JP2003318891A - Signature verification apparatus and method, computer program and recording medium storing the program, certificate authority and public key certificate issuing method - Google Patents

Abstract

(57) [Summary] [PROBLEMS] To provide a signature verification device which can perform signature verification by various signature methods without requiring preparation of a signature verification program in the signature verification device. SOLUTION: In-certificate information acquiring means 12 acquires a verification program holding server address and a public key from a public key certificate. The verification program obtaining means 13 connects to the verification program storage server specified by the verification program storage server address, transmits the signature algorithm identifier, and obtains the signature verification program corresponding to the signature algorithm identifier. The signature verification executing means 14 verifies the signature target data, the signature data, and the public key by applying a signature generation procedure described in the signature verification program.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention uses a public key certificate issued by a certificate authority to verify the integrity of electronic data and the sender, and a signature for verifying a digital signature attached to electronic data. The present invention relates to a verification device, a method therefor, a computer program for executing the method, a recording medium recording the program, a certificate authority, and a public key certificate issuing method.

[0002]

2. Description of the Related Art In order to authenticate an electronic document or a communication partner, an electronic document to be authenticated, electronic data transmitted by a communication partner to be authenticated, and a digital signature generated for this electronic data There is widely used a method of verifying a signature by using a public key certificate issued by a certificate authority.

The generation and verification of a digital signature is performed by a combination of a procedure for generating a message digest and encryption / decryption based on public key cryptography. The message digest is a method of converting input data into data of a fixed length, and as its procedure, one-way function SHA-1, MD5 and the like are widely used. For the key algorithm that determines the encryption / decryption procedure based on public key cryptography, refer to
IGN, RSA of USA RSA, etc. are known.

The generation of a digital signature is usually performed by generating a message digest of the data to be signed from the data to be signed, and performing a cryptographic process on the message digest with a secret key secretly held by the owner. Be seen. The result of encrypting this message digest with the private key is the signature of the signature target data, that is, the signature data.

The verification of the digital signature is usually performed by determining whether or not the data obtained as a result of decrypting the signature data with the public key matches the message digest generated from this signature target data. The signature verification succeeds only if the public key is the public key paired with the private key used to generate the signature data.

That is, when the signature verification is successful, it is confirmed that the signature data is generated by the private key paired with the public key and the signature target data.

[0007] In the public key certificate, a certificate authority as a trusted third party, with respect to the data including the identification information of the owner of the private key and the public key paired with this private key, This certificate authority generates signature data with a secret key that is secretly held and adds it to the data, and certifies the correspondence between the public key and the owner of the secret key. With the public key certificate issued by the certificate authority, it is possible to identify the owner of the private key paired with the public key included in this public key certificate.

By using the public key obtained from the public key certificate to verify the signature data attached to the electronic document or the electronic data transmitted by the communication partner,
It can be confirmed that the creator of this signature data is the person specified by the identification information described in this public key certificate, and thus the creator of the electronic document and the communication partner can be authenticated.

In the above procedure, when verifying the digital signature attached to the electronic data using the public key certificate issued by the certificate authority, usually the signature target data to be verified and the signature on the signature target data are verified. Obtain the signature algorithm identifier that identifies the data and the signature algorithm used to generate this signature data, and the public key certificate of the creator of this signature data, obtain the public key from the public key certificate, and sign The signature verification procedure corresponding to the signature algorithm identified by the signature algorithm identifier is applied to the data, the signature data, and the public key, and the private key and the signature target data in which the signature data corresponds to the public key are applied. , The data generated by applying the signature generation procedure corresponding to the signature algorithm identified by the signature algorithm identifier. Performs a process of verifying the signature data of the data to be signed if the signature verification is successful is determined to be valid, the signature data of the signature target data in case of failure is determined to be invalid.

In carrying out the above-mentioned signature verification, in the prior art, one or more signature verification programs for executing the signature verification procedure corresponding to the signature algorithm are prepared in advance in the apparatus for carrying out the verification, and the signature data is verified. When performing the above, check whether the signature verification program corresponding to the signature algorithm used for the signature exists in the prepared signature verification program, and if there is, verify the signature using it. If it does not exist, the signature verification process is abnormally terminated, and the result that the validity of the signature data cannot be determined is returned.

[0011]

However, in the above-mentioned conventional technique, it is necessary to prepare in advance a plurality of signature verification programs for executing the signature verification procedure corresponding to each signature algorithm in the apparatus for performing the verification. There is a problem in that the verifiable signature algorithm differs depending on the device that performs the method, and interoperability between the devices is impaired.

Further, it is difficult to deal with the risk of relying on a very limited signature algorithm registered in advance in the device, that is, to cope with a new signature algorithm when vulnerabilities of those algorithms become clear. I had a problem.

Therefore, the present invention has been made in view of the above conventional problems, and an object of the present invention is to perform signatures by various signature methods without requiring preparation of a signature verification program in a signature verification device. The present invention provides a signature verification device, a method thereof, a computer program and a recording medium recording the program, a certificate authority, and a public key certificate issuing method capable of verifying.

