JPWO2010067812A1 - Self-authentication communication device, self-authentication verification communication device, device authentication system, device authentication method of device authentication system, self-authentication communication program, and self-authentication verification communication program - Google Patents

Abstract

In a system in which a communication device uses an electronic certificate for secure communication, even if the self-certificate is not pre-offline distributed, the device that the self-certificate is surely shown in the self-certificate It is possible to verify that it was generated by. The communication device 200 generates an ID-based encryption secret key 293b using the device unique ID 291b as a public key based on the master key and the public parameter 293a. Next, the communication device 200 generates an electronic signature of the RSA public key 292b as an ID-based cryptographic signature 294b using the ID-based cryptographic private key 293b. Next, the communication device 200 generates the RSA self-signature 294a for the RSA public key 292b, the expiration date, the host name 291c, the device unique ID 291b, and the ID base encryption signature 294b. Then, the communication device 200 generates a self-signed certificate 294 including the ID-based cryptographic signature 294b and the RSA self-signature 294a.

Description

  The present invention is, for example, self-authentication communication device, self-authentication verification communication device, device authentication system, and device authentication system for device-to-device, device-to-management terminal, device-to-server, and secure communication. The present invention relates to a method, a self-authentication communication program, and a self-authentication verification communication program.

With the progress of networks, products and services that provide added value through network connections such as surveillance cameras and video recorders, car navigation systems and map distribution servers, home and building equipment and their management terminals have appeared.
Defraid standard cryptographic authentication communication using public key certificates such as Secure Socket Layer (SSL) / Transport Layer Security (TLS) and IPSec (IP Security) because threats of wiretapping / falsification and spoofing occur due to network connection There is an increasing need for mounting functions on devices, terminals, and servers.
When performing cryptographic authentication communication, it is necessary to set a key / certificate necessary for encryption / authentication to the device. The certificate needs to include the host name and IP address of the device.

When storing the private key and the certificate in the device as in Patent Document 1, information that is not determined when the device is manufactured, such as an IP address and a host name, cannot be stored in the certificate.
As a result, when a device communicates using a private key and a certificate (for example, when the device has an SSL server function), when accessing the device from a browser via https communication, the “access destination device is impersonated. Is displayed on the browser. This is because the host name corresponding part at the head of the URL specified by the browser and the host name corresponding part stored in the CommonName of the subject name of the certificate sent from the device do not match. This is because the browser cannot determine that the device is a specified legitimate device.

On the other hand, in order to include device identification information such as the host name in the device certificate when the system is built, the device identification information is set in the device and then certificate generation processing is performed on the device. Need to be set.
If it is acceptable for the device administrator to obtain a certificate from a certificate authority and set the obtained certificate on the device, it is easy to set the certificate including the host name on the device. . However, it is generally not permitted to carry out the above complicated procedures involving human resources for equipment installed in home buildings and information home appliances sold to homes.

  A network camera, which is a type of equipment, has a function of automatically generating a certificate including a host name when a system is constructed. However, the certificate is a self-signed certificate (SelfSign Certificate). The self-signed certificate is different from the certificate that can verify the validity based on the certificate separately issued from the certificate authority, and there is no certificate of the certificate authority for verifying the validity. Therefore, when using a self-signed certificate, the self-signed certificate should be delivered in advance to the verification side system using secure offline transmission means, and the verification side system can trust the self-signed certificate. It is necessary to install it as a certificate.

Special table 2004-519874 gazette JP 2001-21171 A Special Table 2002-535740

For example, the present invention has the following objects.
In a system in which equipment such as equipment and information appliances communicates securely using a certificate, the equipment can automatically generate and update a certificate that includes device identification information such as a host name that is not determined at the time of manufacture. To.
Even if the certificate is not pre-offline distributed, the communication partner device or system can verify that the certificate is indeed generated by the device indicated in the certificate.

  A self-authentication communication device according to the present invention includes a device ID key generation unit that generates, using a CPU (Central Processing Unit), encryption key data as a device ID key based on a device ID (IDentity) that identifies the device, A device ID authentication information generation unit that generates authentication information of the public key data as device ID authentication information using a CPU based on the public key data of the device and the device ID key generated by the device ID key generation unit; A self-authentication information generating unit that generates the authentication information of the predetermined data as self-authentication information on the basis of the data and the private key data of the self-device, and the predetermined data and the device ID authentication information generation unit An electronic certificate including the device ID authentication information generated by the device and the self-authentication information generated by the self-authentication information generation unit And a self-certificate transmission unit that transmits the information as a self-certificate (also referred to as a self-signed certificate) to a specific device using a communication device.

  The self-authentication information generation unit generates the self-authentication information using the public key data, the device ID, and the device ID authentication information as the predetermined data, and the self-certificate transmission unit A self-certificate including device ID authentication information, the self-authentication information, and the predetermined data excluding the device ID authentication information is transmitted.

  The self-authentication communication device further includes an authentication key pair update unit that updates the secret key data and the public key data as an authentication key pair using a CPU at a predetermined timing, and the device ID authentication information generation unit includes: The device ID authentication information is newly generated based on the public key data updated by the authentication key pair update unit, and the self-authentication information generation unit converts the secret key data updated by the authentication key pair update unit. The self-authentication information is newly generated based on the device ID authentication information newly generated by the device ID authentication information generation unit and the self-authentication information generation unit. A self-certificate including self-authentication information is transmitted to the specific device.

  The device ID key generation unit generates an ID base encryption secret key using the device ID as an ID base encryption public key by the ID base encryption method as the device ID key, and the device ID authentication information generation unit An ID-based cryptographic private key signature, which is an electronic signature of the public key data, is generated as the device ID authentication information using a cryptographic private key, and the self-authentication information generation unit uses the private key data to generate the predetermined data Is generated as the self-authentication information.

  The self-certificate transmission unit transmits the self-certificate including the public key data, the device ID, the ID-based cryptographic private key signature, and the self-signature to the specific device.

  The device ID key generation unit generates a device individual secret key that is secret key data and a device individual public key that is public key data as the device ID key using the device ID by a public key cryptosystem, The device ID authentication information generation unit generates a device individual secret key signature, which is an electronic signature of the public key data of the own device, using the device individual secret key as the device ID authentication information, and the self authentication information generation unit The self-signature, which is an electronic signature of the predetermined data, is generated as the self-authentication information using the private key data of the self-device.

  The self-certificate sending unit sends the self-certificate to the specific device including the public key data of the device itself, the device individual public key, the device individual private key signature, and the self signature.

  The self-authenticating communication device further includes a device individual signature generation unit that generates, using a CPU, an electronic signature of the device individual public key as a device individual signature based on the private key data of the device itself. The transmission unit transmits the self certificate including the device individual signature generated by the device individual signature generation unit to the specific device.

  The device ID key generation unit generates a device individual common key, which is common key data, using the device ID by a common key encryption method as the device ID key, and the device ID authentication information generation unit generates the device individual common key. A device-specific common key MAC that is a MAC (Message Authentication Code) of the public key data is generated as the device ID authentication information using a key, and the self-authentication information generation unit uses the secret key data to generate the predetermined key A self-signature that is an electronic signature of data is generated as the self-authentication information.

  The self certificate transmitting unit transmits the self certificate including the public key data, the device ID, the device individual common key MAC, and the self signature to the specific device.

  The self-authentication verification communication device of the present invention includes a self-certificate receiving unit that receives a self-certificate transmitted by the self-authentication communication device using a communication device, and a self-certificate received by the self-certificate reception unit. And a self-certificate verification unit that verifies the password using a CPU.

  The self-certificate receiver receives an ID-based cryptographic private key signature that is an electronic signature of the public key data generated using an ID-based cryptographic private key having the device ID as an ID-based cryptographic public key. And a self-certificate that includes a self-signature that is a digital signature of the predetermined data generated using the private key data as the self-authentication information. The self-signature is verified using public key data, and the ID-based cryptographic private key signature is verified using the device ID.

  The self-certificate receiving unit includes, as the device ID authentication information, a device individual secret key signature that is an electronic signature of the public key data generated using a device individual secret key that is secret key data based on the device ID. And receiving a self-certificate including a self-signature that is an electronic signature of the predetermined data generated using the private key data as the self-authentication information, and the self-certificate verification unit is configured to receive the public key data The device individual private key signature is verified using the device individual public key corresponding to the device individual private key.

  The self-certificate receiving unit performs device ID authentication on a device individual key MAC that is a MAC (Message Authentication Code) of the public key data generated using a device individual common key that is common key data based on the device ID. And a self-certificate that includes a self-signature that is a digital signature of the predetermined data generated using the private key data as the self-authentication information. The self-signature is verified using public key data, and the device individual key MAC is verified using the device individual common key.

  The device authentication system of the present invention includes the self-authentication communication device and the self-authentication verification communication device.

  The device authentication method of the device authentication system of the present invention is a device authentication method of a device authentication system having a self-authentication communication device and a self-authentication verification communication device. In the self-authentication communication device, the device ID key generation unit Based on the device ID (IDentity) for identifying the device, the device ID key generation processing is performed using the CPU (Central Processing Unit) with the encryption key data as the device ID key, and the device ID authentication information generation unit performs the disclosure of the device itself Based on the key data and the device ID key generated by the device ID key generation unit, a device ID authentication information generation process is performed for generating authentication information of the public key data as device ID authentication information using a CPU, and self-authentication The information generation unit self-identifies the authentication information of the predetermined data based on the predetermined data and the private key data of the own device. Self-authentication information generation processing generated using a CPU as authentication information, and the self-certificate transmission unit generates the predetermined data, the device ID authentication information generated by the device ID authentication information generation unit, and the self-authentication information generation The self-certificate receiving unit performs the self-certificate transmission processing for transmitting the electronic certificate including the self-authentication information generated by the communication unit as a self-certificate using a communication device to the specific device. Performs a self-certificate reception process for receiving a self-certificate transmitted by a self-authentication communication device using a communication device, and the self-certificate verification unit receives the self-certificate received by the self-certificate reception unit. A self-certificate verification process is performed for verification using the CPU.

The self-authentication communication program of the present invention includes a device ID key generation process that uses a CPU (Central Processing Unit) to generate encryption key data as a device ID key based on a device ID (IDentity) that identifies the device, Device ID authentication information generation processing for generating authentication information of the public key data as device ID authentication information using a CPU based on the public key data and the device ID key generated by the device ID key generation processing;
Self-authentication information generation processing for generating authentication information of the predetermined data using the CPU as self-authentication information based on the predetermined data and the private key data of the own device, and generation of the predetermined data and the device ID authentication information Self-certificate transmission processing for transmitting a digital certificate including the device ID authentication information generated by the processing and the self-authentication information generated by the self-authentication information generation processing to a specific device as a self-certificate using a communication device To the communication device.

  The self-authentication verification communication program of the present invention includes: a self-certificate reception process for receiving a self-certificate transmitted by the self-authentication communication device using a communication device; and a self-certificate received by the self-certificate reception process The communication device is caused to execute a self-certificate verification process for verifying the certificate using the CPU.

According to the present invention, for example, the following effects can be obtained.
In a system in which communication equipment such as equipment and information appliances communicates securely using electronic certificates, it is possible to communicate with the other device without pre-offline distribution of a self-signed certificate (an example of an electronic certificate). It is possible to verify that the self-signed certificate has been generated by the device indicated by the self-signed certificate.

