JP5772148B2 - Authentication system, authentication device, certificate authority, authentication method, and program - Google Patents

Description

  The present invention relates to an authentication system used for authentication of an electronic certificate, an authentication apparatus and a certificate authority constituting the authentication system, and further relates to an authentication method and a program.

  When an electronic certificate is used for service use authentication, a validity period is set for the electronic certificate in accordance with the contract period of the service. Also, if you cancel the service halfway, the contract period of the service and the validity period of the digital certificate may not match. In this case, the certificate authority uses the CRL (Certificate Revocation List) Manage that the relevant digital certificate has been revoked before its validity period.

  In addition, the certificate revocation list (CRL) issuance timing is set at regular intervals such as every 24 hours. For this reason, for example, if a certificate revocation list is issued every day at 9:00 AM and the end of the validity period is 0:00, the certificate whose validity period has expired is 9 hours from AM 0:00 to the next AM 9:00 Is not registered in the certificate revocation list. As a result, there arises a problem that a system that performs authentication based on a certificate revocation list determines that a certificate whose validity period has expired is valid and succeeds in authentication.

  In order to cope with such a problem, Patent Document 1 calculates the reliability from the acquisition date and time of the certificate revocation list of the authentication system, the scheduled date and time of the next update of the certificate revocation list, and the current date and time. Proposes a new certificate revocation list if is exceeded the limit.

JP 2009-94976 A

  In the method disclosed in Patent Document 1, it is considered that the time lag between the certificate revocation list information used by the authentication system to determine whether authentication is possible and the actual certificate validity is reduced to some extent. However, even if the method disclosed in Patent Document 1 is used, the validity determination largely depends on the issuance timing and acquisition timing of the certificate revocation list, and there is a possibility that an erroneous validity determination may be performed. Is present.

  An example of the object of the present invention is an authentication system, an authentication device, a certificate authority, which can solve the above problems and can determine the validity of an electronic certificate without depending on the issue timing and acquisition timing of a certificate revocation list. It is to provide an authentication method and a program.

In order to achieve the above object, an authentication system according to an aspect of the present invention includes an authentication device that performs authentication for an electronic certificate transmitted from a user terminal device, and a certificate authority that issues the electronic certificate. An authentication system with
The certificate authority creates a certificate revocation list that identifies electronic certificates that are scheduled to be revoked, and a certificate revocation list that identifies revoked electronic certificates,
The authentication device
It is determined whether the transmitted electronic certificate is included in a certificate revocation list or a certificate revocation schedule list.
If the electronic certificate is included in a certificate revocation list, notify the terminal device that the electronic certificate has been revoked,
When the electronic certificate is included in the certificate revocation schedule list, it is further determined whether or not the revocation schedule date has passed with reference to the current date and time. Is notified to the terminal device, and if it has passed, the terminal device is notified that the scheduled expiration date has passed,
It is characterized by that.

In order to achieve the above object, an authentication apparatus according to an aspect of the present invention is an authentication apparatus that authenticates an electronic certificate transmitted from a user terminal device,
A certificate revocation list that identifies a revoked electronic certificate created by the certificate authority and a certificate revocation list that identifies a revoked electronic certificate are created from the certificate authority that issues the electronic certificate. Receive the list acquisition unit,
Determining whether the transmitted electronic certificate is included in a certificate revocation list or a certificate revocation schedule list;
As a result of the determination, if the electronic certificate is included in a certificate revocation list, the terminal device is notified that the electronic certificate has been revoked,
When the electronic certificate is included in the certificate revocation schedule list, it is further determined whether or not the revocation schedule date has passed with reference to the current date and time. An authentication processing unit for notifying the terminal device that the scheduled expiration date has passed, and
It is characterized by having.

In order to achieve the above object, a certificate authority in one aspect of the present invention is a certificate authority that issues an electronic certificate in response to a request from a user,
A list creation unit is provided for creating a certificate revocation list that identifies an electronic certificate that is scheduled to be revoked among the issued electronic certificates, and a certificate revocation list that identifies a revoked electronic certificate. It is characterized by that.

In order to achieve the above object, an authentication method according to one aspect of the present invention includes an authentication device that authenticates an electronic certificate transmitted from a user terminal device, and a certificate authority that issues the electronic certificate. An authentication method using
(A) creating, by the certificate authority, a certificate revocation schedule list that identifies an electronic certificate that is scheduled to be revoked and a certificate revocation list that identifies a revoked electronic certificate;
(B) determining whether the electronic certificate transmitted by the authentication device is included in a certificate revocation list or a certificate revocation schedule list;
(C) If the result of determination in step (b) is that the electronic certificate is included in a certificate revocation list, the terminal device indicates that the electronic certificate has been revoked by the authentication device. To notify, step,
(D) As a result of the determination in the step (b), when the electronic certificate is included in the certificate revocation schedule list, the revocation schedule date and time has passed by the authentication device based on the current date and time. If the result of the determination is that it has not elapsed, the terminal device is notified that revocation is scheduled, and if it has elapsed, that the expected revocation date has passed. Notifying the terminal device; and
It is characterized by having.