[0014]

In order to solve the above problems, the present invention according to claim 1 provides a program in which a public key and a signature verification procedure corresponding to a signature algorithm corresponding to the key algorithm of the public key are described. A public key certificate including a verification program holding server address that is the address of a verification program holding server that holds the signature verification program is issued by the certificate authority, and one or more signature verification programs are issued to the verification program holding server. When stored together with the signature algorithm identifier corresponding to the signature verification procedure described in the signature verification program, the verification program holding server address and the public key are acquired from the public key certificate input together with the signature data to be verified. Means for obtaining information in a certificate and the obtained verification program holding server Signature verification program acquisition means for connecting to the verification program holding server specified by the address and acquiring the signature verification program in which the signature verification procedure corresponding to the signature algorithm specified by the signature algorithm identifier input together with the signature data is described. And applying the signature verification procedure described in the acquired signature verification program to the signature target data input together with the signature data, the signature data, and the acquired public key, and the signature data is the signature. Signature verification execution means for verifying that the data is generated by applying the signature generation procedure corresponding to the signature algorithm specified by the algorithm identifier to the private key paired with the public key and the signature target data. A signature verifying device characterized by being provided is a solution means.

According to the present invention of claim 1, the in-certificate information acquiring means for acquiring the verification program holding server address and the public key from the public key certificate input together with the signature data to be verified, and the acquired information. Connected to the verification program holding server specified by the verification program holding server address, and acquires the signature verification program in which the signature verification procedure corresponding to the signature algorithm specified by the signature algorithm identifier input together with the signature data is described. By applying the signature verification program acquisition means and the signature verification procedure described in the acquired signature verification program to the signature target data input together with the signature data, the signature data, and the acquired public key, Signature data whose signature data is specified by the signature algorithm identifier Since a signature verification execution means for verifying that the data is generated by applying the signature generation procedure corresponding to the gorism to the private key paired with the public key and the signature target data, the signature verification program is executed. It will be possible to obtain the signature when necessary and verify the signature. As a result, it is possible to verify the signature by various signature methods without requiring the preparation of the signature verification program in the signature verification device. .

The present invention according to claim 2 further comprises a signature verification program verification information storage means for storing the signature verification program verification information used for verifying the signature verification program authentication information corresponding to the signature verification program, and the signature verification program verification information storage means. The verification program acquisition means acquires signature verification program authentication information corresponding to the signature verification program from the verification program holding server, and the signature verification program authentication information and the signature verification program verification information stored in the signature verification program authentication information storage means. The signature verification apparatus according to claim 1, wherein the signature verification program is authenticated using and.

According to the present invention of claim 2, there is provided signature verification program verification information storage means for storing the signature verification program verification information used for verifying the signature verification program authentication information corresponding to the signature verification program. The program acquisition means acquires from the verification program holding server signature verification program authentication information corresponding to the signature verification program from the verification program holding server, and the signature verification program authentication information and the signature verification program stored in the signature verification program authentication information storage means. Since the signature verification program is authenticated by using the program verification information, in addition to the above effect, an undesired signature verification program, that is, an incorrect signature verification program or malicious maliciously replaced during communication with the server The signature is verified by a signature verification program. The and cause inconvenience to prevent, will be able to more safely signature verification.

According to the present invention of claim 3, there is provided a server verification information storage means for storing server verification information used for authenticating the server authentication information acquired from the verification program holding server, and the verification program holding server stores the server verification information. 3. The signature verification according to claim 1, wherein the verification information is acquired, and the verification program holding server is authenticated using the server verification information and the server verification information stored in the server verification information storage means. The device is the solution.

According to the third aspect of the present invention, there is provided server verification information storage means for storing server verification information used for authenticating the server authentication information acquired from the verification program holding server, and the verification program holding server operates as a server. Since the verification program holding server is authenticated by obtaining the authentication information and using the server verification information and the server verification information stored in the server verification information storage means, in addition to the above effects, an undesirable verification program holding server, For example,
It is possible to prevent the inconvenience that the signature is verified by the signature verification program held by the spoofed server or the like, and perform the signature verification more safely.

Further, the present invention according to claim 4 is a signature verification program in which signature verification program information, which is a set of a signature verification program and a signature algorithm identifier corresponding to the signature verification procedure described in the signature verification program, is stored. An information storage unit is provided, and the signature verification execution unit determines whether or not the signature verification program information including the input signature algorithm identifier is stored in the signature verification program information storage unit, and stores it. The signature verification apparatus according to claim 1, wherein when the determination is made, a signature verification program is acquired from the signature verification program information, and the signature data is verified by the acquired signature verification program. Use it as a solution.

According to the present invention of claim 4, a signature verification program storing signature verification program information which is a set of a signature verification program and a signature algorithm identifier corresponding to a signature verification procedure described in the signature verification program. When the signature verification execution means is provided with information storage means, determines whether the signature verification program information including the input signature algorithm identifier is stored in the signature verification program information storage means, and determines that it is stored. Since the signature verification program is acquired from the signature verification program information and the signature data is verified by the acquired signature verification program, in addition to the above effect, there is a case where the signature verification program cannot be acquired from the verification program holding server. Can also verify the signature. Further, it is possible to reduce the number of times of communication with the verification program holding server and the amount of communication.

Further, the present invention according to claim 5 is a signature verification program in which signature verification program information, which is a set of a signature verification program and a signature algorithm identifier corresponding to a signature verification procedure described in the signature verification program, is stored. Signature verification program information for storing, in the signature verification program information storage means, a set of an information storage means, a signature verification program acquired from a verification program holding server, and a signature algorithm identifier corresponding to the signature verification program. A signature verifying device according to any one of claims 1 to 4 is a solution means.

