuration related to VPN key invalidation processing of a VPN communication system.

Fig. 12 is a diagram showing the procedure of VPN key invalidation processing of the VPN communication system.

<Best Mode for Carrying Out the Invention>

EMBODIMENT OF THE INVENTION Very preferable embodiment of the following this invention is described, referring drawings.

1 is a diagram showing an outline of a VPN communication system according to an embodiment of the present invention. The VPN communication system 1 provides a VPN service center having a chip management center 2 having a chip information database, a user information database (for example, a user has registered his or her own user information in advance) and a group information database. A user terminal (corresponding to a communication terminal) (5a to 5f) equipped with a center (3), an identity verification service center (4) and an e-Key chip (equivalent to a secure chip) (6a to 6f). , Respectively, are connected to the Internet. In the VPN communication system 1, device registration processing (process for registering an e-Key chip in a chip management center), VPN service download process (process for downloading an application software for a VPN service to a communication terminal), VPN key generation process ( Process of creating a new VPN key), process of sharing a VPN key (process of sharing a VPN key among multiple communication terminals), process of establishing a VPN (process of establishing a VPN connection between communication terminals belonging to the same VPN group), VPN key Invalidation processing (process for invalidating the VPN key in the user terminal) is executed. Various processing will be described below in order. Examples of the communication terminal include a personal computer, a mobile phone, a portable information terminal, and the like.

<< device registration processing >>

2 is a diagram illustrating a configuration related to device registration processing of a VPN communication system. In addition, the e-Key chips 6a to 6f before starting the device registration process include the public key (hereinafter referred to as chip public key) and secret key (hereinafter referred to as chip secret key) of the e-Key chips 6a to 6f. And a public key (hereinafter referred to as a chip manager public key) of the chip manager of the chip management center 2 are stored at least.

As shown in Fig. 2, the user terminals 5a to 5f include card transmitting and receiving means 51a, transmitting and receiving means (encryption registration information transmitting means, chip public key certificate receiving means) 51b, and registration information signing means 51c. ), The registration information encrypting means 51d, the chip public key certificate checking means 51e, and the chip public key certificate storing means 51f. The card transmission / reception means 51a transmits the encryption registration information to the IC card 7 for identity authentication, and receives the encryption registration information with the signature signed by the identity authentication IC card 7. The transmission / reception means 51b transmits the encryption registration information attached to the chip management center 2 to the chip management center 2, and the chip public key certificate (certificate that the chip public key is correct) from the chip management center 2. Receive

The registration information signing means 51c registers the registration information (e-Key chips 6a to 6f) registered in the chip management center 2 using the chip secret key stored in the e-Key chips 6a to 6f. The chip information and the chip public key stored in the e-Key chips 6a to 6f).

The registration information encryption means 51d encrypts the registration information signed by the registration information signing means 51c using the chip manager public key stored in the e-Key chips 6a to 6f. Encrypt with

The chip public key certificate checking means 51e confirms the validity of the chip public key certificate received by the transmitting and receiving means 51b. This confirmation uses the chip manager public key stored in the e-Key chips 6a to 6f to select the signature (chip manager secret key (hereinafter referred to as chip manager secret key)) included in the chip public key certificate. Signatures created using the The chip public key certificate storage means 51f stores the chip public key certificate deemed legitimate by the chip public key certificate verification means 51e in the e-Key chips 6a to 6f.

As shown in Fig. 2, the chip management center 2 includes transmission and reception means (encryption registration information reception means, chip public key certificate transmission means) 21a, registration information decryption means 21b, and registration information signature verification means ( 21c), the chip public key certificate preparation means 21d, and the registration information registration means 21e. The transmission / reception means 21a receives the encryption registration information with its own signature from the user terminals 5a to 5f, and transmits the chip public key certificate to the user terminals 5a to 5f. In addition, the identity verification request is sent to the identity verification service center 4, and the identity verification result is received from the identity verification service center 4.

The registration information decrypting means 21b decrypts the encrypted registration information received by the transmitting and receiving means 21a into the registered registration information using the chip manager secret key. The registration information signature verification means 21c verifies the signature of the registration information using the chip public key included in the registration information to which the signature obtained by the decryption by the registration information decryption means 21b is attached. When the chip public key certificate creating means 21d determines that the signature is correct by the registration information signature verification means 21c, the chip public key or the like included in the registration information obtained by decryption by the registration information decrypting means 21b. Create a chip public key certificate that includes. However, the chip public key certificate includes a signature made using the chip manager secret key. If the registration information registration means 21e determines that the signature is correct by the registration information signature verification means 21c, it registers the registration information (chip information and chip public key) obtained by decryption by the registration information decryption means 21b. Store in chip information database.

3 is a diagram illustrating a procedure of device registration processing in the VPN communication system.

In the user terminals 5a to 5f, the registration information signing means 51c uses the chip secret key to register the registration information (chip information of the e-Key chips 6a to 6f) of the e-Key chips 6a to 6f. And the chip public key stored in the e-Key chips 6a to 6f) (S101).

Subsequently, the registration information encrypting means 51d encrypts the signed registration information obtained in S101 with encryption registration information using the chip manager public key (S102). The encryption registration information obtained in S102 from the card transmission / reception means 51a is transmitted to the IC card 7 for personal authentication (S103).