1 is a configuration diagram of a device authentication system 100 according to Embodiment 1. FIG. 3 is a diagram illustrating an example of hardware resources of the communication device 200 according to Embodiment 1. FIG. 2 is a functional configuration diagram of a communication device 200 according to Embodiment 1. FIG. The figure which shows the stored data at the time of manufacture of the communication apparatus 200 in Embodiment 1 (before processing at the time of manufacture). 5 is a flowchart showing processing at the time of manufacturing the communication device 200 according to the first embodiment. The figure which shows the stored data at the time of manufacture of the communication apparatus 200 in Embodiment 1 (after processing at the time of manufacture). 4 is a flowchart showing processing at the time of system construction of the communication device 200 according to the first embodiment. The figure which shows the stored data at the time of the system construction of the communication apparatus 200 in Embodiment 1 (after the system construction process). FIG. 2 is a diagram showing an operation outline of the device authentication system 100 according to the first embodiment. 4 is a flowchart showing processing during operation of the communication device 200 according to the first embodiment. 10 is a flowchart showing processing at the time of manufacturing the communication device 200 according to the second embodiment. FIG. 6 is a functional configuration diagram of a communication device 200 according to Embodiment 3. 10 is a flowchart showing self-signed certificate update processing in the third embodiment. FIG. 6 is a functional configuration diagram of a communication device 200 according to a fourth embodiment. The figure which shows the stored data at the time of manufacture of the communication apparatus 200 in Embodiment 4 (before processing at the time of manufacture). 10 is a flowchart showing processing at the time of manufacturing the communication device 200 according to the fourth embodiment. The figure which shows the stored data at the time of manufacture of the communication apparatus 200 in Embodiment 4 (after processing at the time of manufacture). 9 is a flowchart showing processing at the time of system construction of the communication device 200 according to the fourth embodiment. The figure which shows the stored data at the time of the system construction of the communication apparatus 200 in Embodiment 4 (after a system construction time process). 10 is a flowchart showing processing during operation of the communication device 200 according to the fourth embodiment. FIG. 10 is a functional configuration diagram of a communication device 200 according to a fifth embodiment. The figure which shows the stored data at the time of manufacture of the communication apparatus 200 in Embodiment 5 (before processing at the time of manufacture). 10 is a flowchart showing processing at the time of manufacturing the communication device 200 according to the fifth embodiment. The figure which shows the stored data at the time of manufacture (after processing at the time of manufacture) of the communication apparatus 200 in Embodiment 5. FIG. 10 is a flowchart showing processing at the time of system construction of the communication device 200 according to the fifth embodiment. The figure which shows the stored data at the time of the system construction of the communication apparatus 200 in Embodiment 5 (after the system construction time process). FIG. 10 is a diagram illustrating an operation outline of the device authentication system 100 according to the fifth embodiment. 10 is a flowchart showing processing during operation of the communication device 200 according to the fifth embodiment. FIG. 10 is a functional configuration diagram of a communication device 200 according to a sixth embodiment. 18 is a flowchart showing processing at the time of manufacturing the communication device 200 according to the sixth embodiment. 18 is a flowchart showing processing at the time of system construction of the communication device 200 according to the sixth embodiment. 18 is a flowchart illustrating processing during operation of the communication device 200 according to the sixth embodiment.

Embodiment 1 FIG.
Each device generates an ID-based encryption private key at the time of manufacture, and each device has a self-signed certificate including a signature of an RSA public key (registered trademark “RSA”, the same applies hereinafter) using the ID-based encryption private key at the time of system construction Will be described in which the devices mutually authenticate using their self-signed certificates during operation.

FIG. 1 is a configuration diagram of a device authentication system 100 according to the first embodiment.
The configuration of the device authentication system 100 according to Embodiment 1 will be described below with reference to FIG.

In the device authentication system 100, a plurality of communication devices 200 (communication device A201, communication device B202) (an example of a self-authentication communication device) (an example of a self-authentication verification communication device) is a communication network such as the Internet or a LAN (local area network). Communication is performed via 110.
When each communication device 200 starts communication, each communication device 200 transmits a self-signed certificate 294 (an example of a self-certificate) to each other, verifies the self-signed certificate 294 of the communication partner, and the communication partner communicates with another communication device 200. Make sure you are not impersonating.
The communication device 200 may be any device having a communication function, and examples of the communication device 200 include a monitoring camera having a communication function, a video record, and a terminal device (for example, a personal computer).

FIG. 2 is a diagram illustrating an example of hardware resources of the communication device 200 according to the first embodiment.
2, the communication device 200 includes a CPU 911 (also referred to as a central processing unit, a central processing unit, a processing unit, an arithmetic unit, a microprocessor, a microcomputer, or a processor) that executes a program. The CPU 911 is connected to the ROM 913, the RAM 914, the communication board 915, and the magnetic disk device 920 via the bus 912, and controls these hardware devices. Instead of the magnetic disk device 920, another storage device (for example, a semiconductor memory such as a RAM or a flash memory) may be used.
The RAM 914 is an example of a volatile memory. The storage medium of the ROM 913 and the magnetic disk device 920 is an example of a nonvolatile memory. These are examples of a storage device, a storage device, or a storage unit. A storage device in which input data is stored is an example of an input device, an input device, or an input unit, and a storage device in which output data is stored is an example of an output device, an output device, or an output unit.
The communication board 915 is an example of an input / output device, an input / output device, or an input / output unit.

  The communication board 915 is connected to a communication network such as a LAN, the Internet, a WAN (Wide Area Network), and a telephone line by wire or wireless.

  The magnetic disk device 920 stores an OS 921 (operating system), a program group 923, and a file group 924. The programs in the program group 923 are executed by the CPU 911 and the OS 921.

  The program group 923 stores a program for executing a function described as “˜unit” in the embodiment. The program is read and executed by the CPU 911.

In the file group 924, in the embodiment, result data such as “determination result”, “calculation result”, “processing result”, etc. when the function “˜part” is executed, “˜part” The data to be passed between programs that execute the function “,” other information, data, signal values, variable values, and parameters are stored as items “˜file” and “˜database”.
The “˜file” and “˜database” are stored in a recording medium such as a disk or a memory. Information, data, signal values, variable values, and parameters stored in a storage medium such as a disk or memory are read out to the main memory or cache memory by the CPU 911 via a read / write circuit, and extracted, searched, referenced, compared, and calculated. Used for CPU operations such as calculation / processing / output / printing / display. During these CPU operations, information, data, signal values, variable values, and parameters are temporarily stored in the main memory, cache memory, and buffer memory.
In addition, arrows in the flowcharts described in the embodiments mainly indicate input / output of data and signals, and the data and signal values are recorded in the memory of the RAM 914, the magnetic disk of the magnetic disk device 920, and other recording media. . Data and signal values are transmitted online via a bus 912, signal lines, cables, or other transmission media.

  In addition, what is described as “˜unit” in the embodiment may be “˜circuit”, “˜device”, “˜device”, and “˜step”, “˜procedure”, “˜”. Processing ". That is, what is described as “˜unit” may be realized by firmware stored in the ROM 913. Alternatively, only software, hardware such as elements, devices, substrates, and wiring, a combination of software and hardware, or a combination of firmware may be used. Firmware and software are stored as programs on a magnetic disk or other recording medium. The program is read by the CPU 911 and executed by the CPU 911. That is, the program causes the computer to function as “to part”. Alternatively, the communication device 200 (computer) is caused to execute the procedure and method of “˜unit”.

FIG. 3 is a functional configuration diagram of the communication device 200 according to the first embodiment.
A functional configuration of communication device 200 (an example of a self-authentication communication device) (an example of a self-authentication verification communication device) according to Embodiment 1 will be described below with reference to FIG.

  The communication device 200 includes an ID-based encryption secret key generation unit 210 (an example of a device ID key generation unit), a system information setting unit 220, an RSA key pair generation unit 221, and a self-signature generation unit 222 (an example of a self-authentication information generation unit). A self-signed certificate generation unit 223, an ID-based cryptographic signature generation unit 230 (an example of a device ID authentication information generation unit), an SSL communication unit 240 (an example of a self-certificate transmission unit) (an example of a self-certificate reception unit), A self-signed certificate verification unit 241 (an example of a self-certificate verification unit), an encryption authentication communication unit 242 and a device storage unit 290 are provided.

The device storage unit 290 stores data used in the communication device 200 using a storage medium.
For example, the device storage unit 290 includes a master key 291a, a device unique ID 291b, a host name 291c, an RSA key pair 292, a public parameter 293a, an ID-based encryption private key 293b, a self-signed certificate 294, an RSA self-signed 294a, an ID described later. The base encryption signature 294b, pre-master secret 295a, session key 295b, SSL signature 295c, and communication data 295d are stored.

The ID-based encryption secret key generation unit 210 (an example of a device ID key generation unit) is a CPU that uses encryption key data as a device ID key based on a device unique ID 291b (device ID) (ID: IDentity, IDentifier) that identifies the device itself. Generate using.
Specifically, the ID-based cryptographic secret key generation unit 210 generates an ID-based cryptographic secret key 293b (an example of a device ID key) using the device-specific ID 291b as an ID-based cryptographic public key by an ID-based encryption method.

  The system information setting unit 220 sets (stores) in the device storage unit 290 information (for example, a device identification name such as an IP address or a host name) determined and input by the administrator at the time of system construction.

  The RSA key pair generation unit 221 generates an RSA key pair 292 (RSA private key 292a, RSA public key 292b) using the CPU by the RSA public key cryptosystem.

The self-signature generation unit 222 (an example of a self-authentication information generation unit) generates authentication information of predetermined data as self-authentication information using the CPU based on the predetermined data and the private key data of the own device.
Specifically, the self-signature generation unit 222 uses the RSA private key 292a (an example of private key data), the RSA public key 292b (an example of public key data), the expiration date of the self-signed certificate 294, and the host name 291c. Then, an electronic signature for the device unique ID 291b and ID-based cryptographic signature 294b (an example of device ID authentication information) (an example of predetermined data) is generated as an RSA self-signature 294a (an example of self-authentication information).

The self-signed certificate generation unit 223 generates a self-signed certificate 294 by combining predetermined data, the ID-based cryptographic signature 294b, and the RSA self-signature 294a using a CPU.
Specifically, the self-signed certificate generation unit 223 combines the RSA public key 292b, the expiration date of the self-signed certificate 294, the host name 291c, the device unique ID 291b, the ID base cryptographic signature 294b, and the RSA self-signed 294a. A signature certificate 294 is generated.

An ID-based cryptographic signature generation unit 230 (an example of a device ID authentication information generation unit) generates authentication information of public key data as device ID authentication information using the CPU based on the public key data of the device itself and the device ID key. .
Specifically, the ID-based cryptographic signature generation unit 230 uses the ID-based cryptographic private key 293b to convert the digital signature of the RSA public key 292b into an ID-based cryptographic signature 294b (ID-based cryptographic private key signature) (an example of device ID authentication information). ).

The SSL communication unit 240 transmits / receives various data to / from the communication partner communication device 200 using a communication device in a procedure based on the SSL protocol, and establishes a session with the communication partner communication device 200.
For example, the SSL communication unit 240 (an example of a self-certificate transmission unit) transmits the self-signed certificate 294 to the communication device 200 of the communication partner.
Further, for example, the SSL communication unit 240 (an example of a self-certificate receiving unit) receives the self-signed certificate 294 transmitted by the communication device 200 of the communication partner.

The self-signed certificate verifying unit 241 (an example of the self-certified certificate verifying unit) verifies the self-signed certificate 294 of the communication partner received by the SSL communication unit 240 using the CPU.
Specifically, the self-signed certificate verification unit 241 verifies the RSA self-signature 294a using the communication partner's RSA public key 292b and verifies the ID-based cryptographic signature 294b using the communication partner's device unique ID 291b.

  After the session is established by the SSL communication unit 240, the encryption authentication communication unit 242 transmits / receives the communication data 295d encrypted with the session key 295b using the communication device 200 of the communication partner and the communication device.

  Hereinafter, the life cycle of the device authentication system 100 is divided into “manufacturing”, “system construction”, and “operation”, and processing of the communication device 200 in each process will be described.

First, a process executed by the communication device 200 at the time of manufacture (a process at the time of manufacturing the communication device 200) will be described.
The communication device 200 generates and stores an ID-based encryption secret key 293b at the time of manufacture.

FIG. 4 is a diagram showing stored data at the time of manufacturing the communication device 200 according to Embodiment 1 (before processing at the time of manufacturing).
As shown in FIG. 4, when the communication device 200 is manufactured, the master key 291a, the public parameter 293a, and the device unique ID 291b are registered (stored) in the device storage unit 290 (not shown) of the communication device 200.
The master key 291a and the public parameter 293a are information used to generate the ID-based encryption secret key 293b, and are the same for all the communication devices 200. The master key 291a and the public parameter 293a are information that makes a pair in the ID-based encryption method, and are called a system secret key and a system public key or a master secret key and a master public key, respectively. For example, the manufacturer of the communication device 200 registers the same master key 291a and public parameter 293a in all the communication devices 200 manufactured by the company (may be limited to the same model).
The device unique ID 291b is unique information for individually identifying the communication device 200, and is unique for each device and unchanged. The MAC address (MAC: Media Access Control) and the device manufacturing number are examples of the device unique ID 291b. The device unique ID 291b is assigned and registered to each communication device 200 at the time of manufacture.

FIG. 5 is a flowchart illustrating processing at the time of manufacturing the communication device 200 according to the first embodiment.
A process at the time of manufacturing the communication device 200 according to the first embodiment will be described below with reference to FIG.
Each “˜unit” of the communication device 200 executes processing described below using a CPU.

The ID-based encryption secret key generation unit 210 generates an ID-based encryption secret key 293b based on the master key 291a, the device unique ID 291b, and the public parameter 293a (S110), and deletes the master key 291a (S120).
Details of each process (S110, S120) will be described below.

