WO2009057771A1 - 電子認証装置、電子認証システム、電子認証方法およびこの方法のプログラム - Google Patents

電子認証装置、電子認証システム、電子認証方法およびこの方法のプログラム Download PDF

Info

Publication number
WO2009057771A1
WO2009057771A1 PCT/JP2008/069930 JP2008069930W WO2009057771A1 WO 2009057771 A1 WO2009057771 A1 WO 2009057771A1 JP 2008069930 W JP2008069930 W JP 2008069930W WO 2009057771 A1 WO2009057771 A1 WO 2009057771A1
Authority
WO
WIPO (PCT)
Prior art keywords
authentication
electronic authentication
authentication device
server
client certificate
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
PCT/JP2008/069930
Other languages
English (en)
French (fr)
Inventor
Yoshiaki Inaba
Wataru Iijima
Taiichi Matsuo
Masahiro Sato
Yoshiharu Araki
Toshiyuki Maeda
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
E BANK SYSTEMS Corp
Meidensha Corp
Meidensha Electric Manufacturing Co Ltd
Original Assignee
E BANK SYSTEMS Corp
Meidensha Corp
Meidensha Electric Manufacturing Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by E BANK SYSTEMS Corp, Meidensha Corp, Meidensha Electric Manufacturing Co Ltd filed Critical E BANK SYSTEMS Corp
Publication of WO2009057771A1 publication Critical patent/WO2009057771A1/ja
Anticipated expiration legal-status Critical
Ceased legal-status Critical Current

Links

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/08Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/0823Network architectures or network communication protocols for network security for authentication of entities using certificates
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • H04L9/3263Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • H04L9/3271Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials using challenge-response
    • H04L9/3273Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials using challenge-response for mutual authentication
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L2209/00Additional information or applications relating to cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
    • H04L2209/56Financial cryptography, e.g. electronic payment or e-cash
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/16Implementing security features at a particular protocol layer
    • H04L63/166Implementing security features at a particular protocol layer at the transport layer

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Hardware Design (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Management, Administration, Business Operations System, And Electronic Commerce (AREA)

Abstract

【課題】システム構築を簡易にしながら、相互認証のセキュリティ性を高めた電子認証ができる。 【解決手段】ICカード20には秘密鍵及びクライアント証明書を記憶する。認証装置10は、ユーザ端末30からHTTP形式のリクエストを受け、ICカードからクライアント証明書を読み込み、サーバ40に対してHTTPS形式による相互認証、SSL通信を行う。  クライアント証明書や暗号化された認証用データはユーザ端末を経由することなく、直接にサーバに送信される。暗証番号は認証装置に直接に入力する。認証装置の許可リストに記述されているドメイン名(URL)以外の通信はすべて遮断する。認証装置は自身IPアドレスを持たない。認証装置側でサーバ証明書の正当性を自動で確認可能とする。
PCT/JP2008/069930 2007-11-01 2008-10-31 電子認証装置、電子認証システム、電子認証方法およびこの方法のプログラム Ceased WO2009057771A1 (ja)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
JP2007-285105 2007-11-01
JP2007285105A JP2009117887A (ja) 2007-11-01 2007-11-01 電子認証装置、電子認証システム、電子認証方法およびこの方法のプログラム

Publications (1)

Publication Number Publication Date
WO2009057771A1 true WO2009057771A1 (ja) 2009-05-07

Family

ID=40591151

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/JP2008/069930 Ceased WO2009057771A1 (ja) 2007-11-01 2008-10-31 電子認証装置、電子認証システム、電子認証方法およびこの方法のプログラム

Country Status (2)

Country Link
JP (1) JP2009117887A (ja)
WO (1) WO2009057771A1 (ja)