In the identity authentication IC card 7, when the encryption registration information is received from the user terminals 5a to 5f, the encryption registration information is signed using the IC card secret key (S104). The encryption registration information with the self signature obtained in S104 is transmitted to the user terminals 5a to 5f (S105). In the user terminals 5a to 5f, when the cryptographic registration information with the personal signature is received by the card transmitting and receiving means 51a, the cryptographic registration information with the personal signature is transmitted by the transmitting and receiving means 51b to the user terminal 5a. ~ 5f) to the chip management center 2 (S106).

In the chip management center 2, when the encryption registration information with the self signature is received by the transmission / reception means 21a, the encryption registration information with the signature by the transmission / reception means 21a is sent to the IC card identity verification service center ( 4), the identity verification request is made to the IC card identity verification service center 4 (S107). In the IC card identity verification service center 4 that has been asked for identity verification, the identity signature (signature of S104) is verified using the IC card public key, and identity verification is performed, and the identity verification result is sent to the chip management center 2. (S108).

If the chip management center 2 is notified that it is its identity, the registration information decrypting means 21b uses the chip manager secret key to convert the encrypted registration information received by the transmitting and receiving means 21a into the signed registration information. Decode (S109). Subsequently, the registration information signature verification means 21c verifies the signature (signature of S101) of the registration information using the chip public key included in the registration information with the signature obtained in S109 (S110). If it is judged that the signature is correct, the chip public key certificate creating means 21d creates a chip public key certificate including the chip public key included in the registration information obtained in S109 (S111). Subsequently, the registration information registration means 21e stores the chip information and the chip public key included in the registration information obtained in S109 in the chip information database (S112). Then, the chip public key certificate created in S111 is transmitted from the transmitting and receiving means 21a to the user terminals 5a to 5f (S113).

When the chip public key certificate is received by the transmitting and receiving means 51b in the user terminals 5a to 5f, the chip public key certificate checking means 51e verifies the validity of the chip public key certificate (S114). When the chip public key certificate is confirmed to be valid, the chip public key certificate storing means 51f stores the chip public key certificate received by the transmitting and receiving means 51b in the e-Key chips 6a to 6f ( S115).

In the device registration process, although identity verification is performed using the IC card for identity authentication, the present invention is not limited to this, but the user directly inputs authentication information in the user terminals 5a to 5f, and together with the registration information. You may make it transmit to the chip management center 2. In addition, if security is not a problem, the encryption registration information may be transmitted from the transmission / reception means 51b except for the processing (S104, S107, S108) of performing personal authentication. Moreover, you may register together the information of the user who performed the registration process in the chip information database.

<VPN Service Download Processing >>

4 is a diagram illustrating a configuration related to VPN service download processing of the VPN communication system. Also, at least the chip public key and chip secret key, chip manager public key and chip public key certificate (stored by the device registration process) are stored in the e-Key chips 6a to 6f before the VPN service download process is started. It is.

As shown in Fig. 4, the user terminals 5a to 5f are transmitting and receiving means (service providing means, service receiving means) 52a, service providing request signing means 52b, service installation means 52c, and personal. The rise means 52d is provided. The transmission / reception means 52a provides a VPN service with a chip public key certificate including a signed service download request (corresponding to a service provision request) and a chip public key stored in the e-Key chips 6a to 6f. In addition to transmitting to the center 3, the VPN service application center 3 receives application software for VPN service (software for securing a memory in the e-Key chips 6a to 6f). The service provision request signing means 52b signs a service download request for downloading the VPN service application software by using the chip secret key stored in the e-Key chips 6a to 6f. The service installation means 52c installs the VPN software application software received by the transmission and reception means 52a on the e-Key chips 6a to 6f. The personalization means 52d personalizes the personalized data encrypted using the chip public key and the service provider secret key (generates a key on the service application).

As shown in FIG. 4, the VPN service provision center 3 is provided with the transmission / reception means 32a, the service provision request signature verification means 32b, and the transmission availability determination means 32c.

The transmission / reception means 32a receives the signed service download request and chip public key certificate from the user terminals 5a to 5f, and transmits the VPN service application software to the user terminals 5a to 5f. In addition, a download permission request is sent to the chip management center 2, and a result of determining whether or not to download permission is received from the chip management center 2. The service provision request signature verification means 32b verifies the signature of the service download request received by the transmission / reception means 32a using the chip public key included in the chip public key certificate received by the transmission / reception means 32a. do. The transfer permission determination means 32c judges whether the transfer of the VPN application software to the user terminals 5a to 5f is considered in consideration of the user's previous situation and the like.

5 is a diagram illustrating a procedure of VPN service download processing in the VPN communication system.

In the user terminals 5a to 5f, the service provision request signing means 52b signs the service download request using the chip secret key (S201). Then, the service download request and the chip public key certificate signed in S201 are transmitted from the transmitting and receiving means 52a to the VPN service providing center 3 (S202).

In the VPN service providing center 3, upon receipt of the signed service download request and the chip public key certificate by the transmitting and receiving means 32a, the service providing request signature verification means 32b is included in the chip public key certificate. The signature of the service download request (signed in S201) is verified using the chip public key (S203). If it is determined that the signature is correct, the download permission request is transmitted from the transmission and reception means 32a to the chip management center 2 (S204). In the chip management center 2, if there is a download permission request from the VPN service providing center 3, the e-Key chips 6a to 6f of the user terminals 5a to 5f that have made a service download request are registered in the chip information database. On the basis of whether or not it is determined, it is judged whether or not to download the VPN service application software, and the VPN service providing center 3 is notified of the download or not (S205).