According to the present invention of claim 5, a signature verification program in which signature verification program information, which is a set of a signature verification program and a signature algorithm identifier corresponding to the signature verification procedure described in the signature verification program, is stored. Signature verification program information registration for storing a combination of an information storage means, a signature verification program acquired from a verification program holding server, and a signature algorithm identifier corresponding to the signature verification program as signature verification program information in the signature verification program information storage means Since it is provided with the means, it is not necessary to reacquire the signature verification program acquired from the verification program holding server in the past.

According to the sixth aspect of the present invention, the signature verification program includes the creation date and time of the signature verification program, and the signature algorithm corresponding to the signature verification program and the signature verification procedure described in the signature verification program. The signature verification program information storage unit stores signature verification program information that is a set with an identifier, and the signature verification execution unit stores the signature verification program information including the input signature algorithm identifier. The signature verification program includes the creation date and time included in the signature verification program of the signature verification program information and the newer creation date and time included in the signature verification program acquired from the verification program holding server. 6. The method according to any one of claims 1 to 5, characterized in that And solutions with a signature verifying apparatus crab according.

According to the present invention of claim 6, a signature verification program in which signature verification program information, which is a set of a signature verification program and a signature algorithm identifier corresponding to the signature verification procedure described in the signature verification program, is stored. The signature verification execution means includes the information storage means, acquires the signature verification program information including the input signature algorithm identifier from the signature verification program information storage means, and generates the creation date and time included in the signature verification program of the signature verification program information. Since the signature data is verified by the signature verification program including the latest creation date and time included in the signature verification program acquired from the verification program holding server, the signature verification can be performed by the new signature verification program. Therefore, the signature can be verified by the signature verification program improved in terms of performance.

The present invention of claim 7 outputs that the signature data is valid when the verification of the signature data by the signature verification executing means is successful, and outputs the signature data when the verification of the signature data fails. The signature verification apparatus according to any one of claims 1 to 6, further comprising a verification result output means for outputting that the signature data is invalid.

According to the present invention of claim 7, when the verification of the signature data by the signature verification executing means is successful, the signature data is output as valid, while when the verification of the signature data fails, the signature data is signed. Since the verification result output means for outputting that the data is invalid is provided, the user can recognize the verification result of the signature.

The present invention according to claim 8 further comprises verification target input means for inputting signature data, signature target data, signature algorithm identifier, and public key certificate. The signature verification device described in (3) is used as a solution.

According to the present invention of claim 8, the signature can be verified by the signature data, the signature target data, the signature algorithm identifier, and the public key certificate input by the verification target input means.

According to the present invention of claim 9, the address of a verification program holding server holding a signature verification program which is a program in which a public key and a signature verification procedure corresponding to a signature algorithm corresponding to the key algorithm of the public key are described. A public key certificate including a verification program holding server address is issued from a certificate authority, and one or a plurality of signature verification programs corresponds to the signature verification procedure described in the signature verification program. An in-certificate information acquisition step of acquiring the verification program holding server address and the public key from the public key certificate input together with the signature data to be verified when stored with the signature algorithm identifier, and the acquired verification Verification program specified by program holding server address A signature verification program acquisition step of connecting to a holding server and acquiring a signature verification program in which a signature verification procedure corresponding to the signature algorithm specified by the signature algorithm identifier input together with the signature data is acquired, and the acquired signature. The signature verification procedure described in the verification program is applied to the signature target data input together with the signature data, the signature data, and the acquired public key, and the signature data is identified by the signature algorithm identifier. A signature characterized by comprising a signature generation procedure corresponding to an algorithm and a signature verification execution step for verifying that the data is generated by applying a secret key paired with the public key and the signature target data. The verification method is the solution.

According to the present invention of claim 9, an in-certificate information acquiring step of acquiring the verification program holding server address and the public key from the public key certificate input together with the signature data to be verified, and the acquired information. A signature that connects to the verification program holding server specified by the verification program holding server address and obtains the signature verification program in which the signature verification procedure corresponding to the signature algorithm specified by the signature algorithm identifier input with the signature data is described. Verification program acquisition step,
The signature verification procedure described in the acquired signature verification program is applied to the signature target data input together with the signature data, the signature data and the acquired public key, and the signature data is identified by the signature algorithm identifier. A signature verification procedure for verifying that the data is generated by applying the signature generation procedure corresponding to the signature algorithm to the private key paired with the public key and the signature target data. It will be possible to acquire the program when necessary and perform signature verification, and as a result, it will be possible to verify signatures by various signature methods without requiring the preparation of the signature verification program in the signature verification device. You can

In the signature verification program acquisition step of the present invention, the signature verification program authentication information corresponding to the signature verification program is acquired from the verification program holding server, and the signature verification program authentication information is stored in advance. The signature verification program is authenticated using the generated signature verification program verification information, and the signature verification method according to claim 9 is a solution means. The present invention according to claim 11 is characterized in that the server authentication information is acquired from the verification program holding server, and the verification program holding server is authenticated using the server authentication information and the server verification information stored in advance. The signature verification device described in 9 or 10 is used as a solution.