<S110: Example of Device ID Key Generation Process>
The ID-based encryption secret key generation unit 210 acquires the master key 291a, the device unique ID 291b, and the public parameter 293a from the device storage unit 290.
The ID-based encryption secret key generation unit 210 executes an ID-based encryption key generation algorithm using the acquired master key 291a, device-specific ID 291b, and public parameter 293a as input values, and sets the device-specific ID 291b as a public key (ID-based encryption public disclosure). ID-based encryption secret key 293b as a key) is generated.
The ID-based cryptographic secret key generation unit 210 stores the generated ID-based cryptographic secret key 293b in the device storage unit 290.
After S110, the process proceeds to S120.

<S120>
The ID-based encryption secret key generation unit 210 deletes (deletes) the master key 291a used for generating the ID-based encryption secret key 293b from the device storage unit 290.
By deleting the master key 291a, the ID-based encryption secret key generation unit 210 leaks the master key 291a from the communication device 200 carried out from the manufacturing site, and the ID-based encryption secret key 293b using the leaked master key 291a. Is prevented from being counterfeited.
After S120, the process ends.

  The process at the time of manufacturing the communication device 200 is executed, for example, manually by the manufacturer or at the time of registration of the master key 291a, the device unique ID 291b, and the public parameter 293a.

FIG. 6 is a diagram showing stored data at the time of manufacturing the communication device 200 according to Embodiment 1 (after processing at the time of manufacturing).
As shown in FIG. 6, after processing at the time of manufacturing the communication device 200, the device storage unit 290 (not shown) of the communication device 200 stores a public parameter 293a, a device unique ID 291b, and an ID base encryption secret key 293b.

Next, processing executed by the communication device 200 during system construction (processing during system construction of the communication device 200) will be described.
The communication device 200 generates and stores a self-signed certificate 294 at the time of system construction.

FIG. 7 is a flowchart showing processing at the time of system construction of the communication device 200 according to the first embodiment.
A process at the time of system construction of the communication device 200 in the first embodiment will be described below with reference to FIG.
Each “˜unit” of the communication device 200 executes processing described below using a CPU.

The system information setting unit 220 sets the host name 291c (S210), and the RSA key pair generation unit 221 generates an RSA key pair 292 (S220).
The ID-based cryptographic signature generation unit 230 generates the ID-based cryptographic signature 294b of the RSA public key 292b using the ID-based cryptographic private key 293b (S230), and the self-signature generation unit 222 uses the RSA private key 292a RSA self-signature 294a of the certificate information is generated (S240), and the self-signed certificate generation unit 223 combines the self-signed certificate information and the RSA self-signature 294a to generate a self-signed certificate 294 (S250).
Next, details of each process (S210 to S250) will be described.

<S210>
At the time of system construction, information (for example, equipment identification name) necessary for system construction / operation is input to the communication equipment 200 by the administrator. The host name and IP address are examples of device identification names, and are different for each communication device 200. Hereinafter, the description will be continued assuming that “host name” is input to the communication device 200.
The system information setting unit 220 sets (stores) the host name input by the administrator in the device storage unit 290.
After S210, the process proceeds to S220.

<S220>
The RSA key pair generation unit 221 executes an RSA public key encryption key generation algorithm to generate an RSA key pair 292. The RSA key pair 292 includes an RSA private key 292a and an RSA public key 292b. The RSA key pair generation unit 221 stores the generated RSA key pair 292 in the device storage unit 290.
After S220, the process proceeds to S230.

<S230: Example of Device ID Authentication Information Generation Processing>
The ID-based cryptographic signature generation unit 230 acquires, from the device storage unit 290, the ID-based cryptographic private key 293b generated at the time of manufacture (S110) and the RSA public key 292b generated in S220.
The ID-based cryptographic signature generation unit 230 executes an ID-based cryptographic signature algorithm 294b using the acquired ID-based cryptographic private key 293b and the RSA public key 292b as input values, and generates the ID-based cryptographic signature 294b of the RSA public key 292b. . The ID-based cryptographic signature 294b of the RSA public key 292b is an electronic signature generated using the ID-based cryptographic private key 293b for the RSA public key 292b.
The ID-based cryptographic signature generation unit 230 stores the generated ID-based cryptographic signature 294b of the RSA public key 292b in the device storage unit 290.
After S230, the process proceeds to S240.

<S240: Example of Self-Authentication Information Generation Processing>
The self-signature generation unit 222 acquires various information (self-signed certificate information) to be included in the RSA private key 292a and the self-signed certificate 294 generated in S220 from the device storage unit 290.
The self-signature generation unit 222 executes the RSA public key cryptography signature algorithm using the acquired RSA private key 292a and self-signed certificate information as input values, and generates the RSA self-signature 294a of the self-signed certificate information. The RSA self-signature 294a of the self-signed certificate information is an electronic signature generated using the RSA private key 292a for the self-signed certificate information.
Hereinafter, description will be continued with the ID-based cryptographic signature 294b, the expiration date of the self-signed certificate 294, the host name 291c, the device unique ID 291b, and the ID-based cryptographic signature 294b of the RSA public key 292b as self-signed certificate information. The expiration date of the self-signed certificate 294 is a date and time calculated by adding a predetermined validity period (for example, 2 years) to the current date and time. Self-signed certificate information is not limited to these.
After S240, the process proceeds to S250.

<S250>
The self-signed certificate generation unit 223 combines the self-signed certificate information and the RSA self-signature 294a generated in S240 to generate a self-signed certificate 294 (electronic certificate), and the generated self-signed certificate 294 Is stored in the device storage unit 290.
For example, the host name 291c is set in the CommonName field of the subject name of the electronic certificate, the device unique ID 291b is set in the SubjectAltName field of the standard extension item of the electronic certificate, and the ID-based cryptographic signature 294b is the standard extended item of the electronic certificate. In the SubjectKeyIdentifier field. However, the device unique ID 291b and the ID base encryption signature 294b may be set in a range that matches the format of the electronic certificate, and may not be set as standard extension items. For example, the self-signed certificate generation unit 223 may set the device unique ID 291b and the ID-based encryption signature 294b as newly defined private extension item fields in the electronic certificate, or set them in other fields of the standard extension items. May be.
After S250, the process ends.

  The certificate generation process performed in S230 to S250 includes a signature generation process using an ID-based encryption private key 293b for the RSA public key 292b in accordance with a general RSA public key self-signed certificate generation process procedure performed in OpenSSL or the like ( S230) and a process (S240) for including a signature (ID-based cryptographic signature 294b) by the device-specific ID 291b, which is an ID-based cryptographic public key, and the ID-based cryptographic private key 293b, in the certificate signature target.

FIG. 8 is a diagram showing stored data at the time of system construction of the communication device 200 according to Embodiment 1 (after processing at the time of system construction).
As shown in FIG. 8, after the system construction process of the communication device 200, the device storage unit 290 (not shown) of the communication device 200 stores the public parameter 293a, the device unique ID 291b, the ID base encryption secret key 293b, the host name 291c, An RSA key pair 292 and a self-signed certificate 294 are stored.
The self-signed certificate 294 includes an RSA public key 292b, an expiration date of the self-signed certificate 294, a host name 291c, a device unique ID 291b, a host name 291c that is a public key of ID-based encryption, and an ID-based encryption of the RSA public key 292b. A signature 294b and an RSA self-signature 294a are set.

  Next, processing executed by the communication device 200 during operation (operation processing of the communication device 200) will be described.

FIG. 9 is a diagram showing an outline of operation of the device authentication system 100 according to the first embodiment.
As shown in FIG. 9, communication device A 201 and communication device B 202 communicate self-signed certificate 294 via communication network 110, verify self-signed certificate 294, confirm each other, and then perform encrypted communication. Data 295d is communicated via communication network 110.
During operation, the device storage unit 290 (not shown) of each communication device 200 (communication device A 201, communication device B 202) has a public parameter 293a and device unique ID 291b registered at the time of manufacture, and an ID-based cryptographic secret generated at the time of manufacture. A key 293b, a host name 291c set at the time of system construction, an RSA key pair 292 and a self-signed certificate 294 generated at the time of system construction are stored.
Hereinafter, a case where SSL communication is performed during operation using the communication device A 201 as an SSL server and the communication device B 202 as an SSL client will be described.
However, in the operation process of the communication device 200, it is not always necessary to perform SSL communication. The communication device 200 in which the communication partner is specified by the device unique ID 291b by the verification of the RSA self-signature 294a and the verification of the ID-based encryption signature 294b. What is necessary is just to be confirmed.

FIG. 10 is a flowchart illustrating processing during operation of the communication device 200 according to the first embodiment.
Processing during operation of the communication device 200 according to Embodiment 1 will be described below with reference to FIG.
Each “˜unit” of the communication device A 201 and the communication device B 202 executes a process described below using the CPU.

The communication device A 201 and the communication device B 202 exchange SSL session information (S310).
The communication device A 201 and the communication device B 202 communicate with each other the self-signed certificate 294 (S320).
The self-signed certificate verification unit 241 of the communication device B 202 verifies the self-signed certificate 294 of the communication device A 201 (S330), and verifies the ID-based cryptographic signature 294b set in the self-signed certificate 294 (S331).
The SSL communication unit 240 of the communication device B202 transmits the premaster secret 295a encrypted using the RSA public key 292b of the communication device A201 to the communication device A201 (S340), and the SSL communication unit 240 of the communication device A201 transmits the communication device B202. The pre-master secret 295a is decrypted (S341), and the SSL communication unit 240 of the communication device B 202 transmits the SSL signature 295c to the communication device A 201 (S350).
The self-signed certificate verification unit 241 of the communication device A 201 verifies the self-signed certificate 294 of the communication device B 202 (S360), and verifies the ID-based cryptographic signature 294b set in the self-signed certificate 294 (S361).
The SSL communication unit 240 of the communication device A 201 verifies the SSL signature 295c of the communication device B 202 (S370).
The communication device A 201 and the communication device B 202 generate a session key 295b using the premaster secret 295a (S380), and communicate communication data 295d encrypted using the session key 295b (S381).

  S331 and S361, which are not performed in the conventional SSL communication, are one of the features of the device authentication system 100 according to the first embodiment.

  Next, details of each process (S310 to S381) will be described.

<S310>
First, the SSL communication unit 240 of the communication device B 202 (client side) specifies a URL (https: /// host name ”) of the communication device A 201 (server side), specifies a specific random number, and an available algorithm (encryption, (Compression) list (SSL session information) is transmitted to the communication device A 201 (server side).
It is assumed that the random number is generated by executing a predetermined algorithm, and an available algorithm is set in the device storage unit 290 in advance.
The SSL communication unit 240 of the communication device A 201 receives the SSL session information of the SSL communication unit 240, selects one algorithm that can be used from the list indicated in the SSL session information, and selects the selected algorithm (encryption, (Compression) is notified to the communication device B202.
In S310, a specific random number is shared between the communication device A 201 and the communication device B 202, and an algorithm to be used is determined.
After the SSL session is started in S310, the process proceeds to S320.

<S320: Example of Self-Certificate Transmission Processing and Self-Certificate Reception Processing>
After S310, the SSL communication unit 240 of the communication device A201 acquires the self-signed certificate 294 from the device storage unit 290, and transmits the acquired self-signed certificate 294 to the communication device B202.
The SSL communication unit 240 of the communication device B 202 receives the self-signed certificate 294 (the self-signed certificate 294 of the communication device A 201) transmitted by the communication device A 201 and stores it in the device storage unit 290.
The SSL communication unit 240 of the communication device A 201 transmits a certificate request to the communication device B 202.
When receiving the certificate request, the SSL communication unit 240 of the communication device B 202 acquires the self-signed certificate 294 from the device storage unit 290 and transmits the acquired self-signed certificate 294 to the communication device A 201.
The SSL communication unit 240 of the communication device A 201 receives the self-signed certificate 294 (self-signed certificate 294 of the communication device B 202) transmitted from the communication device B 202 and stores it in the device storage unit 290.
After S320, the process proceeds to S330.

<S330: Self-Signed Certificate Verification Process (Example of Self-Certificate Verification Process)>
The self-signed certificate verification unit 241 of the communication device B202 acquires the self-signed certificate 294 of the communication device A201 from the device storage unit 290, executes the verification algorithm of the RSA public key cryptosystem, and executes the self-signed certificate of the communication device A201. Validate book 294.
Specifically, the self-signed certificate verification unit 241 verifies the RSA self-signature 294a set in the self-signed certificate 294 using the RSA public key 292b set in the self-signed certificate 294.
Further, the self-signed certificate verification unit 241 compares the expiration date set in the self-signed certificate 294 with the current time, and verifies whether the expiration date of the self-signed certificate 294 has expired.
Further, the self-signed certificate verification unit 241 verifies whether the host name 291c set in the self-signed certificate 294 matches the host name set in the URL specified in S310.

The self-signed certificate 294 that is valid in all verifications is a valid certificate that is guaranteed not to be tampered with and has not expired.
However, since the generation source of the RSA public key 292b is not guaranteed by the certificate authority, the self-signed certificate 294 may be generated by another device impersonating the communication device A201.
That is, at this time, it is not guaranteed that the communication partner of the communication device B202 is the communication device A201.