In order to achieve the above object, a first program according to one aspect of the present invention is a program for authenticating an electronic certificate transmitted from a user terminal device by a computer,
In the computer,
(A) A certificate revocation list for identifying a revoked electronic certificate created by the certificate authority and a certificate revocation for identifying a revoked electronic certificate from the certificate authority that issues the electronic certificate Receive list and step,
(B) determining whether the transmitted electronic certificate is included in a certificate revocation list or a certificate revocation schedule list;
(C) As a result of the determination in the step (b), when the electronic certificate is included in a certificate revocation list, the terminal device is notified that the electronic certificate has been revoked. When,
(D) If the result of the determination in step (b) is that the electronic certificate is included in the certificate revocation schedule list, it is further determined whether or not the revocation schedule date has passed based on the current date and time. If the result of the determination is that it has not elapsed, the terminal device is notified that the expiration date is scheduled, and if it has elapsed, the terminal device is notified that the scheduled expiration date has passed. Step,
Is executed.

In order to achieve the above object, a second program in one aspect of the present invention is a program for building a certificate authority by a computer,
In the computer,
(A) issuing an electronic certificate in response to a request from a user;
(B) A certificate revocation schedule list that identifies an electronic certificate that is scheduled to be revoked among the electronic certificates issued in the step (a), and a certificate revocation list that identifies a revoked electronic certificate; Create a step and a
Is executed.

  As described above, according to the authentication system, the authentication apparatus, the certificate authority, the authentication method, and the program according to the present invention, it is possible to determine the validity of an electronic certificate without depending on the issue timing and acquisition timing of the certificate revocation list It can be performed.

FIG. 1 is a block diagram showing a configuration of an authentication system according to an embodiment of the present invention. FIG. 2 is a diagram showing an example of contract information stored in the contract information management database used in the present embodiment. FIG. 3 is a diagram showing an example of user authentication information stored in the authentication information management database used in the embodiment of the present invention. FIG. 4 is a flowchart showing a revocation schedule application process executed by the authentication device 1 according to the embodiment of the present invention. FIG. 5 is a flowchart showing a list issuing process executed by the certificate authority in the embodiment of the present invention. FIG. 6 is a diagram showing an example of a certificate revocation schedule list used in the present embodiment. FIG. 7 is a flowchart showing the electronic certificate validity verification process executed by the authentication apparatus 1 according to the embodiment of the present invention. FIG. 8 is a block diagram illustrating an example of a computer that implements the authentication apparatus and the certificate authority according to the embodiment of the present invention.

(Embodiment)
Hereinafter, an authentication system, an authentication device, a certificate authority, an authentication method, and a program according to an embodiment of the present invention will be described with reference to FIGS.

[System configuration]
First, the configuration of the authentication system 5 in the present embodiment, the authentication device 1 and the certificate authority 2 constituting the authentication system 5 will be described with reference to FIG. FIG. 1 is a block diagram showing a configuration of an authentication system according to an embodiment of the present invention.

  As shown in FIG. 1, the authentication system 5 in the present embodiment includes an authentication device 1 that authenticates an electronic certificate transmitted from a user terminal device 3, and an electronic certificate in response to a request from the user. And a certificate authority 2 that issues a certificate. The authentication device 1 and the certificate authority 2 are connected via a network 4, and a user terminal device 3 is also connected to the network 4.

  As shown in FIG. 1, the certificate authority 2 mainly includes a list creation unit 24. The list creation unit 24 creates a certificate revocation schedule list that identifies an electronic certificate that is scheduled to be revoked among issued electronic certificates, and a certificate revocation list that identifies a revoked electronic certificate.

  Furthermore, as shown in FIG. 1, the authentication device 1 mainly includes an authentication processing unit 10 and a list acquisition unit 14. The list acquisition unit 14 receives the certificate revocation schedule list and the certificate revocation list described above from the certificate authority 2 via the network 4.

  The authentication processing unit 10 first determines whether the electronic certificate transmitted from the user terminal device 3 is included in the certificate revocation list or the certificate revocation schedule list. If the result of determination is that the electronic certificate is included in the certificate revocation list, the authentication processing unit 10 notifies the terminal device 3 that the electronic certificate has been revoked.

  In addition, when the electronic certificate is included in the certificate revocation schedule list, the authentication processing unit 10 further determines whether or not the revocation date / time has passed based on the current date / time. Then, if the result of determination is that it has not elapsed, the authentication processing unit 10 notifies the terminal device 3 that revocation is scheduled, and if it has elapsed, that the expected revocation date has passed. To the terminal device 3.

  In addition, the authentication processing unit 10 indicates that the electronic certificate is valid when the electronic certificate transmitted from the terminal device 3 is not included in either the certificate revocation list or the certificate revocation schedule list. To the terminal device 3.

  As described above, in the present embodiment, the certificate authority 2 lists certificates revoked at a future date and time after the certificate revocation list is issued. Then, the authentication device 1 uses the certificate revocation list and the newly obtained list (that is, the certificate revocation schedule list) to verify that the corresponding certificate is “valid”, “expired”, “revocation” It is determined whether the state is over schedule or expired.

