WO2008099739A1 - 個人情報の改ざん防止と個人情報流通否認防止のための個人情報管理装置、サービス提供装置、プログラム、個人情報管理方法、照合方法、および個人情報照合システム - Google Patents

個人情報の改ざん防止と個人情報流通否認防止のための個人情報管理装置、サービス提供装置、プログラム、個人情報管理方法、照合方法、および個人情報照合システム Download PDF

Info

Publication number
WO2008099739A1
WO2008099739A1 PCT/JP2008/051969 JP2008051969W WO2008099739A1 WO 2008099739 A1 WO2008099739 A1 WO 2008099739A1 JP 2008051969 W JP2008051969 W JP 2008051969W WO 2008099739 A1 WO2008099739 A1 WO 2008099739A1
Authority
WO
WIPO (PCT)
Prior art keywords
personal information
service providing
providing device
checking
information managing
Prior art date
Application number
PCT/JP2008/051969
Other languages
English (en)
French (fr)
Inventor
Makoto Hatakeyama
Hidehito Gomi
Original Assignee
Nec Corporation
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Nec Corporation filed Critical Nec Corporation
Priority to JP2008558065A priority Critical patent/JPWO2008099739A1/ja
Priority to US12/526,109 priority patent/US20100319061A1/en
Publication of WO2008099739A1 publication Critical patent/WO2008099739A1/ja

Links

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/08Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/0823Network architectures or network communication protocols for network security for authentication of entities using certificates
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60Protecting data
    • G06F21/64Protecting data integrity, e.g. using checksums, certificates or signatures
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/10Protecting distributed programs or content, e.g. vending or licensing of copyrighted material ; Digital rights management [DRM]
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/31User authentication
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/31User authentication
    • G06F21/33User authentication using certificates
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q10/00Administration; Management
    • G06Q10/06Resources, workflows, human or project management; Enterprise or organisation planning; Enterprise or organisation modelling
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q10/00Administration; Management
    • G06Q10/10Office automation; Time management
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/38Payment protocols; Details thereof
    • G06Q20/382Payment protocols; Details thereof insuring higher security of transaction
    • G06Q20/3821Electronic credentials
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • H04L9/3247Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving digital signatures
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • H04L9/3263Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L2209/00Additional information or applications relating to cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
    • H04L2209/60Digital content management, e.g. content distribution
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L2209/00Additional information or applications relating to cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
    • H04L2209/80Wireless

Abstract

課題 信頼できる第三者が存在しない状況では、個人情報の流通に関して送受信する個人情報の改ざんを検出できない。 解決手段 個人情報管理装置が、個人情報と1対1に対応する個人情報登録証明書を発行し、発行した個人情報登録証明書をユーザ端末を介してサービス提供装置に送付する。ユーザ端末は、個人情報登録証明書を確認することによって、個人情報管理装置が個人情報を改ざんしていないことを確認する。また、個人情報を送受信するときには、個人情報登録証明書と個人情報の関係をユーザ端末とサービス提供装置が確認することで、サービス提供装置は、個人情報管理装置が個人情報を改ざんしていないことを確認する。また、個人情報管理装置は、個人情報を送付するときに、署名をつけることで、サービス提供装置が個人情報を改ざんしていないことを確認する。
PCT/JP2008/051969 2007-02-06 2008-02-06 個人情報の改ざん防止と個人情報流通否認防止のための個人情報管理装置、サービス提供装置、プログラム、個人情報管理方法、照合方法、および個人情報照合システム WO2008099739A1 (ja)

Priority Applications (2)

Application Number Priority Date Filing Date Title
JP2008558065A JPWO2008099739A1 (ja) 2007-02-06 2008-02-06 個人情報の改ざん防止と個人情報流通否認防止のための個人情報管理装置、サービス提供装置、プログラム、個人情報管理方法、照合方法、および個人情報照合システム
US12/526,109 US20100319061A1 (en) 2007-02-06 2008-02-06 Personal information managing device, service providing device, program, personal information managing method, checking method and personal information checking system for falsification prevention of personal information and non repudiation of personal information circulation

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
JP2007026673 2007-02-06
JP2007-026673 2007-02-06

Publications (1)

Publication Number Publication Date
WO2008099739A1 true WO2008099739A1 (ja) 2008-08-21