If the self-signed certificate 294 of the communication device A 201 is valid (authentication OK), the process proceeds to S331.
When the self-signed certificate 294 of the communication device A 201 is not valid (when invalid) (authentication NG), the communication device B 202 ends communication with the communication device A 201, and the operation process of the communication device 200 ends.
Illustration of the processing branch when the self-signed certificate 294 of the communication device A 201 is not valid is omitted.

<S331: ID-Based Cryptographic Signature Verification Processing (Example of Self-Certificate Verification Processing)>
The self-signed certificate verification unit 241 of the communication device B 202 acquires the public parameter 293 a from the device storage unit 290.
The self-signed certificate verification unit 241 of the communication device B202 executes an ID-based encryption verification algorithm using the public parameter 293a and the RSA public key 292b set in the self-signed certificate 294 of the communication device A201, The ID-based cryptographic signature 294b set in the self-signed certificate 294 of the communication device A201 is verified.

The ID-based encryption signature 294b set in the self-signed certificate 294 of the communication device A201 is generated using the ID-based encryption secret key 293b that can be generated only based on the device unique ID 291b and the public parameter 293a of the communication device A201. ing.
Therefore, when the verification result of the ID-based cryptographic signature 294b is valid, the self-signed certificate 294 is generated by a device (that is, the communication device A201) in which the device unique ID 291b and the public parameter 293a of the communication device A201 are set. It is guaranteed that
That is, at this time, it is guaranteed that the communication partner of the communication device B202 is the communication device A201.

If the ID-based cryptographic signature 294b is valid, the process proceeds to S340.
If the ID-based cryptographic signature 294b is not valid (invalid), the communication device B202 ends communication with the communication device A201, and the operation process of the communication device 200 ends.
The illustration of the processing branch when the ID-based cryptographic signature 294b is not valid is omitted.

<S340>
The SSL communication unit 240 of the communication device B 202 generates a premaster secret 295a that is information used to generate the session key 295b, and stores the generated premaster secret 295a in the device storage unit 290.
Further, the SSL communication unit 240 of the communication device B202 acquires the RSA public key 292b from the self-signed certificate 294 of the communication device A201, and encrypts the premaster secret 295a using the acquired RSA public key 292b. The premaster secret 295a is transmitted to the communication device A201.
After S340, the process proceeds to S341.

<S341>
The SSL communication unit 240 of the communication device A201 receives the premaster secret 295a transmitted by the communication device B202 in S340.
The SSL communication unit 240 of the communication device A201 acquires its own RSA secret key 292a from the device storage unit 290, decrypts the received premaster secret 295a using the RSA secret key 292a, and uses the decrypted premaster secret 295a as the device. Store in the storage unit 290.
After S341, the process proceeds to S350.

  In S340 to S341, the premaster secret 295a is shared between the communication device A201 and the communication device B202.

<S350>
The SSL communication unit 240 of the communication device B202 acquires its own RSA private key 292a from the device storage unit 290, and uses the acquired RSA private key 292a between the communication device A201 and the communication device B202 from S310 to S341. A signature of the communicated information (referred to as “handshake message”) is generated as an SSL signature 295c, and the generated SSL signature 295c is transmitted to the communication device A201.
The SSL signature 295 c is received by the SSL communication unit 240 of the communication device A 201 and stored in the device storage unit 290.
After S350, the process proceeds to S360.

<S360: Self-Signed Certificate Verification Process (Example of Self-Certificate Verification Process)>
The self-signed certificate verification unit 241 of the communication device A 201 verifies the self-signed certificate 294 of the communication device B 202 in the same manner as the communication device B 202 in S330.
If the self-signed certificate 294 is valid, the process proceeds to S361.
If the self-signed certificate 294 is not valid, the communication device A201 ends communication with the communication device B202, and the operation process of the communication device 200 ends.
Illustration of processing branching when the self-signed certificate 294 is not valid is omitted.

<S361: ID-based cryptographic signature verification processing (an example of self-certificate verification processing)>
The self-signed certificate verification unit 241 of the communication device A 201 verifies the ID-based cryptographic signature 294b set in the self-signed certificate 294 of the communication device B 202 in the same manner as the communication device B 202 in S331.
If the ID-based cryptographic signature 294b is valid, the process proceeds to S370.
If the ID-based cryptographic signature 294b is not valid, the communication device A201 ends communication with the communication device B202, and the operation time process of the communication device 200 ends.
The illustration of the processing branch when the ID-based cryptographic signature 294b is not valid is omitted.

<S370>
The SSL communication unit 240 of the communication device A 201 acquires the SSL signature 295c and the self-signed certificate 294 of the communication device B 202 from the device storage unit 290, and uses the RSA public key 292b included in the self-signed certificate 294 of the communication device B 202. The SSL signature 295c of the communication device B202 is verified.
If the SSL signature 295c is valid, the process proceeds to S380.
When the SSL signature 295c is not valid, the communication device B202 ends the communication with the communication device A201, and the operation time process of the communication device 200 ends.
The illustration of the processing branch when the SSL signature 295c is not valid is omitted.

<S380>
The SSL communication unit 240 of the communication device A201 and the SSL communication unit 240 of the communication device B202 respectively acquire the premaster secret 295a shared in S340 to S341 from the device storage unit 290, and in the acquired premaster secret 295a and S310, respectively. A session key 295b is generated using the shared random number.
After S380, the process proceeds to S381.

<S381>
The encryption authentication communication unit 242 of the communication device A201 and the encryption authentication communication unit 242 of the communication device B202 each encrypt the communication data 295d using the session key 295b generated in S380, and exchange the encrypted communication data 295d with each other. connect.
After the necessary data communication is completed in S381, the process ends.

  The ID-based cryptographic signature verification process (S331, S361) is not performed in the conventional SSL communication and certificate verification, and is one of the features of the device authentication system 100 in the first embodiment. This process ensures that the self-signed certificate 294 is a certificate generated by the device specified by the device unique ID 291b.

In the first embodiment, for example, the following device authentication system 100 has been described.
The communication device 200 generates and stores an ID-based encryption secret key 293b corresponding to the device unique ID 291b at the time of manufacture.
Furthermore, the communication device 200 generates a self-signed certificate 294 including a host name 291c and an ID-based cryptographic signature 294b generated from the RSA public key 292b using the ID-based cryptographic secret key 293b at the time of system construction.
Further, the communication device 200 verifies the RSA self-signature 294a and the ID-based cryptographic signature 294b included in the self-signed certificate 294 as verification of the self-signed certificate 294 of the communication partner during operation.

This ensures that the communication partner device is assigned the specified host name, and that the communication partner device is the device identified by the device unique ID 291b included in the self-signed certificate 294. Device authentication is performed without requiring time-consuming procedures such as certificate issuance by a certificate authority or offline certificate verification.
For example, the device authentication system 100 can be used as a communication system that transmits and receives highly confidential data between devices manufactured by the same manufacturer.

In the first embodiment, other public key cryptosystems such as elliptical cryptography, DSA, and DH may be used instead of the RSA public key cryptosystem.
In the RSA public key cryptosystem, hash functions such as SHA1 and MD5 are used.

  In the first embodiment, the communication device 200 has a secret key and a public key certificate, allows the partner device to authenticate itself by signing with the secret key, or uses a public key included in the certificate of the partner device. It is possible to apply to any system that is the basis of its security for certificate verification.

Embodiment 2. FIG.
A mode in which the communication device 200 generates the self-signed certificate 294 at the time of manufacture, not at the time of system construction will be described.
Hereinafter, items different from the first embodiment will be mainly described. Matters whose description is omitted are the same as those in the first embodiment.

FIG. 11 is a flowchart illustrating processing at the time of manufacturing the communication device 200 according to the second embodiment.
A process at the time of manufacturing the communication device 200 according to the second embodiment will be described below with reference to FIG.

The flowchart shown in FIG. 11 is obtained by adding S130 to S160 to the manufacturing process (see FIG. 5) of the communication device 200 in the first embodiment.
Further, S130 to S150 are the same as S220 to S240 of the system construction process (see FIG. 7) of the communication device 200 in the first embodiment.

In S160, the self-signed certificate generation unit 223 generates the self-signed certificate 294 by combining the self-signed certificate information and the RSA self-signature 294a, as in S250 (see FIG. 7), and generates the generated self-signature. The certificate 294 is stored in the device storage unit 290.
However, since the host name 291c is not set in the communication device 200 at the time of manufacture, the host name 291c is not included in the self-signed certificate information, and the self-signed certificate generation unit 223 uses the subject name of the self-signed certificate 294. A device unique ID 291b is set instead of the host name 291c in the CommonName column.

  The processing at the time of system construction of the communication device 200 is executed only in S210 (setting of the host name 291c), and S220 to S250 are not executed (see FIG. 7).

The operation processing of the communication device 200 is the same as that of the first embodiment (FIG. 10) except that the host name 291c is not set in the self-signed certificate 294.
That is, the host name is not verified in the self-signed certificate verification process (S330, S360).

In the second embodiment, for example, the following device authentication system 100 has been described.
The communication device 200 generates and stores an ID base encryption secret key 293b corresponding to the device unique ID 291b at the time of manufacture, and includes an ID base encryption signature 294b generated from the RSA public key 292b using the ID base encryption secret key 293b. A self-signed certificate 294 is generated.
Further, the communication device 200 verifies the RSA self-signature 294a and the ID-based cryptographic signature 294b included in the self-signed certificate 294 as verification of the self-signed certificate 294 of the communication partner during operation.

  Since the self-signed certificate 294 is generated at the time of manufacture, the device identification name determined at the time of system construction such as the host name 291c and the IP address is not set in the self-signed certificate 294. For this reason, there is no guarantee that the device of the communication partner is assigned with the specified host name. However, as in the first embodiment, it is ensured that the communication partner device is a legitimate device specified by the device unique ID 291b.

Embodiment 3 FIG.
A mode in which the communication device 200 updates the self-signed certificate 294 will be described.
Hereinafter, items different from the first embodiment will be mainly described. Matters whose description is omitted are the same as those in the first embodiment.

FIG. 12 is a functional configuration diagram of the communication device 200 according to the third embodiment.
The functional configuration of the communication device 200 according to Embodiment 3 will be described below based on FIG.

  The communication device 200 includes a certificate update opportunity detection unit 224 in addition to the configuration described in Embodiment 1 (see FIG. 3).

The certificate update trigger detection unit 224 detects a trigger (predetermined timing) for updating the self-signed certificate 294 using the CPU.
For example, the certificate update opportunity detection unit 224 verifies the expiration date set in the self-signed certificate 294 and detects a time before the expiration date or when the expiration date has passed as an update opportunity of the self-signed certificate 294. To do.
Further, for example, the certificate update opportunity detection unit 224 detects when a certificate update instruction is designated by the administrator as an update opportunity of the self-signed certificate 294.

The RSA key pair generation unit 221 (an example of an authentication key pair update unit) detects the RSA key pair 292 (RSA private key 292a, RSA) when the certificate update opportunity detection unit 224 detects an update opportunity of the RSA key pair 292. The public key 292b) is updated.
The ID-based cryptographic signature generation unit 230 newly generates an ID-based cryptographic signature 294b based on the RSA public key 292b updated by the RSA key pair generation unit 221.
The self-signature generation unit 222 newly generates an RSA self-signature 294a based on the RSA private key 292a updated by the RSA key pair generation unit 221.
The self-signed certificate generation unit 223 generates a self-signed certificate 294 by combining predetermined data, a new ID-based cryptographic signature 294b, and a new RSA self-signature 294a.
The SSL communication unit 240 transmits the self-signed certificate 294 newly generated by the self-signed certificate generation unit 223 to the communication device 200 of the communication partner.

FIG. 13 is a flowchart showing the self-signed certificate update process in the third embodiment.
A self-signed certificate update process in which the communication device 200 updates the self-signed certificate 294 will be described below with reference to FIG.
Each “˜unit” of the communication device 200 executes processing described below using a CPU.
The self-signed certificate update process described below is executed when the certificate update timing detection unit 224 detects an update timing of the self-signed certificate 294.

<S410>
The RSA key pair generation unit 221 newly generates an RSA key pair 292 and stores the generated RSA key pair 292 in the device storage unit 290, similarly to S220 (see FIG. 7).
Then, the RSA key pair generation unit 221 deletes the old RSA key pair 292 from the device storage unit 290.
After S410, the process proceeds to S420.

<S420>
Similar to S230 (see FIG. 7), the ID-based cryptographic signature generation unit 230 generates an ID-based cryptographic signature 294b for the new RSA public key 292b, and stores the generated ID-based cryptographic signature 294b in the device storage unit 290. .
Then, the ID-based cryptographic signature generation unit 230 deletes the old ID-based cryptographic signature 294b from the device storage unit 290.
After S420, the process proceeds to S430.