  Therefore, according to the present embodiment, it is possible to determine the validity of the electronic certificate along the original revocation date and time without depending on the issuance timing and acquisition timing of the certificate revocation list. As a result, a situation where the electronic certificate is erroneously determined to be valid even after the expiration date has passed can be avoided.

  Here, the configuration of the authentication system 5, the authentication device 1, and the certificate authority 2 in the present embodiment will be described more specifically with reference to FIGS. 2 and 3 in addition to FIG. In the present embodiment, the authentication device 1 and the certificate authority 2 are each constructed by a program in a computer such as a server computer. A program for constructing these will be described later.

  As shown in FIG. 1, in this embodiment, the authentication apparatus 1 includes a service certificate storage unit 11, a contract information management database 12 (see FIG. 2), in addition to the authentication processing unit 10 and the list acquisition unit 14. The revocation schedule application unit 13, the list storage unit 15, the authentication reception unit 17, and the authentication information management database 18 (see FIG. 3).

  The service certificate storage unit 11 stores a service certificate issued by the certificate authority 2 and a private key. The contract information management database 12 (see FIG. 2) stores user contract information.

  FIG. 2 is a diagram showing an example of contract information stored in the contract information management database used in the present embodiment. As shown in FIG. 2, the contract information management database 12 includes, for each user ID that uniquely identifies a service user in the authentication apparatus 1, the user ID and the serial number of the electronic certificate (that is, the electronic certificate). Identifier), the contract end date of the service user (that is, the expected expiration date of the electronic certificate), and personal information are stored in association with each other. The personal information includes information necessary for managing the service contract, such as name, address, and telephone number.

  Further, the revocation schedule application unit 13 identifies an electronic certificate that is revoked within the set period from among the electronic certificates for each user to be authenticated, and includes information that includes the identified electronic certificate identifier and the scheduled revocation date and time. (Hereinafter referred to as “expiration schedule application information”) is transmitted to the certificate authority to execute the expiration schedule application. Specifically, the revocation schedule application unit 13 uses the service certificate and private key held in the service certificate storage unit 11 and the contract information stored in the contract information management database 12, via the network 4. The revocation schedule application is made to the certificate authority 2.

  In the present embodiment, the list acquisition unit 14 outputs the acquired certificate revocation schedule list and certificate revocation list to the list storage unit 15. The list storage unit 15 stores the certificate revocation schedule list and the certificate revocation list output from the list acquisition unit 14.

  Further, the authentication processing unit 10 includes a certificate validity verification unit 16 and an authentication control unit 19 in the present embodiment. Among these, the validity verification unit 16 determines the validity of the electronic certificate based on the certificate revocation schedule list and the certificate revocation list stored in the list storage unit 15, and the result (hereinafter referred to as the certificate revocation list). (“Validity verification result”) is input to the authentication control unit 19.

  The authentication control unit 19 receives authentication information described later received by the authentication receiving unit 17, user authentication information stored in the authentication information management database 18, and validity of the certificate returned from the certificate validity verification unit 16. Authentication is executed based on the verification result.

  The authentication receiving unit 17 receives authentication information transmitted from the terminal device 3 by the user via the network 4. The authentication information management database 18 (see FIG. 3) stores information for user authentication (hereinafter referred to as “user authentication information”).

  FIG. 3 is a diagram showing an example of user authentication information stored in the authentication information management database used in the embodiment of the present invention. As shown in FIG. 3, the authentication information management database 18 includes, for each user ID that uniquely identifies a service user in the authentication device 1, the user ID, the serial number of the electronic certificate, the hash value of the password, The access right to the service is linked and stored.

  The certificate authority 2 includes a revocation schedule application receiving unit 21, a revocation schedule application management unit 22, and a certificate management database 23 in addition to the list creation unit 4 described above. The revocation schedule application receiving unit 21 receives the revocation schedule application information transmitted from the revocation schedule application unit 13 of the authentication device 1 via the network 4. The revocation schedule application management unit 22 manages the revocation schedule application received by the revocation schedule application reception unit 21.

  The certificate management database 23 manages information about an electronic certificate issued by the certificate authority 2 (hereinafter referred to as “electronic certificate information”). Further, in the present embodiment, the list creation unit 24 uses the certificate revocation list based on the revocation schedule application information managed by the revocation schedule application management unit 22 and the electronic certificate information managed by the certificate management database 23. Create The list publishing unit 25 publishes the certificate revocation list and the certificate revocation schedule list created by the list creation unit 24.

  The terminal device 3 includes a user certificate storage unit 31 and an authentication request unit 32. The user certificate storage unit 31 stores the user's electronic certificate and private key issued from the certificate authority 2. The authentication request unit 32 requests the authentication apparatus 1 to perform authentication using the user's electronic certificate stored in the user certificate storage unit 31 and the private key.

[Description of operation]
Next, operations of the authentication system 5, the authentication device 1, and the certificate authority 2 in the embodiment of the present invention will be described with reference to FIGS. Further, in the present embodiment, the authentication method is performed by operating the authentication system 5. Therefore, the description of the authentication method in the present embodiment is replaced with the following description of the operation of the authentication system 5.