Family

ID=39689977

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/JP2008/051969 WO2008099739A1 (ja) 2007-02-06 2008-02-06 個人情報の改ざん防止と個人情報流通否認防止のための個人情報管理装置、サービス提供装置、プログラム、個人情報管理方法、照合方法、および個人情報照合システム

Country Status (3)

Country Link
US (1) US20100319061A1 (ja)
JP (2) JPWO2008099739A1 (ja)
WO (1) WO2008099739A1 (ja)

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2015226133A (ja) * 2014-05-27 2015-12-14 パナソニックIpマネジメント株式会社 端末認証システム、サーバ装置、及び端末認証方法
JP2017163612A (ja) * 2017-06-12 2017-09-14 パナソニックIpマネジメント株式会社 端末認証システム、サーバ装置、及び端末認証方法

Families Citing this family (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20110078779A1 (en) * 2009-09-25 2011-03-31 Song Liu Anonymous Preservation of a Relationship and Its Application in Account System Management
KR101923487B1 (ko) * 2011-09-29 2018-11-30 삼성전자 주식회사 통신 연결 서비스 제공 방법 및 장치
US9467424B2 (en) * 2011-10-07 2016-10-11 Salesforce.Com, Inc. Methods and systems for proxying data
US20140259132A1 (en) * 2013-03-06 2014-09-11 Go Daddy Operating Company, LLC System for creating a security certificate
US20140259131A1 (en) * 2013-03-06 2014-09-11 Go Daddy Operating Company, LLC Method for creating a security certificate
TWI738724B (zh) * 2017-02-21 2021-09-11 亞洲住網資訊股份有限公司 動態企業資源規劃方法及動態企業資源規劃系統
JP7287207B2 (ja) 2019-09-13 2023-06-06 富士通株式会社 情報処理装置、制御プログラムおよび制御方法
CN110932869A (zh) * 2019-12-02 2020-03-27 北京合游时空科技有限公司 证书实名认证的方法、装置及设备

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2001222219A (ja) * 2000-02-10 2001-08-17 Hitachi Ltd ネットワーク通信記録方式および装置
JP2002229953A (ja) * 2001-01-30 2002-08-16 Canon Inc 個人情報管理システム及びその方法
JP2005341095A (ja) * 2004-05-26 2005-12-08 Hitachi Ltd 端末装置、公開鍵の正当性を判断する方法、およびプログラム
JP2006285490A (ja) * 2005-03-31 2006-10-19 Hitachi Ltd 個人情報閲覧更新システムおよび個人情報閲覧更新方法

Family Cites Families (12)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5608778A (en) * 1994-09-22 1997-03-04 Lucent Technologies Inc. Cellular telephone as an authenticated transaction controller
US6675153B1 (en) * 1999-07-06 2004-01-06 Zix Corporation Transaction authorization system
JP2002139998A (ja) * 2000-11-01 2002-05-17 Sony Corp 属性確認処理を含むデータ通信システムおよび属性確認処理を含むデータ通信方法
US20020083008A1 (en) * 2000-12-22 2002-06-27 Smith Christopher F. Method and system for identity verification for e-transactions
JP3917463B2 (ja) * 2002-05-28 2007-05-23 日本電信電話株式会社 個人情報流通管理方法,個人情報流通管理システムおよび個人情報流通管理用プログラム
JP2004102872A (ja) * 2002-09-12 2004-04-02 Mitsubishi Electric Corp 個人情報保護オンライン・コマース・システム
US7568098B2 (en) * 2003-12-02 2009-07-28 Microsoft Corporation Systems and methods for enhancing security of communication over a public network
KR100648064B1 (ko) * 2004-01-14 2006-11-23 주식회사 케이티프리텔 인증용 무선 단말기 및 이를 이용한 전자 거래 시스템 및그 방법
BRPI0607359B1 (pt) * 2005-02-04 2019-04-02 Qualcomm Incorporated Auto-iniciação segura para comunicações sem fio
JP2007018050A (ja) * 2005-07-05 2007-01-25 Sony Ericsson Mobilecommunications Japan Inc 携帯端末装置、暗証番号認証プログラム、及び暗証番号認証方法
CN101512576A (zh) * 2006-09-15 2009-08-19 康法特公司 用于确保电子交易的真实性的方法和计算机系统
JP2010505161A (ja) * 2006-09-29 2010-02-18 スカンメル,ダン 電子取引でユーザのアイデンティティを検証するシステムおよび方法