<S430>
The self-signature generation unit 222 generates the RSA self-signature 294a of the self-signed certificate information using the new RSA private key 292a, similarly to S240 (see FIG. 7). The self-signed certificate information includes a new RSA public key 292b and a new ID-based encryption private key 293b.
After S430, the process proceeds to S440.

<S440>
Similar to S250 (see FIG. 7), the self-signed certificate generation unit 223 combines the self-signed certificate information and the new RSA self-signed 294a to generate a self-signed certificate 294, and the generated self-signed certificate Document 294 is stored in device storage unit 290.
Then, the self-signed certificate generation unit 223 deletes the old self-signed certificate 294 from the device storage unit 290.
After S440, the process ends.

In the third embodiment, for example, the following device authentication system 100 has been described.
During operation, the communication device 200 deletes the existing RSA key pair 292 and the self-signed certificate 294, regenerates the RSA key pair 292, and updates the self-signed certificate 294.

  As a result, the certificate (self-signed certificate 294) can be updated on a single device without performing a certificate reissue procedure that requires interaction with the certificate authority, greatly reducing the operational burden of certificate update. can do.

Embodiment 4 FIG.
The communication device 200 generates an electronic signature of the RSA public key 292b using the device-specific RSA private key instead of the ID-based encryption private key 293b, and sets the generated electronic signature of the RSA public key 292b in the self-signed certificate 294 The form to perform is demonstrated.
Hereinafter, items different from the first embodiment will be mainly described. Matters whose description is omitted are the same as those in the first embodiment.

FIG. 14 is a functional configuration diagram of the communication device 200 according to the fourth embodiment.
A functional configuration of communication apparatus 200 according to Embodiment 4 will be described below with reference to FIG.

  The communication device 200 differs from the configuration described in Embodiment 1 (see FIG. 3) in the following points.

Instead of the ID-based encryption private key generation unit 210, the communication device 200 includes a device individual RSA key pair generation unit 211 (an example of a device ID key generation unit), a device individual signature generation unit 212, a device individual certificate generation unit 213, Is provided.
The communication device 200 includes a device individual RSA signature generation unit 231 (an example of a device ID authentication information generation unit) instead of the ID-based cryptographic signature generation unit 230.

In the device storage unit 290, instead of the master key 291a and the public parameter 293a, a master RSA key pair 291d (master RSA private key 291d1, master RSA public key 291d2) and device-specific RSA key instead of the ID-based encryption private key 293b A device-specific RSA signature 294c is stored instead of the pair 293c (device-specific RSA private key 293c1, device-specific RSA public key 293c2) and ID-based cryptographic signature 294b.
Further, the device storage unit 290 stores a device individual certificate 296 and a device individual signature 296a.

  The device-specific RSA key pair generation unit 211 (an example of a device ID key generation unit) uses a public key cryptosystem to generate a device-specific RSA key pair 293c (device-specific RSA private key 293c1, device-specific RSA public key) based on the device-specific ID 291b. 293c2) (an example of a device ID key) is generated using the CPU.

  The device individual signature generating unit 212 uses the electronic signature of the device individual RSA public key 293c2 (an example of the device individual public key) based on the master RSA private key 291d1 (an example of the private key data of the device itself) as the device individual signature 296a. Generate using.

  The device individual certificate generation unit 213 generates the device individual certificate 296 by combining the device individual signature 296a and the device unique ID 291b using the CPU.

  The device-specific RSA signature generation unit 231 (an example of a device ID authentication information generation unit) uses the device-specific RSA private key 293c1 as the device-specific RSA signature 294c (an example of device ID authentication information). Generate.

FIG. 15 is a diagram showing stored data at the time of manufacturing the communication device 200 according to the fourth embodiment (before processing at the time of manufacturing).
As shown in FIG. 15, when the communication device 200 is manufactured, the device storage unit 290 (not shown) of the communication device 200 has a master RSA key pair 291d (master RSA private key 291d1, master RSA public key 291d2) and device. The unique ID 291b is registered.
The master RSA key pair 291d is information used to generate the device individual signature 296a set in the device individual certificate 296, and is the same for all the communication devices 200.

FIG. 16 is a flowchart illustrating processing at the time of manufacturing the communication device 200 according to the fourth embodiment.
A process at the time of manufacturing the communication device 200 according to the fourth embodiment will be described below with reference to FIG.

The device individual RSA key pair generation unit 211 generates a device individual RSA key pair 293c based on the device unique ID 291b (S111), and the device individual signature generation unit 212 uses the master RSA private key 291d1 to generate the device individual certificate information device. The individual signature 296a is generated (S112), and the device individual certificate generation unit 213 combines the device individual certificate information and the device individual signature 296a to generate the device individual certificate 296 (S113), thereby generating the device individual certificate. The unit 213 deletes the master RSA private key 291d1 (S121).
Below, the detail of each process (S111-S113, S121) is demonstrated.

<S111: Example of Device ID Key Generation Processing>
The device-specific RSA key pair generation unit 211 acquires the device unique ID 291b from the device storage unit 290.
The device individual RSA key pair generation unit 211 executes a key generation algorithm of the RSA public key cryptosystem using the acquired device unique ID 291b as an input value, and generates a device individual RSA key pair 293c.
Then, the device-specific RSA key pair generation unit 211 stores the generated device-specific RSA key pair 293c in the device storage unit 290.
After S111, the process proceeds to S112.

<S112>
The device individual signature generation unit 212 acquires, from the device storage unit 290, the master RSA private key 291d1 and various types of information (device individual certificate information) included in the device individual certificate 296.
The device individual signature generation unit 212 executes a signature algorithm of the RSA public key cryptosystem using the acquired master RSA private key 291d1 and device individual certificate information as input values, and generates a device individual signature 296a of the device individual certificate information. .
Hereinafter, the device individual RSA public key 293c2 and the device unique ID 291b will be described as device individual certificate information. The device individual certificate information is not limited to these.
After S112, the process proceeds to S113.

<S113>
The device individual certificate generation unit 213 combines the device individual certificate information and the device individual signature 296a generated in S112 to generate the device individual certificate 296, and the generated device individual certificate 296 is used as the device storage unit 290. To remember.
After S113, the process proceeds to S121.

<S121>
The device individual signature generation unit 212 deletes the master RSA private key 291d1 used to generate the device individual signature 296a from the device storage unit 290. The device individual signature generation unit 212 prevents the device individual signature 296a from being forged by using the leaked master RSA secret key 291d1 by deleting the master RSA secret key 291d1 by deleting the master RSA secret key 291d1. .
After S121, the process ends.

FIG. 17 is a diagram showing stored data at the time of manufacturing (after processing at the time of manufacturing) of the communication device 200 according to the fourth embodiment.
As shown in FIG. 17, after processing at the time of manufacturing the communication device 200, the device storage unit 290 (not shown) of the communication device 200 stores a master RSA public key 291d2, a device unique ID 291b, a device individual RSA key pair 293c, and a device individual certificate. A book 296 is stored.
In the device individual certificate 296, a device individual RSA public key 293c2, a device unique ID 291b, and a device individual signature 296a are set.

FIG. 18 is a flowchart showing processing at the time of system construction of the communication device 200 according to the fourth embodiment.
The process at the time of system construction of the communication device 200 in the fourth embodiment will be described below based on FIG.

  The flowchart shown in FIG. 18 is obtained by changing S230 in the system construction process (see FIG. 7) of communication device 200 in Embodiment 1 to S231 described below.

<S231: Example of Device ID Authentication Information Generation Processing>
After S220, the device-specific RSA signature generation unit 231 acquires the device-specific RSA private key 293c1 and the RSA public key 292b from the device storage unit 290.
The device individual RSA signature generation unit 231 executes a signature algorithm of the RSA public key cryptosystem using the acquired device individual RSA private key 293c1 and the RSA public key 292b as input values, and generates a device individual RSA signature 294c of the RSA public key 292b. To do.
The device individual RSA signature generation unit 231 stores the device individual RSA signature 294c of the generated RSA public key 292b in the device storage unit 290.
After S231, the process proceeds to S240.

  In S240 and S250, the self-signed certificate information includes a device individual certificate 296 instead of the device unique ID 291b, and a device individual RSA signature 294c instead of the ID base encryption signature 294b.

FIG. 19 is a diagram illustrating stored data at the time of system construction of the communication device 200 according to the fourth embodiment (after processing at the time of system construction).
As shown in FIG. 19, after processing at the time of system construction of the communication device 200, the device storage unit 290 (not shown) of the communication device 200 stores a master RSA public key 291d2, device unique ID 291b, device individual RSA key pair 293c, device individual. A certificate 296, a host name 291c, an RSA key pair 292, and a self-signed certificate 294 are stored.
In the self-signed certificate 294, the RSA public key 292b, the expiration date of the self-signed certificate 294, the host name 291c, the device individual certificate 296, the device individual RSA signature 294c of the RSA public key 292b, and the RSA self signature 294a are set. ing.

FIG. 20 is a flowchart illustrating processing during operation of the communication device 200 according to the fourth embodiment.
Processing during operation of the communication device 200 in the fourth embodiment will be described below based on FIG.

  The flowchart shown in FIG. 20 adds S332 and S362 described below to the processing at the time of operation of the communication device 200 in Embodiment 1 (see FIG. 10), and adds S331 and S361 to S333 and S363 described below. It has been changed.

<S332: Device Individual Certificate Verification Processing (Example of Self Certificate Verification Processing)>
After S330, the self-signed certificate verification unit 241 of the communication device B202 acquires the master RSA public key 291d2 from the device storage unit 290, acquires the device individual certificate 296 from the self-signed certificate 294 of the communication device A201, The device individual signature 296a set in the device individual certificate 296 is verified using the master RSA public key 291d2.

It is guaranteed that the device individual certificate 296 for which the device individual signature 296a is valid has not been tampered with.
That is, it is guaranteed that the device individual RSA public key 293c2 set in the device individual certificate 296 is generated by the communication device A201 specified by the device unique ID 291b set in the device individual certificate 296. .

If the device individual signature 296a is valid, the process proceeds to S333.
When the device individual signature 296a is not valid, the communication device B202 ends communication with the communication device A201, and the operation time process of the communication device 200 ends.
Illustration of conditional branching when the device individual signature 296a is not valid is omitted.

<S333: Device-specific RSA signature verification processing (an example of self-certificate verification processing)>
The self-signed certificate verifying unit 241 of the communication device B 202 executes the RSA public key verification algorithm using the device-specific RSA public key 293c2 set in the device individual certificate 296, and the self-signed certificate of the communication device A 201 The device individual RSA signature 294c set in the document 294 is verified.

Since it is guaranteed that the device individual RSA public key 293c2 is generated by the communication device A201 in S332, if the device individual RSA signature 294c of the RSA public key 292b is valid, it is set in the self-signed certificate 294. It is guaranteed that the RSA public key 292b is generated by the communication device A201. Furthermore, since the verification of the RSA self-signature 294a in S330 guarantees that the self-signed certificate 294 has not been tampered with, it is guaranteed that the self-signed certificate 294 has been generated by the communication device A201.
That is, it is guaranteed that the communication partner of the communication device B202 is the communication device A201.

If the device individual RSA signature 294c is valid, the process proceeds to S340.
When the device individual RSA signature 294c is not valid, the communication device B202 ends communication with the communication device A201, and the operation time process of the communication device 200 ends.
Illustration of processing branching when the device individual RSA signature 294c is not valid is omitted.

<S362: Device Individual Certificate Verification Processing (Example of Self-Certificate Verification Processing)>
After S360, the self-signed certificate verification unit 241 of the communication device A201 acquires the device individual certificate 296 set in the self-signed certificate 294 of the communication device B202 in the same manner as the communication device B202 in S332, The device individual signature 296a set in the device individual certificate 296 is verified.
If the device individual signature 296a is valid, the process proceeds to S363.
When the device individual signature 296a is not valid, the communication device A201 ends communication with the communication device B202, and the operation time process of the communication device 200 ends.
The illustration of the processing branch when the device individual signature 296a is not valid is omitted.

<S363: Device Individual RSA Signature Verification Processing (Example of Self-Certificate Verification Processing)>
The self-signed certificate verification unit 241 of the communication device A 201 verifies the device-specific RSA signature 294c set in the self-signed certificate 294 of the communication device B 202 in the same manner as the communication device B 202 in S333.
If the device individual RSA signature 294c is valid, the process proceeds to S370.
When the device individual RSA signature 294c is not valid, the communication device A201 ends communication with the communication device B202, and the operation time process of the communication device 200 ends.
Illustration of processing branching when the device individual RSA signature 294c is not valid is omitted.