[Process by Certificate Authority]
Here, processing performed in advance by the certificate authority 2 will be described. First, the certificate authority 2 issues a service certificate to the authentication device 1 in advance. In the service certificate, the certificate authority 2 guarantees the validity of the authentication device 1. The authentication device 1 acquires a service certificate and uses it to indicate that it is a valid revocation schedule application in a signature when performing a revocation schedule application described later. As described above, the service certificate is held together with the secret key in the service certificate storage unit 11 of the authentication device 1.

  The certificate authority 2 issues an electronic certificate to the user in advance. The electronic certificate is one in which the certificate authority 2 guarantees the legitimacy of the user. The electronic certificate is used to indicate that the user is a valid user in an authentication request described later.

  As described above, the electronic certificate is held together with the private key in the user certificate storage unit 31 of the terminal device 3. In the present embodiment, the user certificate storage unit 31 is not necessarily provided in the terminal device 3, and may be provided in a tamper-resistant portable medium such as an IC card. .

[Expiration Schedule Application Processing]
Next, the operation (revocation schedule application process) when the authentication apparatus 1 makes a revocation schedule application to the certificate authority 2 will be described with reference to FIG. FIG. 4 is a flowchart showing a revocation schedule application process executed by the authentication device 1 according to the embodiment of the present invention.

  As shown in FIG. 4, in the authentication apparatus 1, the revocation schedule application unit 13 first searches for an electronic certificate that is about to end the contract from the contract end date (see FIG. 2) in the contract information management database 12 (step A1). ). At this time, how many days before the end of the contract is defined depends on the policy set in the authentication apparatus 1.

  Next, the revocation schedule application unit 13 acquires the serial number (see FIG. 2) and contract end date (see FIG. 2) of the corresponding electronic certificate based on the search result (step A2). Next, the revocation schedule application unit 13 attaches the signature data obtained by encrypting the service certificate in the service certificate storage unit 11 with the private key to the acquired serial number and the contract end date, and schedules the revocation schedule. Create application information.

  Next, the revocation schedule application unit 13 transmits the created revocation schedule application information to the revocation schedule application reception unit 21 of the certificate authority 2 via the network 4 (step A4).

  After executing step A4, in the certificate authority 2, the revocation schedule application unit 21 performs signature verification and certificate verification of the service certificate in order to confirm whether the revocation schedule application information is valid (step A5). .

  Specifically, in step A5, the revocation schedule application unit 21 executes a verification operation using a public key based on the signature data, and verifies whether or not the other party who has made the revocation schedule application is correct. The revocation schedule application unit 21 checks whether the certificate corresponding to the serial number is stored in the certificate management database 23, and verifies whether the certificate is indeed an electronic certificate issued by the certificate authority 2 itself.

  If there is no problem as a result of the verification in step A5, the revocation schedule application unit 21 transmits revocation schedule application information to the revocation schedule application management unit 22 (step A6). Thereafter, the revocation schedule application management unit 22 transmits an application result indicating that the revocation schedule application has been correctly received to the revocation schedule application unit 13 of the authentication device 1 (step A7).

  On the other hand, if a problem occurs as a result of the verification in step A5, that is, if the certificate verification is NG, the revocation schedule application unit 21 notifies this to the revocation schedule application management unit 22. Thereafter, the revocation schedule application management unit 22 transmits an application result indicating that the revocation schedule application has not been accepted to the revocation schedule application unit 13 of the authentication device 1 (step A7).

  After execution of step A7, the revocation schedule application unit 13 of the authentication device 1 receives the application result transmitted from the certificate authority 2 (step A8). The revocation schedule application process is thus completed.

[List issue processing]
Next, the operation (list issuing process) when the certificate authority 2 issues the revocation schedule certificate list and certificate issuing list will be described with reference to FIG. FIG. 5 is a flowchart showing a list issuing process executed by the certificate authority in the embodiment of the present invention.

  As shown in FIG. 5, first, the list creation unit 24 acquires the revocation schedule application information from the revocation schedule application management unit 22 according to the issuance schedule defined by the certificate authority 2, and the certificate revocation shown in FIG. A schedule list a (see FIG. 6) is generated (step B1).

  FIG. 6 is a diagram showing an example of a certificate revocation schedule list used in the present embodiment. As shown in FIG. 6, in the present embodiment, the certificate revocation schedule list a includes a serial number, a scheduled revocation date and time, and CRL entry extension information.

  Next, the list creation unit 24 deletes, from the certificate revocation schedule list a, an electronic certificate whose revocation date and time has passed with reference to the current date and time from the certificate revocation schedule list a, and deletes the certificate from the certificate revocation schedule list a. Move to the revocation list (step B2). The certificate revocation list includes a serial number, a revocation date and time, and CRL entry extension information as defined in RFC5280.

  Next, the list creation unit 24 encrypts the certificate revocation schedule list a (see FIG. 6) and the certificate revocation list with the CA key held in the certificate management database 22 and obtains the signature. Data for transmission is attached with the data attached (step B3). The created transmission data is transmitted to the authentication device 1 by the list disclosure unit 25.