In the VPN service providing center 3, if there is a notification of the download permission from the chip management center 2, the transfer permission determining means 32c determines whether or not to download the VPN service application software (S206). When the download is allowed, the VPN service application software is transmitted from the transmission / reception means 32a to the user terminals 5a to 5f by encrypted communication (S207).

When the user terminal 5a to 5f receives the VPN service application software by the transmission / reception means 52a, the service installation means 52c installs the VPN service application software to the e-Key chips 6a to 6f. (S208).

Subsequently, the personalization means 52d personalizes the personalized data encrypted using the chip public key and the service provider secret key (S209). The VPN service download process may be created so as not to include the process of S209. In addition, you may verify whether the application software itself is correct before installing. In addition, you may notify the VPN service provision center of the result of installation and personalization.

<< VPN key generation process >>

6 is a diagram illustrating a configuration related to VPN key generation processing of the VPN communication system. In addition, the e-Key chips 6a to 6f before starting the VPN key generation process include a chip public key and a chip secret key, a chip manager public key, a service AP public key and a service AP secret key, and a manager of a VPN service center. The public key (service provider public key) and service AP public key certificate of the managing VPN service provider are stored at least. However, the service AP public key, service AP secret key, service provider public key, and service AP public key certificate are stored in the e-Key chips 6a to 6f appropriately after the VPN service download process. In addition, the service AP public key certificate includes the service AP public key and has a signature made of a VPN service provider's private key or a third party's private key recognized by the VPN service provider (hereinafter referred to as a service provider private key). .

As shown in Fig. 6, the user terminals 5a to 5f include transmission and reception means (encryption key generation request transmission means, generation encryption key information reception means) 53a, encryption key generation request signature means 53b, and encryption key. The generation request encryption means 53c, the generation encryption key information signature verification means 53d, the generation encryption key information decryption means 53e, and the generation encryption key information installation means 53f. The transmission / reception means 53a requests the VPN service providing center 3 an encryption encryption key generation request, the service AP public key certificate stored in the e-Key chips 6a to 6f, and the usage permission conditions (expiration date, usage count, etc.). ), And receives encryption-generated encryption key information with a signature including a VPN key, an identifier (key ID) of the corresponding VPN key, expiration date information, and the like. The encryption key generation request signature means 53b corresponds to a VPN key (communication encryption key for the VPN service providing center 3) using the service AP secret key stored in the e-Key chips 6a to 6f. Sign a cryptographic key generation request that requires the The encryption key generation request encryption means 53c generates an encryption key signed by the encryption key generation request signature means 53b using the service provider public key stored in the e-Key chips 6a to 6f. Encrypt the request with an encryption encryption key generation request.

The generated encryption key information signature verification means 53d uses the service provider public key stored in the e-Key chips 6a to 6f to sign the encryption generated encryption key information received by the transmission and reception means 53a. Verify. When the generated encryption key information decrypting means 53e determines that the signature is correct by the generated encryption key information signature verification means 53d, the generated encryption key information decrypting means 53e uses the service AP secret key stored in the e-Key chips 6a to 6f. The encryption generation encryption key information received by the transmission / reception means 53a is decrypted into generated encryption key information including the VPN key, the key ID, the expiration date information, and the like. The generated encryption key information installation means 53f stores the generated encryption key information (VPN key, key ID, expiration date information, etc.) obtained by the decryption by the generated encryption key information decryption means 53e. 6f).

As shown in Fig. 6, the VPN service providing center 3 includes transmission and reception means (encryption key generation request reception means, generation encryption key information transmission means) 33a, service AP public key certificate verification means (service public key certificate). Verification means) 33b, key generation possible verification means 33c, encryption key generation request decrypting means 33d, generation request signature verification means 33e, communication encryption key creation means 33f, additional means 33g, The group information storage means 33h, the generated encryption key information encryption means 33i, and the generated encryption key information signing means 33j are provided.

The transmission / reception means 33a transmits, to the user terminals 5a to 5f, encryption-generated encryption key information with a signature including a VPN key, an identifier (key ID) of the corresponding VPN key, expiration date information, and the like, Receives an encryption encryption key generation request from the user terminals 5a to 5f, a service AP public key certificate stored in the e-Key chips 6a to 6f, and usage permission conditions (expiration date, usage count, etc.). The service AP public key certificate verification means 33b verifies the validity of the service AP public key certificate (performs user authentication). Specifically, the service provider public key is used to verify the signature of the service AP public key certificate. The key generation possible verification means 33c judges whether or not the user can generate the key based on the use permission condition. The encryption key generation request decrypting means 33d decrypts the encryption encryption key generation request received by the transmission and reception means 33a into a signed encryption key generation request using the service provider secret key. The generation request signature verification means 33e verifies the signature of the encryption key generation request obtained by decryption by the encryption key generation request decryption means 33d, using the service AP public key.