Cited By (20)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
USD640976S1 (en) 2008-08-28 2011-07-05 Hewlett-Packard Development Company, L.P. Support structure and/or cradle for a mobile computing device
US8234509B2 (en) 2008-09-26 2012-07-31 Hewlett-Packard Development Company, L.P. Portable power supply device for mobile computing devices
US8305741B2 (en) 2009-01-05 2012-11-06 Hewlett-Packard Development Company, L.P. Interior connector scheme for accessorizing a mobile computing device with a removeable housing segment
CN102867269A (zh) * 2012-08-29 2013-01-09 福建联迪商用设备有限公司 金融业务数据同步推送系统及方法
US8385822B2 (en) 2008-09-26 2013-02-26 Hewlett-Packard Development Company, L.P. Orientation and presence detection for use in configuring operations of computing devices in docked environments
US8395547B2 (en) 2009-08-27 2013-03-12 Hewlett-Packard Development Company, L.P. Location tracking for mobile computing device
US8401469B2 (en) 2008-09-26 2013-03-19 Hewlett-Packard Development Company, L.P. Shield for use with a computing device that receives an inductive signal transmission
US8437695B2 (en) 2009-07-21 2013-05-07 Hewlett-Packard Development Company, L.P. Power bridge circuit for bi-directional inductive signaling
USD687038S1 (en) 2009-11-17 2013-07-30 Palm, Inc. Docking station for a computing device
US8527688B2 (en) 2008-09-26 2013-09-03 Palm, Inc. Extending device functionality amongst inductively linked devices
US8688037B2 (en) 2008-09-26 2014-04-01 Hewlett-Packard Development Company, L.P. Magnetic latching mechanism for use in mating a mobile computing device to an accessory device
US8712324B2 (en) 2008-09-26 2014-04-29 Qualcomm Incorporated Inductive signal transfer system for computing devices
US8755815B2 (en) 2010-08-31 2014-06-17 Qualcomm Incorporated Use of wireless access point ID for position determination
US8850045B2 (en) 2008-09-26 2014-09-30 Qualcomm Incorporated System and method for linking and sharing resources amongst devices
US8868939B2 (en) 2008-09-26 2014-10-21 Qualcomm Incorporated Portable power supply device with outlet connector
US8954001B2 (en) 2009-07-21 2015-02-10 Qualcomm Incorporated Power bridge circuit for bi-directional wireless power transmission
US9083686B2 (en) 2008-11-12 2015-07-14 Qualcomm Incorporated Protocol for program during startup sequence
US9097544B2 (en) 2009-08-27 2015-08-04 Qualcomm Incorporated Location tracking for mobile computing device
US9201457B1 (en) 2001-05-18 2015-12-01 Qualcomm Incorporated Synchronizing and recharging a connector-less portable computer system
US9395827B2 (en) 2009-07-21 2016-07-19 Qualcomm Incorporated System for detecting orientation of magnetically coupled devices

Families Citing this family (17)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
KR101115511B1 (ko) * 2010-05-04 2012-02-27 에스케이씨앤씨 주식회사 스마트 카드 웹서버를 이용한 인증 시스템 및 방법
BR112013020354B1 (pt) 2011-02-16 2021-02-02 Nec Platforms, Ltd método para validar/invalidar uma unidade de função adicional, sistema para validar/invalidar uma unidade de função adicional e unidade de função adicional
JP5953156B2 (ja) * 2012-07-26 2016-07-20 株式会社ゼンリンデータコム ブラウザシステム
JP5222427B1 (ja) * 2012-09-28 2013-06-26 株式会社 ディー・エヌ・エー ネットワークシステム、及び、プログラム
JP6056462B2 (ja) * 2012-12-26 2017-01-11 株式会社リコー 代理装置、遠隔管理システム及びアドレス取得方法
JP6464878B2 (ja) * 2015-03-27 2019-02-06 株式会社バッファロー コンテンツ再生装置、コンテンツ再生システム、コンテンツ再生装置におけるコンテンツ再生方法及びプログラム
JP6644037B2 (ja) 2017-09-08 2020-02-12 株式会社東芝 通信制御システム
JP7204388B2 (ja) 2018-09-14 2023-01-16 株式会社東芝 情報処理装置、情報処理システム及び情報処理方法
JP7262964B2 (ja) 2018-10-12 2023-04-24 株式会社東芝 情報処理装置、及び情報処理システム
JP2020108070A (ja) 2018-12-28 2020-07-09 株式会社東芝 通信制御装置および通信制御システム
JP7273523B2 (ja) 2019-01-25 2023-05-15 株式会社東芝 通信制御装置および通信制御システム
JP7163206B2 (ja) * 2019-01-29 2022-10-31 株式会社東芝 通信制御装置
JP7278807B2 (ja) 2019-03-04 2023-05-22 株式会社東芝 通信制御装置および通信システム
JP7191727B2 (ja) 2019-03-04 2022-12-19 株式会社東芝 通信制御装置および通信システム
JP7191726B2 (ja) 2019-03-04 2022-12-19 株式会社東芝 通信制御装置および通信システム
JP7278806B2 (ja) 2019-03-04 2023-05-22 株式会社東芝 通信制御装置および通信システム
JP7204534B2 (ja) 2019-03-04 2023-01-16 株式会社東芝 通信システム

Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2002158650A (ja) * 2000-11-21 2002-05-31 Fujitsu Ltd 認証・暗号化処理代行用のサーバ、アクセスカード、プログラム記録媒体及び携帯端末
JP2005141333A (ja) * 2003-11-04 2005-06-02 Matsushita Electric Ind Co Ltd アクセス中継装置およびネットワークアクセス方法

Patent Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2002158650A (ja) * 2000-11-21 2002-05-31 Fujitsu Ltd 認証・暗号化処理代行用のサーバ、アクセスカード、プログラム記録媒体及び携帯端末
JP2005141333A (ja) * 2003-11-04 2005-06-02 Matsushita Electric Ind Co Ltd アクセス中継装置およびネットワークアクセス方法