  In the authentication apparatus 1, the list acquisition unit 14 always receives the latest certificate revocation list and the latest certificate revocation list 25 from the list release unit 25 of the certificate authority 2 based on the Next Update information of the acquired certificate revocation list. Get certificate revocation list. The list acquisition unit 14 stores the acquired certificate revocation list and certificate revocation schedule list in the list storage unit 15.

[Validity verification process]
Next, an electronic certificate validity verification process (validity verification process) performed by the authentication apparatus 1 in response to an authentication request from the terminal apparatus 3 will be described with reference to FIG. FIG. 7 is a flowchart showing the electronic certificate validity verification process executed by the authentication apparatus 1 according to the embodiment of the present invention.

  First, as a premise, the service user makes an authentication request to the authentication device 1 from the terminal device 3. At this time, the authentication request unit 32 of the terminal device 3 receives the authentication request information including the electronic certificate and the private key stored in the user certificate storage unit 31 via the network 4. Transmit to the unit 17.

  In the authentication device 1, the authentication receiving unit 17 receives the authentication request information from the authentication request unit 32 and passes the received authentication request information to the authentication control unit 19. In addition, the authentication control unit 19 transmits the user's electronic certificate included in the authentication request information to the certificate validity verification unit 16. Thereafter, a process for verifying the validity of the certificate is started.

  As shown in FIG. 7, first, the certificate validity verification unit 16 receives the electronic certificate transmitted from the authentication control unit 19 (step C1). The accepted electronic certificate is a verification target. Next, the certificate validity verification unit 16 acquires a certificate revocation list and a certificate revocation schedule list from the list storage unit 15 (step C2).

  Next, the certificate validity verification unit 16 determines whether the electronic certificate to be verified exists in the certificate revocation list (step C3). If it exists as a result of the determination in step C3, the certificate validity verification unit 16 returns “revocation” to the authentication control unit 19 (step C4). On the other hand, if the result of determination in step C3 does not exist, the certificate validity verification unit 16 determines whether the electronic certificate to be verified exists in the certificate revocation schedule list a (step S3). C5).

  If the certificate does not exist as a result of the determination in step C5, the certificate validity verification unit 16 returns “valid” to the authentication control unit 19 (step C6). On the other hand, if it exists as a result of the determination in step C5, the certificate validity verification unit 16 determines whether or not the scheduled revocation date a2 has elapsed with reference to the current date (step C7).

  If the result of determination in step C7 has not elapsed, the certificate validity verification unit 16 returns “expiration schedule” to the authentication control unit 19 (step C8). On the other hand, if the result of determination in step C7 has passed, the certificate validity verification unit 16 returns “expired expiration date” to the authentication control unit 19 (step C9).

  Thereafter, the authentication control unit 19 determines whether or not authentication is possible based on the verification result returned from the certificate validity verification unit 16 (step C10). For example, if the verification result is “valid” (step C6), the authentication control unit 19 determines that the authentication is successful.

  If the verification result is “expired”, the authentication control unit 19 determines that the authentication is successful, but displays a warning dialog near the end of the contract on the terminal device 3. If the verification result is “exceeded expiration date” or “revocation”, the authentication control unit 19 determines that the authentication has failed.

  When the authentication control unit 19 determines that the authentication is successful, the authentication control unit 19 accesses the authentication information management database 18 and determines the user ID and the access right based on the serial number of the electronic certificate of the user to be verified. Is specified (see FIG. 3). Then, the authentication control unit 19 gives authorization to the user via the terminal device 3 using the specified user ID and access right.

[Effects of the embodiment]
As described above, according to the present embodiment, when authenticating the use of a service using an electronic certificate, the original revocation date and time is not dependent on the issuance timing and acquisition timing of the certificate revocation list. Along with this, the validity of the electronic certificate can be judged. Therefore, even if there is a time lag between the timing of the certificate revocation list at the certificate authority and the contract period for using the service, a situation where the certificate is determined to be valid after the contract period ends is avoided.

[Modification]
In the above example, a certificate revocation schedule list is created separately from the certificate revocation list, but the present embodiment is not limited to this. In the present embodiment, the certificate revocation list may include a certificate revocation schedule list, that is, a certificate revocation schedule list and a certificate revocation list may be created as an integrated list. .

  The present embodiment can also be applied when an electronic certificate is used for purposes other than authentication. In this case as well, the certificate revocation schedule list can be used for verification of the electronic certificate.

  The first program in the present embodiment may be a program that causes a computer to execute steps A1 to A4 and A8 shown in FIG. 4 and steps C1 to C10 shown in FIG. By installing and executing this program on a computer, the authentication device 1 according to the present embodiment can be realized.

  In this case, a CPU (Central Processing Unit) of the computer functions as an authentication processing unit 10, a revocation schedule application unit 13, a list acquisition unit 14, and an authentication reception unit 17, and performs processing. In the above case, a storage device such as a hard disk provided in the computer can function as the service certificate storage unit 11, the contract information management database 12, the list storage unit 15, and the authentication information management database 18.