According to the present invention of claim 10, in the signature verification program acquisition step, the signature verification program authentication information corresponding to the signature verification program is acquired from the verification program holding server, and the signature verification program authentication information is stored in advance. Since the signature verification program is authenticated using the signature verification program verification information that has been added, in addition to the above effects,
Prevents the inconvenience that the signature is verified by an unfavorable signature verification program, that is, an incorrect signature verification program or a malicious signature verification program that has been illegally replaced during communication with the server, and enables more secure signature verification. become.

According to the present invention of claim 11, server authentication information is acquired from the verification program holding server, and the verification program holding server is authenticated using the server authentication information and the server verification information stored in advance. The signature verification method according to claim 9 or 10 is a solution.

According to the present invention of claim 11, the server authentication information is acquired from the verification program holding server, and the verification program holding server is authenticated using the server authentication information and the server verification information stored in advance. In addition to the above effects, it is possible to prevent the inconvenience that the signature is verified by an undesired verification program holding server, for example, a signature verification program held by a spoofed server, so that the signature can be verified more safely . According to the twelfth aspect of the present invention, in the signature verification execution step, the signature verification program information including the input signature algorithm identifier is stored in the signature verification program information storage means in which the signature verification program information is stored. If it is determined that it is stored, a signature verification program included in advance in the signature verification program information is acquired from the signature verification program information, and the signature data is acquired by the acquired signature verification program. The signature verification method according to any one of claims 9 to 11 is a solution means.

According to the twelfth aspect of the present invention, in the signature verification execution step, the signature verification program information including the input signature algorithm identifier is stored in the signature verification program information storage means in which the signature verification program information is stored. If it is determined that it is stored, a signature verification program included in advance in the signature verification program information is acquired from the signature verification program information, and signature data is acquired by the acquired signature verification program. In addition to the above effects, the signature can be verified even when the signature verification program cannot be acquired from the verification program holding server. Further, it is possible to reduce the number of times of communication with the verification program holding server and the amount of communication.

According to the present invention of claim 13, signature verification program information for storing a set of a signature verification program acquired from a verification program holding server and a signature algorithm identifier corresponding to the signature verification program as signature verification program information. A signature verifying method according to any one of claims 9 to 12 is a solution means.

According to the thirteenth aspect of the present invention, the signature verification program information for storing the set of the signature verification program acquired from the verification program holding server and the signature algorithm identifier corresponding to the signature verification program as the signature verification program information. Since the registration step is provided, there is no need to reacquire the signature verification program acquired from the verification program holding server in the past.

According to the 14th aspect of the present invention, the signature verification program includes a creation date and time of the signature verification program, and in the signature verification execution step, signature verification program information including the input signature algorithm identifier. From the signature verification program information storage means in which the signature verification program information is stored, and the creation date and time included in the signature verification program of the signature verification program information and the creation included in the signature verification program acquired from the verification program holding server. 14. A signature verification method according to claim 9, wherein the signature data is verified by a signature verification program including a creation date and time of a later date and time.

According to the present invention of claim 14, in the signature verification execution step, the signature verification program information including the inputted signature algorithm identifier is acquired from the signature verification program information storage means in which the signature verification program information is stored. , The signature verification program including the creation date and time included in the signature verification program of the signature verification program information and the newer creation date and time included in the signature verification program acquired from the verification program holding server is used to verify the signature data. , You can verify your signature with the new signature verification program. Therefore, the signature can be verified by the signature verification program improved in terms of performance.

Further, according to the present invention of claim 15, when the verification of the signature data in the signature verification execution step is successful, the signature data is output as valid, while when the verification of the signature data fails. 15. A signature verification method according to claim 9, further comprising: a verification result output step of outputting that the signature data is invalid.

According to the fifteenth aspect of the present invention, when the verification of the signature data in the signature verification execution step is successful, the signature data is output as valid, while when the verification of the signature data fails. Since the signature data output step of outputting that the signature data is invalid is provided, the user can recognize the verification result of the signature.

The present invention of claim 16 further comprises a verification target input step of inputting signature data, signature target data, signature algorithm identifier, and public key certificate. The solution is the signature verification method described in.

According to the sixteenth aspect of the present invention, the signature can be verified with the signature data, the signature target data, the signature algorithm identifier, and the public key certificate input in the verification target input step.

Further, the present invention of claim 17 provides a computer program for executing the signature verification method according to any one of claims 9 to 16 as a solving means.

According to the seventeenth aspect of the present invention, a computer program that enables signature verification by various signature methods can be distributed through a communication line or the like without requiring preparation of the signature verification program. .

Further, the present invention of claim 18 provides a solving means by a recording medium recording a computer program for executing the signature verifying method according to any one of claims 9 to 16.

According to the eighteenth aspect of the present invention, there is provided a recording medium line or the like which can optically read a computer program which enables verification of signatures by various signature systems without requiring preparation of the signature verification program. Can be distributed through.

Further, the present invention of claim 19 is a verification program holding server for holding a signature verification program which is a program in which a public key and a signature verification procedure corresponding to a signature algorithm corresponding to the key algorithm of the public key are described. A certificate authority that issues a public key certificate that includes the verification program holding server address that is the address of

According to the present invention of claim 19, a verification program holding server holding a signature verification program which is a program in which a public key and a signature verification procedure corresponding to a signature algorithm corresponding to the key algorithm of the public key are described. Since it is a certificate authority that issues a public key certificate including the verification program holding server address that is the address of the certificate authority, the signature verification device can verify the signature with the public key certificate issued by this certificate authority.