The communication encryption key generation means 33f determines that the service AP public key certificate is correct by the service AP public key certificate verification means 33b, and determines that the user can generate a key by the key generation possible verification means 33c. If the signature is determined to be correct by the generation request signature verification means 33e, the VPN key is generated. The additional means 33g includes the expiration date information included in the VPN key generated by the communication encryption key generation means 33f in the identifier (key ID) of the VPN key and the license terms from the user terminals 5a to 5f. Additional information such as this is added. The group information storage means 33h is registered in the group information (the VPN key generated by the communication encryption key generation means 33f, the additional information added to the VPN key by the additional means 33g, and the user information database. User information that has issued an encryption key generation request) is registered in the group information database. The generated encryption key information encryption means 33i encrypts and generates a VPN key (generated encryption key information) to which the additional information is added by the additional means 33g, using the service AP public key included in the service AP public key certificate. Encrypt with encryption key information. The generated encryption key information signing means 33j signs the encrypted generated encryption key information obtained by the generated encryption key information encrypting means 33i using the service provider secret key.

7 is a diagram illustrating a procedure of VPN key generation processing in the VPN communication system.

In the user terminals 5a to 5f, the encryption key generation request signing means 53b signs the encryption key generation request using the service AP secret key (S301). Subsequently, the encryption key generation request encryption means 53c encrypts the encryption key generation request with the signature obtained in S301 using the service provider public key as the encryption encryption key generation request (S302). The encryption encryption key generation request, the service AP public key certificate, and the usage permission condition obtained in S302 are transmitted from the transmission / reception means 53a to the VPN service providing center 3 (S303).

In the VPN service providing center 3, when an encryption encryption key generation request or the like is received by the transmission / reception means 33a, the service AP public key certificate verification means 33b verifies the service AP public key certificate and generates a key. The possible verification means 33c determines whether or not the user can generate a key (S304). Subsequently, the encryption key generation request decrypting means 33d decrypts the encryption encryption key generation request into a signed encryption key generation request using the service provider secret key (S305). Further, the generation request signature verification means 33e verifies the signature (signature of S301) of the encryption key generation request using the service AP public key (S306). If the service AP public key certificate is legitimate and the user who can generate the key and the signature of the encryption key generation request is considered correct, the communication encryption key generation means 33f generates the VPN key (S307). Subsequently, the adding means 33g adds additional information (key ID, expiration date information, etc.) to the VPN key generated in S307 (S308). Subsequently, the group information storage means 33h registers the group information (VPN key, additional information and user information) in the group information database (S309). In addition, the generated encryption key information encryption means 33i encrypts the generated encryption key information including the VPN key and the additional information with the encrypted generated encryption key information using the service AP public key (S310). Subsequently, the generated encryption key information signing means 33j signs the encryption generated encryption key information obtained in S310 by using the service provider secret key (S311). Then, the transmission / reception means 33a transmits the encryption generation encryption key information signed by S311 to the user terminals 5a to 5f (S312).

In the user terminals 5a to 5f, upon receipt of the signed encryption generation encryption key information by the transmission / reception means 53a, the generation encryption key information signature verification means 53d generates the encryption using the service provider public key. The signature (signature of S311) of the encryption key information is verified (S313). If it is determined that the signature is correct, the generated encryption key information decrypting means 53e decrypts the encryption generated encryption key information into the generated encryption key information using the service AP secret key (S314). Subsequently, the generated encryption key information installation means 53f installs the generated encryption key information (VPN key, key ID, expiration date information, etc.) obtained by the decryption in S314 to the e-Key chips 6a to 6f. (S315).

<< VPN key sharing processing >>

8 is a diagram illustrating a configuration related to VPN key sharing processing of the VPN communication system. The e-Key chips 6a to 6f before starting the VPN key sharing process are substantially the same as the state before starting the VPN key generation process except for the VPN key and the information thereof.

As shown in Fig. 8, the user terminals 5a to 5f transmit and receive means (encryption key sharing request transmission means, shared encryption key information receiving means) 54a, search request means 54b, encryption key sharing request signature. Means 54c, encryption key sharing request encryption means 54d, shared encryption key information signature verification means 54e, shared encryption key information decryption means 54f, and shared encryption key information installation means 54g.

The transmission / reception means 54a transmits the encryption encryption key sharing request, the service AP public key certificate and the key ID stored in the e-Key chips 6a to 6f to the VPN service providing center 3, and the VPN service. Encrypted shared encryption key with search result including key ID of VPN which you want to participate from offer center 3, signature including VPN key, identifier (key ID) of the VPN key, expiration date information, etc. Receive information. The search requesting means 54b requests the VPN service providing center 3 to search for a VPN to participate in. The encryption key sharing request signing means 54c uses the service AP secret key stored in the e-Key chips 6a to 6f to encrypt the VPN key to the VPN service providing center 3 for sharing the VPN key. Sign the sharing request. The encryption key sharing request encryption means 54d uses the service provider public key stored in the e-Key chips 6a to 6f to share the encryption key signed by the encryption key sharing request signature means 54c. Encrypt the request with an encryption encryption key sharing request.

The shared cryptographic key information signature verification means 54e verifies the signature of the encrypted shared cryptographic key information using the service provider public key stored in the e-Key chips 6a to 6f. When the shared encryption key information decryption means 54f determines that the signature is correct by the shared encryption information signature verification means 54e, the shared encryption key information decryption means 54f encrypts using the service AP secret key stored in the e-Key chips 6a to 6f. The shared encryption key information is decrypted into shared encryption key information including a VPN key, key ID, expiration date information, and the like. The shared encryption key information installation means 54g stores the shared encryption key information (VPN key, key ID, expiration date information, etc.) obtained by the decryption by the shared encryption key information decryption means 54f. 6f).