  In the fourth embodiment, the communication device 200 generates an electronic signature of the RSA public key 292b using the device-specific RSA private key instead of the ID-based encryption private key 293b, and uses the generated RSA public key 292b as the electronic signature. The form set in the signature certificate 294 has been described.

  As in the first embodiment, the device authentication system 100 has an effect of guaranteeing the communication partner based on the self-signed certificate 294 without receiving a certificate from the certificate authority.

The communication device 200 may generate the self-signed certificate 294 in the manufacturing process as in the second embodiment.
Further, the communication device 200 may update the self-signed certificate 294 as in the third embodiment.

Embodiment 5 FIG.
The communication device 200 generates an electronic signature of the RSA public key 292b using the device-specific common key instead of the ID-based encryption private key 293b, and sets the generated electronic signature of the RSA public key 292b in the self-signed certificate 294. A form is demonstrated.
Hereinafter, items different from the first embodiment will be mainly described. Matters whose description is omitted are the same as those in the first embodiment.

FIG. 21 is a functional configuration diagram of the communication device 200 according to the fifth embodiment.
The functional configuration of the communication device 200 according to the fifth embodiment will be described below with reference to FIG.

  The communication device 200 differs from the configuration described in Embodiment 1 (see FIG. 3) in the following points.

The communication device 200 includes a device individual common key generation unit 214 (an example of a device ID key generation unit) instead of the ID-based encryption secret key generation unit 210.
The communication device 200 includes a device individual common key MAC generation unit 232 (an example of a device ID authentication information generation unit) instead of the ID-based cryptographic signature generation unit 230.

  In the device storage unit 290, a master common key 291e instead of the master key 291a and the public parameter 293a, a device individual common key 293d instead of the ID-based encryption secret key 293b, and a device individual common key instead of the ID-based encryption signature 294b The MAC 294d is stored.

  The device individual common key generation unit 214 (an example of a device ID key generation unit) generates a device individual common key 293d (an example of a device ID key) based on the device unique ID 291b using a common key cryptosystem.

  The device individual common key MAC generation unit 232 (an example of the device ID authentication information generation unit) uses the device individual common key 293d to convert the RSA public key 292b MAC (message authentication code) (an example of device ID authentication information) into the device individual. It is generated as a common key MAC 294d.

FIG. 22 is a diagram illustrating stored data at the time of manufacturing the communication device 200 according to the fifth embodiment (before processing at the time of manufacturing).
As shown in FIG. 22, when the communication device 200 is manufactured, the master common key 291e and the device unique ID 291b are registered in the device storage unit 290 (not shown) of the communication device 200.
The master common key 291e is information used to generate the device individual common key 293d, and is the same for all communication devices 200.

FIG. 23 is a flowchart illustrating processing at the time of manufacturing the communication device 200 according to the fifth embodiment.
A process at the time of manufacturing the communication device 200 according to the fifth embodiment will be described below with reference to FIG.

The device individual common key generation unit 214 generates a device individual common key 293d based on the master common key 291e and the device unique ID 291b (S114), and deletes the master common key 291e (S122).
Details of each process (S114, S122) will be described below.

<S114: Example of Device ID Key Generation Process>
The device individual common key generation unit 214 acquires the master common key 291e and the device unique ID 291b from the device storage unit 290.
The device individual common key generation unit 214 executes a MAC algorithm (for example, HMAC-SHA1 or HMAC-MD5) using the acquired master common key 291e and device unique ID 291b as input values, and generates a device individual common key 293d.
The device individual common key generation unit 214 stores the generated device individual common key 293d in the device storage unit 290.
After S114, the process proceeds to S122.

<S122>
The device individual common key generation unit 214 deletes the master common key 291e used for generating the device individual common key 293d from the device storage unit 290. The device individual common key generation unit 214 prevents the master common key 291e from leaking and the device individual common key 293d from being forged using the leaked master common key 291e by deleting the master common key 291e.
After S122, the process ends.

FIG. 24 is a diagram illustrating stored data at the time of manufacturing (after processing at the time of manufacturing) of the communication device 200 according to the fifth embodiment.
As shown in FIG. 24, after the manufacturing process of the communication device 200, the device storage unit 290 (not shown) of the communication device 200 stores a device unique ID 291b and a device individual common key 293d.

FIG. 25 is a flowchart showing processing at the time of system construction of the communication device 200 according to the fifth embodiment.
The process at the time of system construction of the communication device 200 in the fifth embodiment will be described below based on FIG.

  The flowchart shown in FIG. 25 is obtained by changing S230 in the system construction processing (see FIG. 7) of communication device 200 in Embodiment 1 to S232 described below.

<S232>
After S220, the device individual common key MAC generation unit 232 acquires the device individual common key 293d and the RSA public key 292b from the device storage unit 290.
The device-specific common key MAC generation unit 232 executes a MAC algorithm (for example, HMAC-SHA1 or HMAC-MD5) using the acquired device-specific common key 293d and the RSA public key 292b as input values, and performs the device-specific RSA public key 292b. A common key MAC 294d is generated.
The device individual common key MAC generation unit 232 stores the device individual common key MAC 294d of the generated RSA public key 292b in the device storage unit 290.
After S232, the process proceeds to S240.

  In S240 and S250, the self-signed certificate information includes the device individual common key MAC 294d instead of the ID-based cryptographic signature 294b.

FIG. 26 is a diagram showing stored data at the time of system construction of the communication device 200 according to the fifth embodiment (after processing at the time of system construction).
As shown in FIG. 26, after the system construction process of the communication device 200, the device storage unit 290 (not shown) of the communication device 200 includes a device unique ID 291b, a device individual common key 293d, a host name 291c, an RSA key pair 292, and A self-signed certificate 294 is stored.
In the self-signed certificate 294, the RSA public key 292b, the expiration date of the self-signed certificate 294, the host name 291c, the device unique ID 291b, the device individual common key MAC 294d, and the RSA self-signature 294a are set.

FIG. 27 is a diagram showing an operation outline of the device authentication system 100 according to the fifth embodiment.
As shown in FIG. 27, the communication device A 201 communicates with the communication terminal 203.
The communication terminal 203 has an interface to which a USB token 120 (USB: Universal Serial Bus) is connected. For example, the communication terminal 203 is a personal computer.
The communication terminal 203 includes an SSL communication unit 240, a self-signed certificate verification unit 241, and an encryption authentication communication unit 242.
When the user of the communication terminal 203 accesses the communication device A 201 from the communication terminal 203, the USB token 120 storing the same master common key 291 e registered in the communication device 200 at the time of manufacture is connected to the communication terminal 203. To do. Instead of the USB token 120, another medium such as an IC card may be used as a medium that can securely store the master common key 291e.
The communication device A201 stores the user ID and password of a user who is permitted to access the communication device A201.

FIG. 28 is a flowchart illustrating processing during operation of the communication device 200 according to the fifth embodiment.
The processing at the time of operation of the communication device 200 in the fifth embodiment will be described below based on FIG.

<S311>
Communication device A201 and communication terminal 203 exchange SSL session information, similarly to communication device A201 and communication device B202 in S310 of the first embodiment (see FIG. 10).
After S311, the process proceeds to S321.

<S321: Example of Self-Certificate Transmission Processing and Self-Certificate Reception Processing>
The SSL communication unit 240 of the communication device A 201 transmits the self-signed certificate 294 to the communication terminal 203 as in S320 in the first embodiment.
The SSL communication unit 240 of the communication terminal 203 may not transmit the self-signed certificate 294 to the communication device A201.
After S321, the process proceeds to S330.

<S334: Self-Signed Certificate Verification Processing (Example of Self-Certificate Verification Processing)>
The self-signed certificate verification unit 241 of the communication terminal 203 verifies the self-signed certificate 294 of the communication device A 201 in the same manner as the communication device B 202 in S330 of the first embodiment.
If the self-signed certificate 294 of the communication device A 201 is valid, the process proceeds to S335.

<S335: Device Individual Common Key MAC Verification Processing (Example of Self-Certificate Verification Processing)>
The self-signed certificate verification unit 241 of the communication terminal 203 acquires the master common key 291e from the USB token 120 connected to the communication terminal 203.
After S335, the process proceeds to S336.

<S336: Device Individual Common Key MAC Verification Processing (Example of Self-Certificate Verification Processing)>
The self-signed certificate verification unit 241 of the communication terminal 203 executes the MAC algorithm using the master common key 291e acquired in S335 and the device unique ID 291b set in the self-signed certificate 294 of the communication device A201 as input values, A device individual common key 293d is generated. In S335 and S336, the generation of the device individual common key 293d may be performed inside the USB token 120 that keeps the master common key 291e confidential. In this case, the device individual common key 293d is an output corresponding to the input of the device unique ID 291b.
The processing content is the same as the generation processing of the device individual common key 293d by the communication device A201 (see S1 in FIG. 23).
After S336, the process proceeds to S337.

<S337: Device Individual Common Key MAC Verification Processing (Example of Self-Certificate Verification Processing)>
The self-signed certificate verification unit 241 of the communication terminal 203 executes the MAC algorithm using the device individual common key 293d generated in S336 and the RSA public key 292b set in the self-signed certificate 294 of the communication device A201 as input values. Then, the device individual common key MAC 294d of the RSA public key 292b is generated.
The processing content is the same as the processing for generating the device individual common key MAC294d by the communication device A201 (S232, see FIG. 25).
After S337, the process proceeds to S338.

<S338: Device Individual Common Key MAC Verification Processing (Example of Self-Certificate Verification Processing)>
The self-signed certificate verification unit 241 of the communication terminal 203 compares the device individual common key MAC 294d set in the self-signed certificate 294 of the communication device A 201 with the device individual common key MAC 294d generated in S337.
The self-signed certificate verification unit 241 of the communication terminal 203 determines that the device individual common key MAC 294d set in the self-signed certificate 294 of the communication device A 201 is valid when the device individual common key MAC 294d matches, If the device individual common key MAC 294d does not match, it is determined that the device individual common key MAC 294d set in the self-signed certificate 294 of the communication device A 201 is not valid.

The self-signed certificate verification unit 241 of the communication terminal 203 verifies the device individual common key MAC 294d set in the self-signed certificate 294 in comparison with the device individual common key MAC 294d generated by the same method as the communication device A 201. Yes.
For this reason, when the device individual common key MAC294d is valid, it is guaranteed that the communication partner of the communication device B202 is the communication device A201.

If the device individual common key MAC 294d is valid, the process proceeds to S342.
When the device individual common key MAC294d is not valid, the communication device B202 ends the communication with the communication device A201, and the operation time process of the communication device 200 ends.
The illustration of the processing branch when the device individual common key MAC 294d is not valid is omitted.

<S342>
The SSL communication unit 240 of the communication terminal 203 generates the premaster secret 295a and transmits the premaster secret 295a encrypted using the RSA public key 292b to the communication device A201, similarly to S340 in the first embodiment.
After S342, the process proceeds to S343.

<S343>
The SSL communication unit 240 of the communication device A 201 decrypts the premaster secret 295a received from the communication terminal 203 using the RSA private key 292a, as in S341 in the first embodiment.
After S343, the process proceeds to S382.

<S382>
The SSL communication unit 240 of the communication device A201 and the SSL communication unit 240 of the communication terminal 203 generate a session key 295b from the premaster secret 295a, as in S380 in the first embodiment.
After S382, the process proceeds to S383.

<S383>
The user of the communication terminal 203 inputs his user ID and password to the communication terminal 203.
The encryption authentication communication unit 242 of the communication terminal 203 encrypts the user ID and password input by the user using the session key 295b, and transmits the encrypted user ID and password to the communication device A201.
After S383, the process proceeds to S384.

<S384>
The encryption authentication communication unit 242 of the communication device A201 receives the user ID and password transmitted from the communication terminal 203, and decrypts the received user ID and password using the session key 295b.
The encryption authentication communication unit 242 of the communication device A201 compares the decrypted user ID and password with the user ID and password stored in advance in the device storage unit 290.
The encryption authentication communication unit 242 of the communication device A 201 permits authentication of the user of the communication terminal 203 when the comparison matches, and denies authentication of the user of the communication terminal 203 when the comparison does not match.
When user authentication is not permitted, S383 to S384 are repeated until user authentication is permitted. The illustration of the processing branch when the user authentication is not permitted is omitted.
If user authentication is permitted, the process proceeds to S385.

<S385>
The encryption authentication communication unit 242 of the communication device A 201 and the encryption authentication communication unit 242 of the communication terminal 203 communicate the communication data 295d encrypted using the session key 295b, as in S381 in the first embodiment.
After the necessary data communication is completed in S385, the process ends.