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2001222219A (ja) * 2000-02-10 2001-08-17 Hitachi Ltd ネットワーク通信記録方式および装置
JP2002229953A (ja) * 2001-01-30 2002-08-16 Canon Inc 個人情報管理システム及びその方法
JP2005341095A (ja) * 2004-05-26 2005-12-08 Hitachi Ltd 端末装置、公開鍵の正当性を判断する方法、およびプログラム
JP2006285490A (ja) * 2005-03-31 2006-10-19 Hitachi Ltd 個人情報閲覧更新システムおよび個人情報閲覧更新方法

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
CHIBA M.: "Zokusei Joho Provider: Anzen na Kojin Zokusei no Katsuyo Kiban no Teigen", TRANSACTIONS OF INFORMATION PROCESSING SOCIETY OF JAPAN, vol. 47, no. 3, 10 March 2006 (2006-03-10), pages 676 - 685 *

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2015226133A (ja) * 2014-05-27 2015-12-14 パナソニックIpマネジメント株式会社 端末認証システム、サーバ装置、及び端末認証方法
JP2017163612A (ja) * 2017-06-12 2017-09-14 パナソニックIpマネジメント株式会社 端末認証システム、サーバ装置、及び端末認証方法

Also Published As

Publication number Publication date
JP5720831B2 (ja) 2015-05-20
US20100319061A1 (en) 2010-12-16
JP2014139838A (ja) 2014-07-31
JPWO2008099739A1 (ja) 2010-05-27

Similar Documents

Publication Publication Date Title
WO2008099739A1 (ja) 個人情報の改ざん防止と個人情報流通否認防止のための個人情報管理装置、サービス提供装置、プログラム、個人情報管理方法、照合方法、および個人情報照合システム
WO2005125073A3 (en) Network security and fraud detection system and method
WO2007149775A3 (en) Consumer authentication system and method
WO2008060820A3 (en) System and method for authenticating remote server access
WO2007145687A8 (en) Method and apparatus for secure access payment and identification
EP4333554A3 (en) Authentication method
MX2012006945A (es) Registro temporal de dispositivos.
WO2011090655A3 (en) System and method for processing payment transaction receipts
WO2007050590A3 (en) Media content delivery audit and verification services
WO2010129474A3 (en) Security system and method including alert messages
WO2009061162A3 (en) Payment system and method using message transmission
EP1875653A4 (en) SYSTEM AND METHOD FOR CONTROLLING AND DETECTING FRAUD AND USER AUTHENTICATION AT SEVERAL LEVELS
WO2010039334A3 (en) Systems and methods for secure wireless transactions
WO2009042258A3 (en) Verifying dynamic transaction security code in payment card system
EP1969743A4 (en) METHODS, SYSTEMS AND COMPUTER PROGRAM PRODUCTS FOR DETECTING AND LIMITING TRAFFIC OF FRAUDULENT MESSAGE SERVICE MESSAGES
WO2007087594A3 (en) Systems and methods for facilitating completion of repurchase agreements
EP2199940A3 (en) Methods and systems for detecting man-in-the-browser attacks
MXPA05008388A (es) Agrupacion por pares de dispositivos.
WO2008005876A3 (en) Managing transaction accounts
WO2007024759A3 (en) System and methods for secure service oriented architecture
WO2012174427A3 (en) Method and system for determining authentication levels in transactions
HK1073225A2 (en) An electronic transaction system with enhanced transaction security and its electronic transaction method.
MX2009010456A (es) Sistema y metodo para manejar entrega de contenido en internet.
WO2008096825A1 (ja) 証明書認証方法、証明書発行装置及び認証装置
WO2008096078A3 (fr) Dispositif electronique portable et procede de securisation d'un tel dispositif

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 08710865

Country of ref document: EP

Kind code of ref document: A1

DPE1 Request for preliminary examination filed after expiration of 19th month from priority date (pct application filed from 20040101)
ENP Entry into the national phase

Ref document number: 2008558065

Country of ref document: JP

Kind code of ref document: A

NENP Non-entry into the national phase

Ref country code: DE

WWE Wipo information: entry into national phase

Ref document number: 12526109

Country of ref document: US

122 Ep: pct application non-entry in european phase

Ref document number: 08710865

Country of ref document: EP

Kind code of ref document: A1