As shown in Fig. 8, the VPN service providing center 3 includes transmission and reception means (encryption key sharing request reception means, shared encryption key information transmission means) 34a, participation wanted VPN retrieval means 34b, and service AP disclosure. Key certificate verification means (service public key certificate verification means) 34c, encryption key sharing request decryption means 34d, sharing request signature verification means 34e, participation target VPN retrieval means 34f, shareable verification means 34g ), User information addition registration means 34h, shared encryption key information encryption means 34i, and shared encryption key information signing means 34j.

The transmission / reception means 34a includes a search result including the key ID of the VPN which the user terminal wishes to participate in the user terminals 5a to 5f, the VPN key, the identifier (key ID) of the corresponding VPN key, and the expiration date information. Sends encrypted shared encryption key information with a signature including a signature, and the like, and retrieves a VPN request from the user terminals 5a to 5f, a shared encryption key share request, a key ID and e-Key of a VPN to be joined. The service AP public key certificate stored in the chips 6a to 6f is received. The participation desired VPN retrieval means 34b searches for a VPN which the user terminal wants to participate with reference to the group information database, and transmits a search result such as a key ID to the user terminals 5a to 5f via the transmission and reception means 34a. Pass it. The service AP public key certificate verification means 34c verifies the legitimacy of the service AP public key certificate by the same method as that of the service AP public key certificate verification means 33b (authenticates the user). The encryption key sharing request decrypting means 34d decrypts the encryption encryption key sharing request received by the transmission and reception means 34a into a signed encryption key sharing request using the service provider secret key. The sharing request signature verification means 34e verifies the signature of the encryption key sharing request obtained by decryption by the encryption key sharing request decryption means 34d, using the service AP public key included in the service AP public key certificate. . If the participation target VPN retrieval means 34f determines that the service AP public key certificate is correct by the service AP public key certificate verification means 34c, and the signature is determined to be correct by the sharing request signature verification means 34e, In the group information database, group information is retrieved based on the key ID received by the transmission / reception means 34a. Shareable verification means 34g verifies whether the expiration date has passed, for example, and verifies whether the VPN key can be shared. If it is determined that the user information addition registration means 34h can be shared by the sharable verification means 34g, the user of the user who has requested the sharing of the VPN key in association with the key ID received by the transmission / reception means 34a. Adds information (user information stored in the user information database) to the group information database.

The shared encryption key information encryption means 34i uses the service AP public key to convert the shared encryption key information including the VPN key, the key ID, the expiration date information, and the like stored in the group information database into the encrypted shared encryption key information. Encrypt The shared cryptographic key information signing means 34j signs the encrypted shared cryptographic key information obtained by the shared cryptographic key information encrypting means 34i using the service provider secret key.

9 is a diagram illustrating a procedure of VPN key sharing processing in the VPN communication system. In addition, it is assumed that the user terminal 5a requests sharing of the VPN key, and the user terminal 5b participates in the VPN of the VPN key which has been requested to share.

In the user terminal 5a, the search requesting means 54b requests the VPN service providing center 3 to search for the VPN that the user wants to participate in (S401). On the other hand, in the VPN service provision center 3, the participation desired VPN retrieval means 34b searches for the VPN which the user wanted to participate in, and transmits a search result including the key ID and the like to the user terminal 5a ( S402). When the user terminal 5a receives the search result by the transmission and reception means 54a, the encryption key sharing request signing means 54c signs the encryption key sharing request using the service AP secret key (S403). . Subsequently, the encryption key sharing request encryption means 54d encrypts the encrypted encryption key sharing request with the signature obtained in S403 using the service provider public key (S404). Then, the encrypted encryption key sharing request obtained in S404, the key ID notified as a search result, and the service AP public key certificate obtained from the transmission / reception means 54a are transmitted to the VPN service providing center 3 (S405).

In the VPN service providing center 3, when an encryption encryption key sharing request or the like is received by the transmission / reception means 34a, the service AP public key certificate verification means 34c verifies the service AP public key certificate (S406). Subsequently, the encryption key sharing request decrypting means 34d decrypts the encrypted encryption key sharing request received by the transmitting and receiving means 34a into the signed encryption key sharing request using the service provider secret key ( S407). Also, the sharing request signature verification means 34e verifies the signature (signature of S403) of the encryption key sharing request using the service AP public key (S408). If the service AP public key certificate is valid and the signature of the encryption key sharing request is considered correct, then the participation target VPN retrieval means 34f retrieves the participating target VPN (S409). Subsequently, the shareable verification means 34g verifies whether the VPN key is shared (S410). If it is thought that sharing is possible, the user information addition registration means 34h registers the user information in the group information database (S411). In addition, the shared encryption key information encrypting means 34i encrypts the shared encryption key information including the VPN key and the additional information with the encrypted shared encryption key information using the service AP public key (S412). Subsequently, the shared encryption key information signing means 34j signs the encrypted shared encryption key information obtained in S412 by using the service provider secret key (S413). Then, the transmission and reception means 34a transmits the encrypted shared encryption key information signed by S413 to the user terminal 5a (S414). At the same time, a new participant is notified to the user terminal 5b (S418).