  Furthermore, in the present embodiment, the authentication device 1 does not have to be constructed by a single computer. For example, the contract information management database 12 and the authentication are performed by a computer different from the computer in which the first program is installed. The aspect by which the information management database 18 is constructed | assembled may be sufficient. In this aspect, a storage device of another computer functions as the contract information management database 12 and the authentication information management database 18.

  The second program in the present embodiment may be a program that causes a computer to execute steps A5 to A7 shown in FIG. 4 and steps B1 to B3 shown in FIG. By installing and executing this program in a computer, the certificate authority 2 in the present embodiment can be realized.

  In this case, a CPU (Central Processing Unit) of the computer functions as the revocation schedule application receiving unit 21, the revocation schedule application management unit 22, the list creation unit 24, and the list disclosure unit 25, and performs processing. In the above case, a storage device such as a hard disk provided in the computer can function as the certificate management database 23.

  Further, in the present embodiment, the certificate authority 2 may not be constructed by one computer. For example, the certificate management database 23 is constructed by a computer different from the computer in which the second program is installed. It may be a mode that is. In this aspect, the storage device of another computer functions as the certificate management database 23.

  Here, a computer that realizes the authentication apparatus 1 by executing the first program in the embodiment and a computer that realizes the authentication station 2 by executing the second program will be described with reference to FIG. FIG. 8 is a block diagram illustrating an example of a computer that implements the authentication apparatus and the certificate authority according to the embodiment of the present invention.

  As shown in FIG. 8, the computer 110 includes a CPU 111, a main memory 112, a storage device 113, an input interface 114, a display controller 115, a data reader / writer 116, and a communication interface 117. These units are connected to each other via a bus 121 so that data communication is possible.

  The CPU 111 performs various calculations by developing the program (code) in the present embodiment stored in the storage device 113 in the main memory 112 and executing them in a predetermined order. The main memory 112 is typically a volatile storage device such as a DRAM (Dynamic Random Access Memory). Further, the program in the present embodiment is provided in a state of being stored in a computer-readable recording medium 120. Note that the program in the present embodiment may be distributed on the Internet connected via the communication interface 117.

  Specific examples of the storage device 113 include a hard disk and a semiconductor storage device such as a flash memory. The input interface 114 mediates data transmission between the CPU 111 and an input device 118 such as a keyboard and a mouse. The display controller 115 is connected to the display device 119 and controls display on the display device 119. The data reader / writer 116 mediates data transmission between the CPU 111 and the recording medium 120, and reads a program from the recording medium 120 and writes a processing result in the computer 110 to the recording medium 120. The communication interface 117 mediates data transmission between the CPU 111 and another computer.

  Specific examples of the recording medium 120 include general-purpose semiconductor storage devices such as CF (Compact Flash) and SD (Secure Digital), magnetic storage media such as a flexible disk, or CD-ROM (Compact Disk). Optical storage media such as Read Only Memory).

  Part or all of the above-described embodiments can be expressed by (Appendix 1) to (Appendix 14) described below, but is not limited to the following description.

(Appendix 1)
An authentication system comprising an authentication device that authenticates an electronic certificate transmitted from a user terminal device, and a certificate authority that issues the electronic certificate,
The certificate authority creates a certificate revocation list that identifies electronic certificates that are scheduled to be revoked, and a certificate revocation list that identifies revoked electronic certificates,
The authentication device
It is determined whether the transmitted electronic certificate is included in a certificate revocation list or a certificate revocation schedule list.
If the electronic certificate is included in a certificate revocation list, notify the terminal device that the electronic certificate has been revoked,
When the electronic certificate is included in the certificate revocation schedule list, it is further determined whether or not the revocation schedule date has passed with reference to the current date and time. Is notified to the terminal device, and if it has passed, the terminal device is notified that the scheduled expiration date has passed,
An authentication system characterized by that.

(Appendix 2)
The authentication device identifies an electronic certificate that is revoked within a set period among electronic certificates for each user to be authenticated, and includes information including an identifier of the identified electronic certificate and a scheduled expiration date and time. To the station,
The authentication system according to appendix 1, wherein the certificate authority creates the certificate revocation schedule list based on the transmitted information.

(Appendix 3)
According to the set schedule, the certificate authority identified and identified an electronic certificate whose scheduled revocation date has passed based on the current date and time among the digital certificates included in the certificate revocation schedule list The authentication system according to appendix 1 or 2, wherein an electronic certificate is deleted from the certificate revocation list and added to the certificate revocation list.

(Appendix 4)
When the authentication device acquires a service certificate issued by the certificate authority to the authentication device in advance and transmits the information to the certificate authority, the service certificate is encrypted in the information. Attach the obtained signature data,
When the certificate authority determines whether or not the service certificate obtained by decrypting the signature data and the electronic certificate specified from the information are valid, and both are valid Create the certificate revocation schedule list,
The authentication system according to attachment 2.

(Appendix 5)
The authentication system according to any one of appendices 1 to 4, wherein the certificate authority creates the certificate revocation schedule list and the certificate revocation list as an integrated list.