Further, the present invention of claim 20 is a verification program holding server which holds a signature verification program which is a program in which a public key and a signature verification procedure corresponding to a signature algorithm corresponding to the key algorithm of the public key are described. A public key certificate including a verification program holding server address that is the address of the public key certificate is issued as a solving means.

According to the twentieth aspect of the present invention, a verification program holding server holding a signature verification program, which is a program in which a public key and a signature verification procedure corresponding to a signature algorithm corresponding to the key algorithm of the public key are described. Since the public key certificate including the verification program holding server address, which is the address of the public key certificate, is issued, the signature verification device can verify the signature with the issued public key certificate.

[0053]

BEST MODE FOR CARRYING OUT THE INVENTION Embodiments of the present invention will be described in detail below with reference to the drawings.

FIG. 1 shows a signature verification device 1 embodying the present invention.
0 shows a functional configuration example of 0, and FIG. 2 shows a configuration example of a signature verification system to which the signature verification device 10 is applied.

The signature verification system shown in FIG. 2 holds one or more signature verification devices 10 for performing signature verification, and one or more verifications for holding one or more signature verification programs used for signature verification in the signature verification device 10. The program holding server 20. The signature verification device 10 and the verification program holding server 20 are connected to the communication network 3
It is connected by 0 and can communicate.

As shown in FIG. 1, the signature verification apparatus 10
The verification target input means 11, the certificate information acquisition means 12, the verification program acquisition means 13, the signature verification execution means 14, and the verification result output means 15 are provided.

The verification target input means 11 has a function of receiving as input the signature target data, the signature data, the signature algorithm identifier, and the public key certificate which are the verification targets.

The in-certificate information acquisition means 12 has a function of extracting the verification program holding server address and the public key from the public key certificate input to the verification target input means 11.

The verification program acquisition means 13 connects to the server specified by the verification program holding server address acquired by the in-certificate information acquisition means 12 for communication, and uses the signature algorithm identifier acquired by the verification target input means 11 as the signature algorithm identifier. It has a function of requesting and acquiring a corresponding signature verification program.

The signature verification execution means 14 verifies the signature target data and signature data acquired by the verification target input means 11 and the public key acquired by the in-certificate information acquisition means 12 with the verification program acquisition means 13 The signature verification procedure described in the signature verification program acquired by the above is applied, and the signature generation procedure corresponding to the signature algorithm whose signature data is identified by the signature algorithm identifier acquired by the verification target input means 11 is paired with the public key. It has a function of verifying that the signature data is generated by applying it to the private key and the signature target data.

Signature verification program and signature verification execution means 1
4 can be configured by, for example, a program in Java language, or a script program in script language such as Perl and its execution environment.

The verification result output means 15 outputs that the signature data is valid when the verification by the signature verification executing means 14 is successful, while the signature data is invalid if the verification fails. Has a function to output.

FIG. 3 shows a configuration example of the public key certificate 100 issued by the certificate authority.

The public key certificate 100 is composed of a signature target section 101 and a signature section 102, and further the signature target section 101.
Is the certification authority identification information 103 that is the information that identifies the certification authority that issued the public key certificate 100, the owner identification information 104 that identifies the owner of the public key certificate, and the public key information 1
05 and the verification program holding server address 106 and the like. The public key information 105 is the public key certificate 1
The owner of 00 secretly holds a public key 108 that makes a pair with a private key, and a key algorithm identifier 107 that identifies the key algorithm of the public key 108. Since the certificate authority of the present invention issues a public key certificate having this configuration, the signature verification device 10 can perform signature verification.

Verification program holding server address 106
Is the address of the verification program holding server 20 that holds one or more signature verification programs in which signature verification procedures corresponding to one or more signature algorithms using the key algorithm of the public key 108 are described.

The signature unit 102 is signature data generated for the signature target unit 101 using a private key secretly held by the certificate authority that issued the public key certificate.

By securely obtaining the public key of the certificate authority and verifying the signature of the public key certificate 100 using this public key, the private key paired with the public key 108 included in the public key certificate 100. It can be confirmed that the owner of is identified by the owner identification information 104.

FIG. 4 shows the specific contents of the public key certificate issued by the certificate authority.

For example, the public key certificate 110 is composed of a signature target section 111 and a signature section 112.
Reference numeral 11 denotes the certificate authority identification information 113 that is “C = JP, O = xyz, CN = CA”, and “C = JP, O = abc, CN =”.
User identification information 114 "User1" and a key algorithm identifier 117 corresponding to the key algorithm "RSA"
And public key information 115 consisting of the public key 118 "00A 9C D8 ... 37199" and "KENSHO
1. CO. It is composed of a verification program holding server address 116 and the like called "JP".

FIG. 5 shows the structure of information to be verified by the signature verification apparatus 10. The verification target information includes the signature algorithm identifier 200, the signature target data 201, and the signature data 2
02 and.

FIG. 6 shows the specific contents of the information to be verified by the signature verification device 10.