When the user terminal 5a receives the encrypted shared encryption key information signed by the transmission and reception means 54a, the shared encryption key information signature verification means 54e uses the service provider public key to encrypt the encrypted shared encryption key. The signature of the information (signature of S413) is verified (S415). If it is determined that the signature is correct, the shared encryption key information decrypting means 54f decrypts the encrypted shared encryption key information into the shared encryption key information using the service AP secret key (S416). Subsequently, the shared cryptographic key information installation means 54g installs the shared cryptographic key information (VPN key, key ID, expiration date information, etc.) obtained by the decryption in S416 on the e-Key chip 6a ( S417).

<VPN Construction Processing >>

In the VPN establishment process of the VPN communication system, communication is performed between the user terminals 5a to 5f in which the same VPN key is stored in the e-Key chips 6a to 6f. At this time, the user terminals 5a to 5f verify the attributes of the VPN key (expiration date, usage count, etc.).

10 is a diagram illustrating a procedure of VPN establishment processing in the VPN communication system. In addition, it is assumed that communication is performed between the user terminal 5a and the user terminal 5b.

In each of the user terminal 5a and the user terminal 5b, the attributes (the number of times of use, the period of use, etc.) of the VPN key to be used are verified (S501, S502). When the VPN key can be used by both the user terminal 5a and the user terminal 5b, encrypted communication is performed between the user terminal 5a and the user terminal 5b using the prescribed VPN key (S503). ).

<< VPN key invalid processing >>

11 is a diagram showing a configuration related to VPN key invalidation processing of the VPN communication system. In addition, the e-Key chips 6a to 6f before starting the VPN key invalidation process include a chip public key and a chip secret key, a chip manager public key, a service AP public key and a service AP secret key, a service provider public key, and a service. At least information related to the AP public key certificate and the VPN key is included.

As shown in Fig. 11, the user terminals 5a to 5f transmit and receive means 56a, attribute verification means 56b, encryption key deletion means 56c, information deletion request signature means 56d, and determination notification. The information signature verification means 56e is provided. The transmission and reception means 56a transmits the information deletion request to the VPN service providing center 3 and the service AP public key certificate stored in the e-Key chips 6a to 6f, and the VPN service providing center 3 Receive decision notification information from the server. The attribute verification means 56b verifies the attribute (expiration date, etc.) of the VPN key to be used. The encryption key deletion means 56c deletes the VPN key to be verified from the e-Key chips 6a to 6f when it is determined that the attribute verification means 56b is unavailable (e.g., has expired). . If the information deletion request signing means 56d is determined to be unavailable by the attribute verification means 56b, the e-Key chip 6a using the service AP secret key stored in the e-Key chips 6a to 6f. The key ID stored in ˜6f) and the VPN service providing center 3 sign an information deletion request requesting deletion of the user information. The decision notification information signature verification means 56e verifies the signature of the decision notification information received by the transmission and reception means 56a using the service provider public key stored in the e-Key chips 6a to 6f.

As shown in Fig. 11, the VPN service providing center 3 includes the transmission / reception means 36a, the service AP public key certificate verification means 36b, the deletion request signature verification means 36c, and the deletion target VPN retrieval means 36d. ), Use availability judgment means 36e, group information update means 36f, and decision notification information signing means 36g. The transmission / reception means 36a receives the information deletion request from the user terminals 5a to 5f and transmits the decision notification information to the user terminals 5a to 5f. The service AP public key certificate verification means 36b performs substantially the same processing as the service AP public key certificate verification means 33b to verify the service AP public key certificate (authentication of the device). The deletion request signature verification means 36c, if the service AP public key certificate is determined to be correct by the service AP public key certificate verification means 36b, is received by the transmission and reception means 36a using the service AP public key. Validate the signature of the key ID and information deletion request. When the deletion target VPN retrieval means 36d thinks that the signature is correct by the deletion request signature verification means 36c, the deletion target VPN is based on the key ID received by the transmission and reception means 36a in the information group database. Search for. The usability determination means 36e confirms the expiration date, etc. of the VPN searched by the deletion target VPN search means 36d, and judges the useability. The group information updating means 36f deletes the user information included in the group information of the VPN retrieved from the group information database when it is considered unavailable by the use availability judging means 36e. The decision notification information signing means 36g uses the VPN service provider private key to sign decision notification information including the deletion of the user information, the key ID, or the like as determined to be unavailable.

12 is a diagram showing the procedure of VPN key invalidation processing in the VPN communication system. In addition, it is assumed that the user terminal 5a makes a deletion request, and the user terminal 5b participates in the VPN that is the target of the deletion request.

In the user terminal 5a, the attribute verification means 56b verifies the attribute of the VPN key to be used (S601). If the VPN key cannot be used, the encryption key deletion means 56c deletes the VPN key from the e-Key chip 6a (S602). Subsequently, the information deletion request signing means 56d signs the key ID and the information deletion request using the service AP secret key (S603). Then, the signed information deletion request, the key ID and the service AP public key certificate are transmitted from the transmission / reception means 56a to the VPN service providing center 3 (S604).

In the VPN service providing center 3, upon receipt of the signed information deletion request and the key ID or the service AP public key certificate from the user terminal 5a by the transmission and reception means 36a, the service AP public key certificate verification means ( 36b) verifies the service AP public key certificate (S605). Subsequently, if it is determined that the service AP public key certificate is correct, the deletion request signature verification means 36c verifies the signature of the information deletion request (signature of S603) using the service AP public key (S606). Subsequently, if it is determined that the signature is correct, the deletion target VPN retrieving means 36d retrieves the deletion target VPN (S607). Subsequently, the use availability judging means 36e determines whether or not the VPN key is used (S608). If it is determined that it is unavailable, the group information updating means 36f deletes the user information from the group information database (S609). In addition, the decision notification information signing means 36g signs the decision notification information using the service provider secret key (S610). The decision notification information with the signature attached to the user terminal 5a is transmitted by the transmission / reception means 36a (S611), and a member whose VPN key is invalidated to another user terminal 5b belonging to the VPN to be deleted. Notify (S613).