Cited By (21)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US9201457B1 (en) 2001-05-18 2015-12-01 Qualcomm Incorporated Synchronizing and recharging a connector-less portable computer system
USD640976S1 (en) 2008-08-28 2011-07-05 Hewlett-Packard Development Company, L.P. Support structure and/or cradle for a mobile computing device
US8850045B2 (en) 2008-09-26 2014-09-30 Qualcomm Incorporated System and method for linking and sharing resources amongst devices
US8234509B2 (en) 2008-09-26 2012-07-31 Hewlett-Packard Development Company, L.P. Portable power supply device for mobile computing devices
US8385822B2 (en) 2008-09-26 2013-02-26 Hewlett-Packard Development Company, L.P. Orientation and presence detection for use in configuring operations of computing devices in docked environments
US8401469B2 (en) 2008-09-26 2013-03-19 Hewlett-Packard Development Company, L.P. Shield for use with a computing device that receives an inductive signal transmission
US8868939B2 (en) 2008-09-26 2014-10-21 Qualcomm Incorporated Portable power supply device with outlet connector
US8527688B2 (en) 2008-09-26 2013-09-03 Palm, Inc. Extending device functionality amongst inductively linked devices
US8688037B2 (en) 2008-09-26 2014-04-01 Hewlett-Packard Development Company, L.P. Magnetic latching mechanism for use in mating a mobile computing device to an accessory device
US8712324B2 (en) 2008-09-26 2014-04-29 Qualcomm Incorporated Inductive signal transfer system for computing devices
US9083686B2 (en) 2008-11-12 2015-07-14 Qualcomm Incorporated Protocol for program during startup sequence
US8305741B2 (en) 2009-01-05 2012-11-06 Hewlett-Packard Development Company, L.P. Interior connector scheme for accessorizing a mobile computing device with a removeable housing segment
US8954001B2 (en) 2009-07-21 2015-02-10 Qualcomm Incorporated Power bridge circuit for bi-directional wireless power transmission
US8437695B2 (en) 2009-07-21 2013-05-07 Hewlett-Packard Development Company, L.P. Power bridge circuit for bi-directional inductive signaling
US9395827B2 (en) 2009-07-21 2016-07-19 Qualcomm Incorporated System for detecting orientation of magnetically coupled devices
US8395547B2 (en) 2009-08-27 2013-03-12 Hewlett-Packard Development Company, L.P. Location tracking for mobile computing device
US9097544B2 (en) 2009-08-27 2015-08-04 Qualcomm Incorporated Location tracking for mobile computing device
USD687038S1 (en) 2009-11-17 2013-07-30 Palm, Inc. Docking station for a computing device
US8755815B2 (en) 2010-08-31 2014-06-17 Qualcomm Incorporated Use of wireless access point ID for position determination
US9191781B2 (en) 2010-08-31 2015-11-17 Qualcomm Incorporated Use of wireless access point ID for position determination
CN102867269A (zh) * 2012-08-29 2013-01-09 福建联迪商用设备有限公司 金融业务数据同步推送系统及方法

Also Published As

Publication number Publication date
JP2009117887A (ja) 2009-05-28

Similar Documents

Publication Publication Date Title
WO2009057771A1 (ja) 電子認証装置、電子認証システム、電子認証方法およびこの方法のプログラム
CN103595721B (zh) 网盘文件安全共享方法、共享装置及共享系统
KR101708587B1 (ko) 양방향 권한 부여 시스템, 클라이언트 및 방법
JP2019519827A (ja) アプリの偽変造が探知可能な2チャンネル認証代行システム及びその方法
CN105072125B (zh) 一种http通信系统及方法
US20100268932A1 (en) System and method of verifying the origin of a client request
RU2008142008A (ru) Способы аутентификации, шифрования и декодирования идентификатора клиентского терминала и устройства для их реализации
CN104184735A (zh) 电力营销移动应用安全防护系统
WO2010011731A3 (en) Methods and systems for secure key entry via communication networks
US12481731B2 (en) Method and system for reliable authentication of the origin of a website
CN108494811A (zh) 数据传输安全认证方法及装置
CN101170413B (zh) 一种数字证书及其私钥的获得、分发方法及设备
EP3031226A1 (de) Unterstützung der nutzung eines geheimen schlüssels
Ouvrier et al. Characterizing the HTTPS trust landscape: a passive view from the edge
CN106411893B (zh) 一种https服务的部署方法
JP2015194879A (ja) 認証システム、方法、及び提供装置
CN115801345B (zh) 基于pki的个人强密码管理方法、系统及电子设备
KR20170119054A (ko) 사물 인터넷 환경의 종단간 보안 플랫폼
US20140237567A1 (en) Authentication method
CN105553983B (zh) 一种网页数据保护方法
US20070098175A1 (en) Security enabler device and method for securing data communications
JP2007053569A (ja) 電子メールセキュリティ化装置及び該システム
CN104104686B (zh) 一种基于移动互联网的网络数据包解析取证方法
KR102190493B1 (ko) 상호인증 기반 안전한 패치파일 배포를 위한 통합관리 서버 및 그 동작 방법
WO2014153315A3 (en) Methods and apparatuses for reducing or eliminating unauthorized access to tethered data

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 08846038

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 08846038

Country of ref document: EP

Kind code of ref document: A1