For example, each of the verification target data shown in FIG. 5 has the signature algorithm "sha1 with Rsa".
Signature algorithm identifier 210 that is information for identifying "Encryption" and signature target data 2 that is text data "The contract document A and B are as follows ..."
11 and the signature data 212, which is hexadecimal data “9F 46 ...”.

FIG. 7 shows the functional configuration of the verification program holding server 20.

The verification program holding server 20 includes a verification program providing means 21 and a verification program information holding means 2.
2 and.

The verification program holding server 20 has a verification program holding server address 23 (specifically, "KENSHO1.CO.JP") which is an address that can uniquely identify the server 20 on the network. It is possible to connect and communicate via the communication network 30 by the address.

The verification program information holding means 22 is information for identifying the signature verification program 3 which is a program in which the signature verification procedure is described and the signature algorithm corresponding to the signature verification procedure described in the signature verification program 3. One or more pieces of verification program information 1 including the signature algorithm identifier 2 are held in advance.

The verification program providing means 21 sends the signature verification program corresponding to the signature algorithm identifier designated by the signature verification device 10 to the signature verification device 10 connected via the communication network 30, and the verification program information holding means 22. And has a function of transmitting the signature to the signature verification apparatus 10.

FIG. 8 shows a specific example of the verification program information held by the verification program information holding means 22 of the verification program holding server 20.

As the verification program information corresponding to the key algorithm "RSA", the signature algorithm "sha1" is used.
Verification program information 1A for "with Rsa Encryption" and signature algorithm "md5"
The verification program information 1B for “with Rsa Encryption” is included.

Similarly, as verification program information corresponding to the key algorithm "ESSIGN", verification program information 1C for the signature algorithm "sha1 with RSIGN" and "md5 with ESIGN".
And verification program information 1D for the signature algorithm “sha1 with DSA” as verification program information corresponding to the key algorithm “DSA”.

FIG. 9 shows a signature verification method executed by the signature verification apparatus 10.

In step S1, the verification target input means 11
Acquires the signature target data 201, the signature data 202, the signature algorithm identifier 200, and the public key certificate 100 as inputs. In the subsequent step S2, the in-certificate information acquisition means 12 acquires the verification program holding server address 106 and the public key 108 from the public key certificate 100.
In the following step S3, the verification program acquisition means 13
Connects to the verification program holding server 20 specified by the verification program holding server address 106 acquired in step S2, transmits the signature algorithm identifier 200 acquired in step S1, and verifies this verification program holding server 20. From the program providing unit 21, the signature verification program 3 in which the signature verification procedure corresponding to the signature algorithm specified by the signature algorithm identifier 200 is described is acquired. In the following step S4,
The signature verification execution means 14 applies the signature verification procedure described in the signature verification program 3 acquired in step S3 to the signature target data 201, the signature data 202, and the public key 108, and the signature data 202 is the signature algorithm identifier. The signature generation procedure corresponding to the signature algorithm specified by 200 is applied to the private key paired with the public key 108 and the signature target data 201 to verify that the signature data is generated. In the subsequent step S5, the verification result output means 15 determines whether or not the verification in step S4 has succeeded, and if it determines that the verification has succeeded, it outputs that the signature is valid (step S6-1). On the other hand, if it is determined that the signature has failed, the signature is output as invalid (step S6-2), and the process ends. The output destination is, for example, a printing device (printer) or a display device (display).
And so on.

Step S1 is a verification target input step, step S2 is a certificate information acquisition step, step S3 is a verification program acquisition step, step S4 is a signature verification execution step, steps S5, S6-1 and S.
6-2 corresponds to the verification result output step.

Hereinafter, the signature verification apparatus 10 in the case where the signature verification apparatus 10 performs signature verification on the signature algorithm 210, the signature target data 211, the signature data 212 shown in FIG. 6 and the public key certificate 110 shown in FIG. The operation will be described in detail.

FIG. 10 shows a specific signature verification method executed by the signature verification apparatus 10.

The verification target input means 11 receives, for example, the signature algorithm identifier 210, the signature target data 211, the signature data 212, and the public key certificate 110 as inputs (step S1), and the in-certificate information acquisition means 12 publishes them. The verification program holding server address 116 and the public key 118 are acquired from the key certificate 110 (step S2),
The verification program acquisition means 13 connects to the verification program holding server 20 specified by the verification program holding server address 116, and the signature algorithm identifier 21
0 is transmitted, the signature verification program 3A corresponding to this signature algorithm identifier 210 (the signature algorithm identifier 2 in the verification program holding server 20) is acquired (step S3), and the signature verification execution means 14 causes the signature target data 2
11, the signature data 212 and the public key 118 are verified by applying the signature generation procedure described in the signature verification program 3A (step S4), and the verification result output means 15
It is determined whether the signature verification is successful (step S5),
If it succeeds, the signature data is output as valid (step S6-1), and if it fails, the signature data is output as invalid (step S6-2), and the process ends.

As described above, in the present embodiment, the signature verification device 10 corresponds to the signature verification device of the present invention and executes the signature verification method of the present invention.