The communication terminal 203 may be the communication device 200 that generates the self-signed certificate 294 and transmits the generated self-signed certificate 294 to the communication partner (communication device A 201), like the communication device A 201.
In this case, the communication device A 201 is common to the individual devices set in the self-signed certificate 294 and the self-signed certificate 294 of the communication terminal 203, similarly to the processing executed by the communication terminal 203 (S330, S334 to S337). The key MAC 294d is verified.

  In the fifth embodiment, the communication device 200 generates an electronic signature of the RSA public key 292b using a common key unique to the device instead of the ID-based encryption secret key 293b, and self-signs the electronic signature of the generated RSA public key 292b. The form set in the certificate 294 has been described.

  As in the first embodiment, the device authentication system 100 has an effect of guaranteeing the communication partner based on the self-signed certificate 294 without receiving a certificate from the certificate authority.

The communication device 200 may generate the self-signed certificate 294 in the manufacturing process as in the second embodiment.
Further, the communication device 200 may update the self-signed certificate 294 as in the third embodiment.

Embodiment 6 FIG.
A mode in which the communication device 200 prevents leakage of the ID-based encryption secret key 293b and the RSA secret key 292a will be described.
Hereinafter, items different from the first embodiment will be mainly described. Matters whose description is omitted are the same as those in the first embodiment.

FIG. 29 is a functional configuration diagram of the communication device 200 according to the sixth embodiment.
The functional configuration of the communication device 200 according to Embodiment 6 will be described below based on FIG.

The communication device 200 includes an IC chip 800 (IC: Integrated Circuit), and the IC chip 800 includes an IC chip memory 801 (an example of an access restriction data storage unit).
In addition, the communication device 200 includes a command access unit 280 that generates a command for requesting the IC chip 800 to perform a specific process.

The IC chip memory 801 includes a master key 291a, device unique ID 291b, RSA key pair 292 (RSA private key 292a, RSA public key 292b), public parameter 293a, ID base encryption private key 293b, RSA self signature 294a, and ID base encryption. The signature 294b (an example of access restriction data) is stored.
Other data is stored in the device storage unit 290 outside the IC chip 800.

The processing request for the IC chip 800 is made using a predefined command (interface).
Further, even from within the communication device 200, data stored in the IC chip memory 801 cannot be directly accessed from outside the IC chip 800.

For example,
(1) Registration command, (2) IDBE secret key generation command (IDBE: ID-Based Encryption), (3) Certificate generation command, (4) IDBE signature verification command, (5) RSA encryption / decryption command, (6) An SSL signature command is defined.

(1) The registration command is a command for registering the master key 291a, the public parameter 293a, and the device unique ID 291b.
(2) The IDBE secret key generation command is a command for generating the ID base encryption secret key 293b.
(3) The certificate generation command is a command for generating a self-signed certificate 294.
(4) The IDBE signature verification command is a command for verifying the ID-based cryptographic signature 294b.
(5) The RSA encryption / decryption command is a command for performing encryption / decryption using the RSA key pair 292.
(6) The SSL signature command is a command for generating the SSL signature 295c.

  For example, (7) RSA key pair generation command and (8) key read command are defined.

(7) The RSA key pair generation command is a command for generating the RSA key pair 292.
(8) The key read command is a command for reading the master key 291a, the RSA key pair 292, the ID-based encryption secret key 293b, and the public parameter 293a.

The IC chip 800 includes an ID-based encryption secret key generation unit 210, an RSA key pair generation unit 221, a self-signature generation unit 222, a self-signed certificate generation unit 223, an ID-based encryption signature generation unit 230, a registration unit 281 and an ID-based encryption. It includes a signature verification unit 282, an RSA encryption / decryption unit 283, an SSL signature generation unit 284, and a command access control unit 810 (an example of an access restriction unit).
Other configurations of the communication device 200 are provided outside the IC chip 800.

The command access control unit 810 accepts only commands that do not output specific data stored in the IC chip memory 801 (for example, the ID-based encryption secret key 293b and the RSA secret key 292a) to the outside of the IC chip 800. Accordingly, the configuration in the IC chip 800 is operated.
The command access control unit 810 restricts access to the data stored in the IC chip memory 801 by restricting commands to be accepted, thereby preventing data leakage.
For example, the command access control unit 810 accepts the commands (1) to (6) but rejects the commands (7) to (8) without accepting the commands.

  The registration unit 281 registers the master key 291a, the device unique ID 291b, and the public parameter 293a in the IC chip memory 801.

  The ID-based cryptographic signature verification unit 282 verifies the ID-based cryptographic signature 294b using the public parameter 293a stored in the IC chip memory 801.

  The RSA encryption / decryption unit 283 encrypts and decrypts data using the RSA key pair 292 stored in the IC chip memory 801.

  The SSL signature generation unit 284 generates an SSL signature 295c using the RSA private key 292a stored in the IC chip memory 801.

FIG. 30 is a flowchart illustrating processing at the time of manufacturing the communication device 200 according to the sixth embodiment.
A process at the time of manufacturing the communication device 200 according to the sixth embodiment will be described below with reference to FIG.

<S101>
The manufacturer inputs the master key 291a, the device unique ID 291b, and the public parameter 293a to be registered in the communication device 200.
The command access unit 280 generates a registration command in which the input master key 291a, device unique ID 291b, and public parameter 293a are set, and inputs the generated registration command to the IC chip 800. The registration command is a command that is accepted by the command access control unit 810 of the IC chip 800.
The command access control unit 810 of the IC chip 800 determines the input registration command and accepts the registration command.
The registration unit 281 stores the master key 291a, the device unique ID 291b, and the public parameter 293a set in the registration command in the IC chip memory 801.
After S101, the process proceeds to S102.

<S102>
The command access unit 280 generates an IDBE secret key generation command and inputs the generated IDBE secret key generation command to the IC chip 800. The IDBE secret key generation command is a command that is permitted to be accepted by the command access control unit 810 of the IC chip 800.
After S102, the process proceeds to S110.

<S110>
The command access control unit 810 of the IC chip 800 determines the input IDBE secret key generation command and accepts the IDBE secret key generation command.
As in the first embodiment (see FIG. 5), the ID-based encryption secret key generation unit 210 generates the ID-based encryption secret key 293b based on the master key 291a, the device unique ID 291b, and the public parameter 293a. The master key 291a, the device unique ID 291b, and the public parameter 293a are stored in the IC chip memory 801.
The ID base encryption secret key generation unit 210 stores the generated ID base encryption secret key 293b in the IC chip memory 801.
After S110, the process proceeds to S120.

<S120>
The ID-based cryptographic secret key generation unit 210 deletes the master key 291a as in the first embodiment. The master key 291a is deleted from the IC chip memory 801.
By S120, the manufacturing process ends.

FIG. 31 is a flowchart showing processing at the time of system construction of the communication device 200 according to the sixth embodiment.
The processing at the time of system construction of the communication device 200 in the sixth embodiment will be described below based on FIG.

<S210>
As in the first embodiment (see FIG. 7), the system information setting unit 220 stores the host name 291c input by the administrator in the device storage unit 290.
After S210, the process proceeds to S290.

<S290>
The command access unit 280 generates a certificate generation command in which the host name 291c and other data are set as data included in the self-signed certificate information, and inputs the generated certificate command to the IC chip 800. The certificate generation command is a command that is accepted by the command access control unit 810 of the IC chip 800.
After S290, the process proceeds to S220.

<S220>
The command access control unit 810 of the IC chip 800 determines the input certificate generation command and accepts the certificate generation command.
The RSA key pair generation unit 221 generates an RSA key pair 292 (RSA private key 292a, RSA public key 292b) as in the first embodiment (see FIG. 7).
The RSA key pair generation unit 221 stores the generated RSA key pair 292 in the IC chip memory 801.
After S220, the process proceeds to S230.

<S230>
The ID-based cryptographic signature generation unit 230 generates the ID-based cryptographic signature 294b of the RSA public key 292b using the ID-based cryptographic private key 293b, as in the first embodiment. The ID base encryption private key 293b and the RSA public key 292b are stored in the IC chip memory 801.
The ID-based cryptographic signature generation unit 230 stores the generated ID-based cryptographic signature 294b of the RSA public key 292b in the IC chip memory 801.
After S230, the process proceeds to S240.

<S240>
As in the first embodiment, the self-signature generation unit 222 generates the RSA self-signature 294a of the self-signed certificate information using the RSA private key 292a. Some data including the host name 291c in the self-signed certificate information is set in the certificate generation command. The RSA private key 292a is stored in the IC chip memory 801.
The self-signature generation unit 222 stores the generated RSA self-signature 294a in the IC chip memory 801.
After S240, the process proceeds to S250.

<S250>
The self-signed certificate generation unit 223 generates the self-signed certificate 294 by combining the self-signed certificate information and the RSA self-signature 294a as in the first embodiment.
The command access control unit 810 outputs the generated self-signed certificate 294 to the command access unit 280, and the command access unit 280 stores the output self-signed certificate 294 in the device storage unit 290.
By S250, the system construction process ends.

FIG. 32 is a flowchart illustrating processing during operation of the communication device 200 according to the sixth embodiment.
Processing during operation of the communication device 200 in the sixth embodiment will be described below based on FIG.

<S310 to S320>
The communication device A 201 and the communication device B 202 exchange SSL session information (S310) and communicate the self-signed certificate 294 with each other (S320), as in the first embodiment (see FIG. 10).
After S320, the process proceeds to S330.

<S330>
The self-signed certificate verification unit 241 of the communication device B 202 verifies the self-signed certificate 294 of the communication device A 201 as in the first embodiment.
After S330, the process proceeds to S331. However, as in the first embodiment, when the self-signed certificate 294 is invalid, the operation process ends.

<S331>
The self-signed certificate verification unit 241 of the communication device B 202 requests the command access unit 280 for an IDBE signature verification command.
The command access unit 280 generates an IDBE signature verification command in which the self-signed certificate 294 of the communication device A 201 is set, and inputs the generated IDBE signature verification command to the IC chip 800. The IDBE signature verification command is a command that is accepted by the command access control unit 810 of the IC chip 800.
The command access control unit 810 of the IC chip 800 determines the input IDBE signature verification command and accepts the IDBE signature verification command.
The ID-based cryptographic signature verification unit 282 verifies the ID-based cryptographic signature 294b of the self-signed certificate 294, similar to the self-signed certificate verification unit 241 in the first embodiment. The self-signed certificate 294 is set in the IDBE signature verification command. The public parameter 293a used for verification is stored in the IC chip memory 801.
The command access control unit 810 outputs the verification result to the command access unit 280, and the command access unit 280 outputs the output verification result to the self-signed certificate verification unit 241.
After S331, the process proceeds to S340. However, as in the first embodiment, when the ID-based cryptographic signature 294b is invalid, the operation time process ends.

<S340>
As in the first embodiment, the SSL communication unit 240 of the communication device B202 generates the premaster secret 295a, encrypts the generated premaster secret 295a, and transmits the encrypted premaster secret 295a to the communication device A201.
After S340, the process proceeds to S341.

<S341>
The SSL communication unit 240 of the communication device A 201 receives the encrypted premaster secret 295a.
The SSL communication unit 240 of the communication device A 201 requests the command access unit 280 for an RSA decoding command for decoding the premaster secret 295a.
The command access unit 280 generates an RSA decryption command in which the encrypted premaster secret 295a is set, and inputs the generated RSA decryption command to the IC chip 800. The RSA decoding command is a command that is permitted to be accepted by the command access control unit 810 of the IC chip 800.
The command access control unit 810 of the IC chip 800 determines the input RSA decoding command and accepts the RSA decoding command.
The RSA encryption / decryption unit 283 decrypts the premaster secret 295a using the RSA secret key 292a, similarly to the SSL communication unit 240 in the first embodiment. The RSA private key 292a is stored in the IC chip memory 801.
The command access control unit 810 outputs the decoded premaster secret 295a to the command access unit 280, and the command access unit 280 stores the output premaster secret 295a in the device storage unit 290.
After S341, the process proceeds to S350.

<S350>
The SSL communication unit 240 of the communication device B 202 requests an SSL signature command from the command access unit 280.
The command access unit 280 generates an SSL signature command in which a handshake message (information communicated between the communication device A 201 and the communication device B 202) is set, and inputs the generated SSL signature command to the IC chip memory 801. The SSL signature command is a command that is permitted to be accepted by the command access control unit 810 of the IC chip 800.
The command access control unit 810 of the IC chip 800 determines the input SSL signature command and accepts the SSL signature command.
Similar to the SSL communication unit 240 in the first embodiment, the SSL signature generation unit 284 generates a handshake message signature as an SSL signature 295c using the RSA private key 292a. The RSA private key 292a is stored in the IC chip memory 801.
The command access control unit 810 outputs the SSL signature 295c to the command access unit 280, the command access unit 280 outputs the SSL signature 295c to the SSL communication unit 240, and the SSL communication unit 240 transmits the SSL signature 295c to the communication device A201. .
The SSL communication unit 240 of the communication device A201 receives the SSL signature 295c of the communication device B202, and stores the received SSL signature 295c in the device storage unit 290.
After S350, the process proceeds to S360.