In the user terminal 5a, when the judgment notification information is received by the transmission / reception means 56a, the judgment notification information signature verification means 56e uses the service provider public key to sign the signature (signature of S610). Verify (S612). After that, by analyzing the determination notification information, it can be seen that the user information of the user has been deleted from the group information database of the VPN service providing center 3.

Further, by performing the VPN key generation process or the VPN key sharing process a plurality of times, a plurality of different VPN keys can be stored in the e-Key chips 6a to 6f.

According to the above-described embodiment, since a VPN connection is established by using the VPN keys stored in the e-Key chips 6a to 6f, the user terminals belonging to the same VPN even if the VPN service providing center is not operating. In this period, a VPN connection can be established. In addition, since the load on the user terminal at the time of VPN connection is reduced (the process of requesting an encryption key from the center every time the VPN connection is unnecessary), it is possible to cope with VPN connection of many user terminals.

In addition, it is possible to build a network base that provides a variety of services (membership service, content distribution, remote maintenance of information equipment, etc.) that require the structure of a secure information service. Moreover, since a user etc. are managed by a VPN service provision center, the service which charges a user etc. can be implement | achieved, for example.

In addition, the procedure executed by each of the means constituting each device described in the device registration process, VPN service download process, VPN key generation process, VPN key sharing process, VPN establishment process, and VPN invalidation process is executed in the form of a computer. The apparatus of the present invention may be realized by recording on a readable recording medium and reading and executing a program recorded on the recording medium into a computer. Incidentally, the above processes may be executed by using the devices realized in this way. The computer-readable recording medium herein refers to a magnetic disk, a magneto-optical disk, a CD-ROM, a DVD-ROM, a semiconductor memory, and the like. The computer program may be distributed to a computer by a communication line, and the computer that has received this distribution may execute the program.

As mentioned above, although preferred embodiment of this invention was described, this invention is not limited to embodiment mentioned above, Various design changes are possible within the range as described in a claim.

According to the present invention, it is possible not only to communicate with other clients belonging to the same VPN regardless of the operation of the VPN server, but also to reduce the burden of installing and setting software software on the VPN server and the client.

Claims (5)