That is, the signature verification apparatus 10 is the address of the server 20 that holds the signature verification program, which is the program in which the public key and the signature verification procedure corresponding to the signature algorithm corresponding to the key algorithm of the public key are described. A public key certificate including a verification program holding server address is issued from the certificate authority, and one or a plurality of signature verification programs is provided in the verification program holding server 20 in accordance with the signature verification procedure described in the signature verification program. It is used when it is stored together with the identifier, and the in-certificate information acquisition means 12 acquires the verification program holding server address and the public key from the public key certificate input together with the signature data to be verified.
And a signature with a signature verification procedure corresponding to the signature algorithm specified by the signature algorithm identifier input together with the signature data, by connecting to the verification program holding server 20 specified by the acquired verification program holding server address. The signature verification program acquisition unit 13 for acquiring the verification program and the signature verification procedure described in the acquired signature verification program are applied to the signature target data input together with the signature data, the signature data, and the acquired public key. Then, the signature data is data generated by applying the signature generation procedure corresponding to the signature algorithm specified by the signature algorithm identifier to the private key paired with the public key and the signature target data. A signature verification execution unit 14 for verifying the The in-certificate information acquisition step (S2) in which the means 12 acquires the verification program holding server address and the public key from the public key certificate input together with the signature data to be verified, and the verification program acquisition means 13 are acquired. Verification program holding server Signature verification that connects to the verification program holding server specified by the address and obtains the signature verification program that describes the signature verification procedure corresponding to the signature algorithm specified by the signature algorithm identifier that was input with the signature data. The program acquisition step (S3) and the signature verification procedure described by the signature verification execution means 14 in the acquired signature verification program are applied to the signature target data input together with the signature data, the signature data and the acquired public key. The signature data is applied to the signature data. Signature verification procedure corresponding to the signature algorithm specified by the signature identifier is applied to the private key paired with the public key and the signature target data to verify that the data is generated (S4). ) And the signature verification method is executed, it becomes possible to obtain the signature verification program and perform the signature verification when necessary, and therefore, the preparation of the signature verification program in the signature verification device is unnecessary. At the same time, it is possible to verify the signature by various signature methods.

When the signature verification execution means 14 succeeds in verifying the signature data, it outputs that the signature data is valid, while when the verification of the signature data fails, it outputs that the signature data is invalid. Verification result output means 15
With this, the user can recognize the verification result of the signature.

Further, since the verification target input means 11 for inputting the signature data, the signature target data, the signature algorithm identifier and the public key certificate is provided, the signature data, the signature target data and the signature algorithm input by the verification target input means 11 are provided. The signature can be verified with the identifier and the public key certificate.

Further, the above-described certificate authority is a verification program holding server that holds a signature verification program that is a program in which a public key and a signature verification procedure corresponding to a signature algorithm corresponding to the key algorithm of the public key are described. A certificate authority that issues a public key certificate including a verification program holding server address that is an address, and is a program that describes a signature verification procedure corresponding to a public key and a signature algorithm corresponding to the key algorithm of the public key. Since the public key certificate including the verification program holding server address which is the address of the verification program holding server holding a certain signature verification program is issued, the signature verification device verifies the signature with the public key certificate issued by this certificate authority. become able to.

Next, an embodiment applying the above-mentioned embodiment will be described. It should be noted that illustration of new components will be omitted.

The signature verification apparatus 10 is provided with a signature verification program verification information storage means 16 for storing the signature verification program verification information used for verifying the signature verification program authentication information corresponding to the signature verification program, and this signature verification The signature verification program verification information is stored in the program verification information storage means 16, and the signature verification program acquisition means 13 acquires the signature verification program authentication information corresponding to the signature verification program from the verification program holding server 20, and the signature verification program authentication information is acquired. The signature verification program may be authenticated using the program verification information and the signature verification program verification information stored in the signature verification program verification information storage unit 16.

According to the signature verification apparatus 10 of this embodiment, the signature is verified by an unfavorable signature verification program, that is, an incorrect signature verification program, or a malicious signature verification program that is illegally replaced during communication with the server. It is possible to prevent the inconvenience of being performed and to perform signature verification more safely.

Further, the signature verification apparatus 10 is provided with a server verification information storage means 17 for storing server verification information used for authenticating the server authentication information acquired from the verification program holding server 20, and this server verification information. The server verification information is stored in the storage unit 17, the server authentication information is acquired from the verification program holding server 20, and the verification program is held by using the server authentication information and the server verification information stored in the server verification information storage unit 17. The server 20 may be authenticated.

According to the signature verification apparatus 10 of this embodiment, an undesired verification program holding server, for example,
It is possible to prevent the inconvenience that the signature is verified by the signature verification program held by the spoofed server or the like, and perform the signature verification more safely.

Further, the signature verification program information storage in which the signature verification program information, which is a set of the signature verification program and the signature algorithm identifier corresponding to the signature verification procedure described in the signature verification program, is stored in the signature verification apparatus 10. The signature verification program information storage means 18 stores the signature verification program information, and the signature verification execution means 14 stores the signature verification program information including the input signature algorithm identifier in the signature verification program information storage means. It is determined whether the signature verification program is stored in No. 18, and if it is determined that the signature verification program is stored, the signature verification program is acquired from the signature verification program information and the signature data is verified by the acquired signature verification program. Good.

According to the signature verification apparatus 10 of this embodiment, the signature can be verified even if the signature verification program cannot be obtained from the verification program holding server. Further, it is possible to reduce the number of times of communication with the verification program holding server and the amount of communication.