(Appendix 6)
An authentication device that authenticates an electronic certificate transmitted from a user terminal device,
A certificate revocation list that identifies a revoked electronic certificate created by the certificate authority and a certificate revocation list that identifies a revoked electronic certificate are created from the certificate authority that issues the electronic certificate. Receive the list acquisition unit,
Determining whether the transmitted electronic certificate is included in a certificate revocation list or a certificate revocation schedule list;
As a result of the determination, if the electronic certificate is included in a certificate revocation list, the terminal device is notified that the electronic certificate has been revoked,
When the electronic certificate is included in the certificate revocation schedule list, it is further determined whether or not the revocation schedule date has passed with reference to the current date and time. An authentication processing unit for notifying the terminal device that the scheduled expiration date has passed, and
An authentication device comprising:

(Appendix 7)
A certificate authority that issues electronic certificates in response to user requests,
A list creation unit is provided for creating a certificate revocation list that identifies an electronic certificate that is scheduled to be revoked among the issued electronic certificates, and a certificate revocation list that identifies a revoked electronic certificate. A certificate authority characterized by that.

(Appendix 8)
An authentication method using an authentication device that authenticates an electronic certificate transmitted from a user terminal device, and a certificate authority that issues the electronic certificate,
(A) creating, by the certificate authority, a certificate revocation schedule list that identifies an electronic certificate that is scheduled to be revoked and a certificate revocation list that identifies a revoked electronic certificate;
(B) determining whether the electronic certificate transmitted by the authentication device is included in a certificate revocation list or a certificate revocation schedule list;
(C) If the result of determination in step (b) is that the electronic certificate is included in a certificate revocation list, the terminal device indicates that the electronic certificate has been revoked by the authentication device. To notify, step,
(D) As a result of the determination in the step (b), when the electronic certificate is included in the certificate revocation schedule list, the revocation schedule date and time has passed by the authentication device based on the current date and time. If the result of the determination is that it has not elapsed, the terminal device is notified that revocation is scheduled, and if it has elapsed, that the expected revocation date has passed. Notifying the terminal device; and
An authentication method characterized by comprising:

(Appendix 9)
(E) By the authentication device, an electronic certificate that is revoked within a set period is specified among electronic certificates for each user to be authenticated, and information including an identifier of the specified electronic certificate and a scheduled expiration date and time Sending to the certificate authority,
9. The authentication method according to appendix 8, wherein in the step (a), the certificate revocation schedule list is created based on the information transmitted by the certificate authority.

(Appendix 10)
(F) According to a schedule set by the certification authority, among the electronic certificates included in the certificate revocation schedule list, the electronic certificate whose revocation date and time has passed based on the current date and time is specified. The authentication method according to appendix 8 or 9, further comprising a step of deleting the specified electronic certificate from the certificate revocation list and adding it to the certificate revocation list.

(Appendix 11)
In the step (e), when the authentication device obtains a service certificate issued in advance by the certificate authority to the authentication device and transmits the information to the certificate authority, Attach signature data obtained by encrypting the service certificate,
In the step (a), the certificate authority determines whether or not the service certificate obtained by decrypting the signature data and the electronic certificate specified from the information are valid, The certificate revocation schedule list is created when the certificate is valid.
The authentication method according to attachment 9.

(Appendix 12)
The authentication method according to any one of appendices 8 to 11, wherein in the step (a), the certificate revocation list and the certificate revocation list are created as an integrated list by the certificate authority.

(Appendix 13)
A program for authenticating an electronic certificate transmitted from a user terminal device by a computer,
In the computer,
(A) A certificate revocation list for identifying a revoked electronic certificate created by the certificate authority and a certificate revocation for identifying a revoked electronic certificate from the certificate authority that issues the electronic certificate Receive list and step,
(B) determining whether the transmitted electronic certificate is included in a certificate revocation list or a certificate revocation schedule list;
(C) As a result of the determination in the step (b), when the electronic certificate is included in a certificate revocation list, the terminal device is notified that the electronic certificate has been revoked. When,
(D) If the result of the determination in step (b) is that the electronic certificate is included in the certificate revocation schedule list, it is further determined whether or not the revocation schedule date has passed based on the current date and time. If the result of the determination is that it has not elapsed, the terminal device is notified that the expiration date is scheduled, and if it has elapsed, the terminal device is notified that the scheduled expiration date has passed. Step,
A program that executes

(Appendix 14)
A program for building a certificate authority by a computer,
In the computer,
(A) issuing an electronic certificate in response to a request from a user;
(B) A certificate revocation schedule list that identifies an electronic certificate that is scheduled to be revoked among the electronic certificates issued in the step (a), and a certificate revocation list that identifies a revoked electronic certificate; Create a step and a
A program that executes

  As described above, according to the present invention, it is possible to determine the validity of an electronic certificate without depending on the issuance timing and acquisition timing of a certificate revocation list. The present invention is useful for a system that requires authentication using an electronic certificate. The present invention can also be applied when an electronic certificate is used for purposes other than authentication.