A VPN communication system having a communication terminal equipped with a secure chip, Secure chip management means for registering registration information including chip information of said secure chip mounted in a first communication terminal; Application distributing means for distributing a communication application to the first communication terminal based on the registration information; Encryption key generation means for generating a communication encryption key based on said registration information and said communication application information and transmitting it to said first communication terminal; An encryption key sharing means for registering the encryption key in accordance with a request of the first communication terminal and distributing the encryption key in accordance with a request of a second communication terminal, And the first communication terminal and the second communication terminal perform encrypted communication using the encryption key. The method of claim 1, The secure chip management means includes a communication terminal equipped with a secure chip, and a chip management center for managing the secure chip. The communication terminal, Registration information signing means for signing registration information including chip information of the secure chip and a public key of the secure chip using the secret key of the secure chip; Registration information encryption means for encrypting the registration information signed by the registration information signing means with encryption registration information using a public key of the chip manager of the chip management center; Encryption registration information transmission means for transmitting the encryption registration information obtained by encryption by the registration information encryption means to the chip management center; Chip public key certificate receiving means for receiving a chip public key certificate from the chip management center; Chip public key certificate verification means for confirming validity of the chip public key certificate received by the chip public key certificate receiving means; A chip public key certificate storage means for storing the chip public key certificate in the secure chip; The chip management center, Encryption registration information receiving means for receiving the encryption registration information from the communication terminal; Registration information decrypting means for decrypting the encryption registration information received by the encryption registration information receiving means into the registration information with the signature, using a secret key of the chip manager of the chip management center; Registration information signature verification means for verifying a signature of the registration information obtained by decryption by the registration information decrypting means using a public key of the secure chip included in the registration information; Chip public key certificate creating means for creating a chip public key certificate including the public key of the secure chip transmitted to the communication terminal; Registration information registration means for registering the registration information obtained by decryption by the registration information decoding means in a chip database; And a chip public key certificate transmitting means for transmitting a chip public key certificate created by said chip public key certificate creating means to said communication terminal. The method of claim 1, The application distributing means includes a communication terminal equipped with a secure chip, a VPN service providing center for providing application software for VPN service to the communication terminal, The communication terminal, A service provision request signing means for signing a service provision request for requesting provision of a VPN service application software to the VPN service provision center by using the secret key of the secure chip; Service providing request means for transmitting a chip public key certificate including a service providing request signed by the service providing request signing means and a public key of the secure chip stored in the secure chip, to the VPN service providing center; , Service receiving means for receiving the application software for the VPN service from the VPN service providing center; Service installation means for installing the VPN application software received by the service receiving means on the secure chip; The VPN service providing center, Service providing request receiving means for receiving the signed service providing request and the chip public key certificate from the communication terminal; Chip public key certificate verification means for verifying the chip public key certificate received by the service provision request receiving means; A service provision request signature which verifies the signature of the service provision request received by the service provision request receiving means using the public key of the secure chip included in the chip public key certificate received by the service provision request receiving means Verification means, And a service transmitting means for transmitting the application software for the VPN service to the communication terminal. The method of claim 1, The encryption key generating means includes a service providing center for generating a communication encryption key for performing communication between the communication terminal equipped with a secure chip and the communication terminal belonging to the same VPN, and delivering it to the communication terminal, The communication terminal, Encryption key generation request signature means for signing an encryption key generation request for requesting generation of a communication encryption key to the service providing center by using a secret key of a VPN service application stored in the secure chip; Encryption key generation request encryption means for encrypting the encryption key generation request signed by the encryption key generation request signing means into an encryption encryption key generation request using a public key of a service provider managing the service providing center; An encryption encryption key generation request obtained by encryption by the encryption key generation request encryption means, and encryption key generation request transmission means for transmitting a public key certificate of the VPN service application stored in the secure chip to the service providing center; , Generating encryption key information receiving means for receiving signed encrypted encryption key information from the service providing center; Generation encryption key information signature verification means for verifying a signature of the encryption generation encryption key information received by the generation encryption key information receiving means using the public key of the service provider; Generation encryption key information decrypting means for decrypting the encryption generation encryption key information into generation encryption key information including a communication encryption key and an identifier of the communication encryption key using a secret key of the VPN service application; Generating encryption key information installation means for installing the generated encryption key information obtained by decryption by said generated encryption key information decrypting means into said secure chip, The service providing center, Encryption key generation request reception means for receiving the encryption encryption key generation request and the public key certificate of the VPN service application from the communication terminal; Service public key certificate verification means for verifying a public key certificate of the VPN service application received by the encryption key generation request receiving means; Encryption key generation request decrypting means for decrypting the encryption encryption key generation request received by the encryption key generation request receiving means into the encryption key generation request with the signature, using the secret key of the service provider; Generation request signature verification means for verifying a signature of the encryption key generation request obtained by decryption by the encryption key generation request decryption means using the public key of the VPN service application; Communication encryption key generation means for generating a communication encryption key distributed to the communication terminal; Group information storage means for registering an identifier of the communication encryption key and the communication encryption key generated by the communication encryption key generation means in a group information database; Generation of encrypting, using the public key of the VPN service application, generated encryption key information including the communication encryption key generated by the communication encryption key generation means and an identifier of the communication encryption key with encryption generation encryption key information. Means for encrypting encryption key information; Generation encryption key information signing means for signing the encryption generation encryption key information obtained by encryption by the generation encryption key encryption means, using the secret key of the service provider; And a generation encryption key information transmission means for transmitting the encryption generation encryption key information signed by the generation encryption key information signing means to the communication terminal. The method of claim 1, The encryption key sharing means includes a communication terminal equipped with a secure chip and a service providing center that manages a communication encryption key for performing communication between the communication terminals belonging to the same VPN and delivers it to the communication terminal, The communication terminal, Encryption key sharing request signing means for signing an encryption key sharing request for sharing the communication encryption key with the service providing center by using a secret key of the VPN service application stored in the secure chip; Encryption key sharing request encryption means for encrypting the encryption key sharing request signed by the encryption key sharing request signing means into an encryption encryption key sharing request using a public key of the service provider managing the service providing center; An encryption encryption key sharing request obtained by encryption by the encryption key sharing request encryption means, and an encryption key sharing request transmission means for transmitting the public key certificate of the VPN service application stored in the secure chip to the service providing center; , Shared encryption key information receiving means for receiving signed encrypted shared encryption key information from the service providing center; Shared encryption key information signature verification means for verifying a signature of the encrypted shared encryption key information received by the shared encryption key information receiving means, using the public key of the service provider; Shared encryption key information decrypting means for decrypting the encrypted shared encryption key information into shared encryption key information including a communication encryption key and an identifier of the communication encryption key using a secret key of the VPN service application; Shared cryptographic key information installation means for installing shared cryptographic key information obtained by decryption by said shared cryptographic key information decrypting means into said secure chip, The service providing center, Encryption key sharing request receiving means for receiving the encryption encryption key sharing request and the public key certificate of the VPN service application from the communication terminal; Service public key certificate verification means for verifying a public key certificate of the VPN service application received by the encryption key sharing request receiving means; Encryption key sharing request decrypting means for decrypting the encryption encryption key sharing request received by the encryption key sharing request receiving means into the encryption key sharing request with the signature, using the public key of the service provider; Sharing request signature verification means for verifying a signature of the encryption key sharing request obtained by decryption by the encryption key sharing request decryption means, using the secret key of the service provider; Communication encryption key retrieval means for retrieving a communication encryption key distributed to the communication terminal; Group information addition registration means for additionally registering user information of the user terminal in a group information database; A share that encrypts the shared encryption key information including the communication encryption key and the identifier of the communication encryption key retrieved by the communication encryption key retrieving means with encryption shared encryption key information using the public key of the VPN service application. Means for encrypting encryption key information; Shared cryptographic key information signing means for signing the encrypted shared cryptographic key information obtained by encryption by the shared cryptographic key cryptographic means, using the secret key of the service provider; And a shared encryption key information transmitting means for transmitting the encrypted shared encryption key information signed by the shared encryption key information signing means to the communication terminal.

Images