<S360>
The communication device A 201 verifies the self-signed certificate 294 of the communication device B 202 in the same manner as the communication device B 202 in S330.
After S360, the process proceeds to S361. However, as in S330, when the self-signed certificate 294 is invalid, the operation time process ends.

<S361>
The communication device A 201 verifies the ID-based encryption signature 294b set in the self-signed certificate 294 of the communication device B 202 in the same manner as the communication device B 202 in S331.
After S361, the process proceeds to S370. However, as in S331, when the ID-based cryptographic signature 294b is invalid, the operation time process is terminated.

<S370>
The SSL communication unit 240 of the communication device A201 verifies the SSL signature 295c of the communication device B202 as in the first embodiment.
After S370, the process proceeds to S380. However, as in the first embodiment, when the SSL signature 295c is invalid, the operation time process ends.

<S380 to S381>
S380 to S381 are performed in the same manner as in the first embodiment.
The SSL communication unit 240 of the communication device A201 and the SSL communication unit 240 of the communication device B202 generate a session key 295b (S380), and the communication data 295d is encrypted and communicated using the generated session key 295b (S381).
By S381, the operation process is terminated.

  In the sixth embodiment, for example, the following device authentication system 100 has been described.

The device authentication system 100 solves the following problems.
(1) If the ID base encryption secret key 293b is leaked to the outside, an ID base encryption signature 294b is generated from the leaked ID base encryption secret key 293b, and there is a possibility that a third party may impersonate another person to perform communication.
(2) There is a possibility that a third party illegally uses the ID-based cryptographic signature generation unit 230, generates an ID-based cryptographic signature 294b using its own RSA public key, and performs communication by impersonating another person.
(3) If the RSA private key 292a is leaked to the outside, the premaster secret is decrypted, and there is a risk that a third party may impersonate another person to perform communication.

Since the communication device 200 includes the IC chip 800 having a certificate generation function, it is not necessary to have a communication function with the certificate issuing server. That is, since it is not necessary to realize highly secure communication with the certificate issuing server, the cost can be reduced.
The communication device 200 takes measures against leakage of the ID-based cryptographic private key 293b, unauthorized use of the ID-based cryptographic signature generation unit 230, and leakage of the RSA private key 292a, and prevents impersonation by other communication devices.

When the verification of the self-signed certificate 294 is successful, the ID-based cryptographic signature 294b included in the self-signed certificate 294 is generated by the communication device 200 identified by the device unique ID 291b included in the self-signed certificate 294. Guaranteed for the following reasons:
(1) The ID-based encryption secret key 293b stored in the IC chip 800 is accessed only when the certificate generation command is executed. Other commands that attempt to access the ID-based encryption secret key 293b are rejected by the command access control unit 810. Therefore, the ID-based cryptographic signature 294b is prevented from being forged.
(2) The RSA private key 292a corresponding to the RSA public key 292b included in the self-signed certificate 294 is accessed only when executing the certificate generation command, the RSA decryption command, and the SSL signature command. Other commands that attempt to access the RSA private key 292a are rejected by the command access control unit 810. Therefore, the RSA private key 292a is prevented from leaking outside. That is, the self-signed certificate 294 is not forged, and it is guaranteed that the self-signed certificate 294 is generated by the communication device 200 identified by the device unique ID 291b used for generating the ID-based cryptographic signature 294b. The

  The IC chip 800 (IC chip memory 801) is an example of a configuration that restricts access to internal data. Access to the RSA private key 292a, the ID-based cryptographic private key 293b, and the like may be restricted by a configuration other than the IC chip 800.

The communication device 200 may generate the self-signed certificate 294 in the manufacturing process as in the second embodiment.
The communication device 200 may update the self-signed certificate 294 as in the third embodiment.
As in the fourth embodiment, the communication device 200 uses the device-specific RSA key pair 293c instead of the ID-based encryption secret key 293b, and uses the device-specific RSA signature 294c instead of the ID-based encryption signature 294b as the self-signed certificate 294. May be set.
Similarly to the fifth embodiment, the communication device 200 uses the device individual common key 293d instead of the ID base encryption secret key 293b, and uses the device individual common key MAC 294d instead of the ID base encryption signature 294b as a self-signed certificate. It may be set to 294.

  100 device authentication system, 110 communication network, 120 USB token, 200 communication device, 201 communication device A, 202 communication device B, 203 communication terminal, 210 ID-based encryption secret key generation unit, 211 device individual RSA key pair generation unit, 212 Device individual signature generation unit, 213 Device individual certificate generation unit, 214 Device individual common key generation unit, 220 System information setting unit, 221 RSA key pair generation unit, 222 Self signature generation unit, 223 Self signature certificate generation unit, 224 Certificate update timing detection unit, 230 ID-based cryptographic signature generation unit, 231 device individual RSA signature generation unit, 232 device individual common key MAC generation unit, 240 SSL communication unit, 241 self-signed certificate verification unit, 242 encryption authentication communication unit 280 Command access unit, 281 Registration unit, 282 ID-based cryptographic signature verification unit, 283 RSA encryption / decryption unit, 284 SSL signature generation unit, 290 device storage unit, 291a master key, 291b device unique ID, 291c host name, 291d master RSA key pair, 291d1 master RSA private key, 291d2 Master RSA public key, 291e Master common key, 292 RSA key pair, 292a RSA private key, 292b RSA public key, 293a public parameter, 293b ID-based cryptographic private key, 293c device-specific RSA key pair, 293c1 device-specific RSA private key, 293c2 Device-specific RSA public key, 293d Device-specific common key, 294 Self-signed certificate, 294a RSA self-signed, 294b ID-based cryptographic signature, 294c Device-specific RSA signature, 294d Device-specific common key MAC 295a pre-master secret, 295b session key, 295c SSL signature, 295d communication data, 296 device individual certificate, 296a device individual signature, 800 IC chip, 801 IC chip memory, 810 command access control unit, 911 CPU, 912 bus, 913 ROM, 914 RAM, 915 communication board, 920 magnetic disk device, 921 OS, 923 program group, 924 file group.

Claims (15)

A device ID key generation unit that generates encryption key data using a CPU (Central Processing Unit) as a device ID key based on a device ID (IDentity) that identifies the device;
A device ID authentication information generation unit that generates authentication information of the public key data as device ID authentication information using a CPU based on the public key data of the device itself and the device ID key generated by the device ID key generation unit; ,
A self-authentication information generating unit that generates authentication information of the predetermined data as self-authentication information using the CPU based on the predetermined data and the private key data of the device;
An electronic certificate including the predetermined data, the device ID authentication information generated by the device ID authentication information generation unit, and the self authentication information generated by the self authentication information generation unit is communicated to a specific device as a self certificate. A self-authentication communication device comprising a self-certificate transmission unit that transmits using a device. The device ID key generation unit generates, as the device ID key, an ID-based encryption secret key that uses the device ID as an ID-based encryption public key by an ID-based encryption method,
The device ID authentication information generating unit generates, as the device ID authentication information, an ID base encryption private key signature that is an electronic signature of the public key data using the ID base encryption private key,
The self-authentication communication device according to claim 1, wherein the self-authentication information generation unit generates a self-signature that is an electronic signature of the predetermined data as the self-authentication information using the secret key data. The self-certificate sending unit sends the self-certificate including the public key data, the device ID, the ID-based cryptographic private key signature, and the self-signature to the specific device. 2. Self-authenticating communication device according to 2. The self-authentication communication device further includes an authentication key pair update unit that updates the secret key data and the public key data as an authentication key pair using a CPU at a predetermined timing,
The device ID authentication information generation unit newly generates the device ID authentication information based on the public key data updated by the authentication key pair update unit,
The self-authentication information generation unit newly generates the self-authentication information based on the secret key data updated by the authentication key pair update unit,
The self-certificate sending unit includes a self-certificate including device ID authentication information newly generated by the device ID authentication information generating unit and self-authentication information newly generated by the self-authentication information generating unit. 4. The self-authenticating communication device according to claim 3, wherein the self-authenticating communication device transmits to a specific device. The self-authenticating communication device further includes:
An access restriction data storage unit for storing the device ID key as access restriction data;
An access restriction unit that restricts access to the access restriction data stored in the access restriction data storage unit, and restricts access to the device ID key to access from the device ID authentication information generation unit. The self-authenticating communication device according to claim 4, further comprising: The access restriction data storage unit stores the secret key data as access restriction data,
The self-authentication communication device according to claim 5, wherein the access restriction unit restricts access to the secret key data to access from the self-authentication information generation unit. The self-authentication communication device includes an IC chip (IC: Integrated Circuit),
The self-authentication communication device according to claim 6, wherein the access restriction data storage unit and the access restriction unit are provided in the IC chip. The device ID key generation unit generates a device individual secret key that is secret key data and a device individual public key that is public key data as the device ID key using the device ID by a public key cryptosystem,
The device ID authentication information generation unit generates, as the device ID authentication information, a device individual secret key signature that is an electronic signature of the public key data of the own device, using the device individual secret key.
The self-authentication communication according to claim 1, wherein the self-authentication information generation unit generates a self-signature that is an electronic signature of the predetermined data as the self-authentication information using secret key data of the self-device. machine. The self-authentication communication device further includes a device individual signature generation unit that generates an electronic signature of the device individual public key as a device individual signature based on private key data of the device using a CPU.
9. The self-authenticating communication device according to claim 8, wherein the self-certificate transmission unit transmits the self-certificate including the device individual signature generated by the device individual signature generation unit to the specific device. The device ID key generation unit generates a device individual common key, which is common key data, using the device ID by a common key cryptosystem as the device ID key,
The device ID authentication information generation unit generates, as the device ID authentication information, a device individual common key MAC that is a MAC (Message Authentication Code) of the public key data using the device individual common key,
The self-authentication communication device according to claim 1, wherein the self-authentication information generation unit generates a self-signature that is an electronic signature of the predetermined data as the self-authentication information using the secret key data. A self-certificate receiving unit configured to receive a self-certificate transmitted by the self-authenticating communication device according to claim 1 using a communication device;
A self-authentication verification communication device comprising: a self-certificate verification unit that verifies a self-certificate received by the self-certificate reception unit using a CPU. A self-authenticating communication device according to claim 1;
A device authentication system comprising the self-authentication verification communication device according to claim 11. A device authentication method of a device authentication system having a self-authentication communication device and a self-authentication verification communication device,
In self-authenticating communication equipment,
A device ID key generation unit performs device ID key generation processing using a CPU (Central Processing Unit) to generate encryption key data as a device ID key based on a device ID (IDentity) that identifies the device itself,
The device ID authentication information generation unit generates the authentication information of the public key data as device ID authentication information using the CPU based on the public key data of the own device and the device ID key generated by the device ID key generation unit. Device ID authentication information generation processing to be performed,
The self-authentication information generation unit performs self-authentication information generation processing for generating authentication information of the predetermined data as self-authentication information based on the predetermined data and the private key data of the device,
A self-certificate sending unit that self-certifies an electronic certificate including the predetermined data, the device ID authentication information generated by the device ID authentication information generating unit, and the self-authentication information generated by the self-authentication information generating unit; Perform a self-certificate transmission process that uses a communication device to send a certificate to a specific device.
In self-authentication verification communication equipment,
The self-certificate receiving unit performs self-certificate reception processing for receiving the self-certificate transmitted by the self-authenticating communication device using the communication device
A device authentication method of a device authentication system, wherein a self-certificate verification unit performs a self-certificate verification process for verifying a self-certificate received by the self-certificate reception unit using a CPU. A device ID key generation process that uses a CPU (Central Processing Unit) to generate encryption key data as a device ID key based on a device ID (IDentity) that identifies the device;
Device ID authentication information generation processing for generating authentication information of the public key data as device ID authentication information using the CPU based on the public key data of the device itself and the device ID key generated by the device ID key generation processing; ,
Self-authentication information generation processing for generating authentication information of the predetermined data as self-authentication information using the CPU based on the predetermined data and the private key data of the own device;
An electronic certificate including the predetermined data, the device ID authentication information generated by the device ID authentication information generation process, and the self authentication information generated by the self authentication information generation process is communicated to a specific device as a self certificate. A self-authentication communication program for causing a communication device to execute a self-certificate transmission process transmitted using a device. A self-certificate receiving process for receiving a self-certificate transmitted by the self-authenticating communication device according to claim 1 using a communication device;
A self-authentication verification communication program for causing a communication device to execute a self-certificate verification process for verifying a self-certificate received by the self-certificate reception process using a CPU.

Images