DESCRIPTION OF SYMBOLS 1 Authentication apparatus 2 Authentication station 3 Terminal apparatus 4 Network 5 Authentication system 10 Authentication processing part 11 Service certificate storage part 12 Contract information management database 13 Revocation schedule application part 14 List acquisition part 15 List storage part 16 Certificate validity verification part 17 Authentication receiving unit 18 Authentication information management database 19 Authentication control unit 21 Revocation schedule application reception unit 22 Revocation schedule application management unit 23 Certificate management database 24 List creation unit 24
25 List disclosure section 25
110 Computer 111 CPU
112 Main Memory 113 Storage Device 114 Input Interface 115 Display Controller 116 Data Reader / Writer 117 Communication Interface 118 Input Device 119 Display Device 120 Recording Medium 121 Bus

Claims (8)

An authentication system comprising an authentication device that authenticates an electronic certificate transmitted from a user terminal device, and a certificate authority that issues the electronic certificate,
The certificate authority creates a certificate revocation list that identifies electronic certificates that are scheduled to be revoked, and a certificate revocation list that identifies revoked electronic certificates,
The authentication device
It is determined whether the transmitted electronic certificate is included in a certificate revocation list or a certificate revocation schedule list.
If the electronic certificate is included in a certificate revocation list, notify the terminal device that the electronic certificate has been revoked,
When the electronic certificate is included in the certificate revocation schedule list, it is further determined whether or not the revocation schedule date has passed with reference to the current date and time. Is notified to the terminal device, and if it has passed, the terminal device is notified that the scheduled expiration date has passed,
An authentication system characterized by that. The authentication device identifies an electronic certificate that is revoked within a set period among electronic certificates for each user to be authenticated, and includes information including an identifier of the identified electronic certificate and a scheduled expiration date and time. To the station,
The authentication system according to claim 1, wherein the certificate authority creates the certificate revocation schedule list based on the transmitted information.   According to the set schedule, the certificate authority identified and identified an electronic certificate whose scheduled revocation date has passed based on the current date and time among the digital certificates included in the certificate revocation schedule list The authentication system according to claim 1 or 2, wherein an electronic certificate is deleted from the certificate revocation list and added to the certificate revocation list. When the authentication device acquires a service certificate issued by the certificate authority to the authentication device in advance and transmits the information to the certificate authority, the service certificate is encrypted in the information. Attach the obtained signature data,
When the certificate authority determines whether or not the service certificate obtained by decrypting the signature data and the electronic certificate specified from the information are valid, and both are valid ,
Creating the certificate revocation schedule list;
The authentication system according to claim 2.   The authentication system according to claim 1, wherein the certificate authority creates the certificate revocation schedule list and the certificate revocation list as an integrated list. An authentication device that authenticates an electronic certificate transmitted from a user terminal device,
A certificate revocation list that identifies a revoked electronic certificate created by the certificate authority and a certificate revocation list that identifies a revoked electronic certificate are created from the certificate authority that issues the electronic certificate. Receive the list acquisition unit,
Determining whether the transmitted electronic certificate is included in a certificate revocation list or a certificate revocation schedule list;
As a result of the determination, if the electronic certificate is included in a certificate revocation list, the terminal device is notified that the electronic certificate has been revoked,
When the electronic certificate is included in the certificate revocation schedule list, it is further determined whether or not the revocation schedule date has passed with reference to the current date and time. An authentication processing unit for notifying the terminal device that the scheduled expiration date has passed, and
An authentication device comprising: An authentication method using an authentication device that authenticates an electronic certificate transmitted from a user terminal device, and a certificate authority that issues the electronic certificate,
(A) creating, by the certificate authority, a certificate revocation schedule list that identifies an electronic certificate that is scheduled to be revoked and a certificate revocation list that identifies a revoked electronic certificate;
(B) determining whether the electronic certificate transmitted by the authentication device is included in a certificate revocation list or a certificate revocation schedule list;
(C) If the result of determination in step (b) is that the electronic certificate is included in a certificate revocation list, the terminal device indicates that the electronic certificate has been revoked by the authentication device. To notify, step,
(D) As a result of the determination in the step (b), when the electronic certificate is included in the certificate revocation schedule list, the revocation schedule date and time has passed by the authentication device based on the current date and time. If the result of the determination is that it has not elapsed, the terminal device is notified that revocation is scheduled, and if it has elapsed, that the expected revocation date has passed. Notifying the terminal device; and
An authentication method characterized by comprising: A program for authenticating an electronic certificate transmitted from a user terminal device by a computer,
In the computer,
(A) A certificate revocation list for identifying a revoked electronic certificate created by the certificate authority and a certificate revocation for identifying a revoked electronic certificate from the certificate authority that issues the electronic certificate Receive list and step,
(B) determining whether the transmitted electronic certificate is included in a certificate revocation list or a certificate revocation schedule list;
(C) As a result of the determination in the step (b), when the electronic certificate is included in a certificate revocation list, the terminal device is notified that the electronic certificate has been revoked. When,
(D) If the result of the determination in step (b) is that the electronic certificate is included in the certificate revocation schedule list, it is further determined whether or not the revocation schedule date has passed based on the current date and time. If the result of the determination is that it has not elapsed, the terminal device is notified that the expiration date is scheduled, and if it has elapsed, the terminal device is notified that the scheduled expiration date has passed. Step,
A program that executes

Images