Further, the signature verification program information storage means 18 is provided to store the signature verification program information as described above, and the signature verification program obtained from the verification program holding server 20 and the signature corresponding to the signature verification program. You may make it provide the signature verification program information registration means 19 which makes the signature verification program information storage means 18 memorize | store the combination with an algorithm identifier as signature verification program information.

According to the signature verification apparatus 10 of this embodiment, there is no need to reacquire the signature verification program previously acquired from the verification program holding server.

Further, the signature verification program includes the creation date and time of the signature verification program, and the signature verification device 10
In addition, the signature verification program information storage means 18 is provided to store the signature verification program information as described above, and the signature verification execution means 14 sends the signature verification program information including the input signature algorithm identifier to the signature verification program information. A signature verification program including the creation date and time included in the signature verification program of the signature verification program information acquired from the storage unit 18 and the creation date and time included in the signature verification program acquired from the verification program holding server 20 whichever is newer. The signature data may be verified with.

According to the signature verification apparatus 10 of this embodiment, it is possible to verify the signature with a new signature verification program. Therefore, the signature can be verified by the signature verification program improved in terms of performance.

The above-described processing is executed by the signature verification device 1
The computer program executed by the computer 0 or the like is recorded on a computer-readable recording medium such as a semiconductor memory, a magnetic disk, an optical disk, a magneto-optical disk, or a magnetic tape, or transmitted via a communication network such as the Internet, and is widely distributed. Can be made.

[0104]

As described above, according to the present invention,
The verification program holding server address and the public key are acquired from the public key certificate input together with the signature data to be verified, and the verification program holding server specified by the acquired verification program holding server address is connected to obtain the signature data. Acquire a signature verification program that describes the signature verification procedure corresponding to the signature algorithm specified by the signature algorithm identifier input with
The signature verification procedure described in the acquired signature verification program is applied to the signature target data input together with the signature data, the signature data and the acquired public key, and the signature data is identified by the signature algorithm identifier. The signature verification procedure corresponding to the signature algorithm is applied to the private key paired with the public key and the signature target data to verify that the data is generated. As a result, the signature can be acquired and the signature can be verified. As a result, it is possible to verify the signature by various signature methods without requiring the preparation of the signature verification program in the signature verification apparatus.

[Brief description of drawings]

FIG. 1 is a diagram showing a functional configuration example of a signature verification device embodying the present invention.

FIG. 2 is a diagram showing a configuration example of a signature verification system to which a signature verification device is applied.

FIG. 3 is a diagram showing a configuration example of a public key certificate issued by a certificate authority.

FIG. 4 is a diagram showing specific contents of a public key certificate issued by a certificate authority.

FIG. 5 is a diagram showing a configuration of information to be verified by the signature verification device.

FIG. 6 is a diagram showing specific contents of information to be verified by the signature verification device.

7 is a diagram showing a functional configuration of a verification program holding server 20. FIG.

FIG. 8 is a diagram showing a specific example of verification program information.

9 is a diagram showing a signature verification method executed by the signature verification device 10. FIG.

10 is a diagram showing a specific signature verification method executed by the signature verification apparatus 10. FIG.

[Explanation of symbols]

1, 1A, 1B, 1C, 1D, 1E Verification program information 2, 2A, 2B, 2C, 2D, 2E Signature algorithm identifier 3, 3A, 3B, 3C, 3D, 3E Signature verification program 10 Signature verification device 11 Verification target input Means 12 Certificate information acquisition means 13 Verification program acquisition means 14 Signature verification execution means 15 Verification result output means 16 Signature verification program verification information storage means 17 Server verification information storage means 18 Signature verification program information storage means 19 Signature verification program information registration Means 20 Verification program holding server 21 Verification program providing means 22 Verification program information holding means 30 Communication networks 100, 110 Public key certificates 101, 111 Signature target parts 102, 112 Signature parts 103, 113 Certification authority identification information 104, 114 Owner Identification information 105,1 15 public key information 106, 116 verification program holding server address 107, 117 key algorithm identifier 108, 118 public key 200, 210 signature algorithm identifier 201, 211 signature target data 202, 212 signature data

   ─────────────────────────────────────────────────── ─── Continued front page    (72) Inventor Yoshiaki Nakajima             2-3-1, Otemachi, Chiyoda-ku, Tokyo             Inside Telegraph and Telephone Corporation F-term (reference) 5J104 AA09 LA03 LA06

Claims (20)

[Claims] 1. A verification program holding server which is an address of a verification program holding server which holds a signature verification program which is a program in which a public key and a signature verification procedure corresponding to a signature algorithm corresponding to the key algorithm of the public key are described. A public key certificate including an address is issued from a certificate authority, and one or more signature verification programs are stored in the verification program holding server together with a signature algorithm identifier corresponding to the signature verification procedure described in the signature verification program. In this case, the in-certificate information acquisition means for acquiring the verification program holding server address and the public key from the public key certificate input together with the signature data to be verified, and the acquired verification program holding server address Connected to the verification program holding server Signature verification program acquisition means for acquiring a signature verification program in which a signature verification procedure corresponding to the signature algorithm specified by the signature algorithm identifier input together with the signature data, and a signature described in the acquired signature verification program A verification procedure is applied to the signature target data input together with the signature data, the signature data, and the acquired public key to generate a signature corresponding to the signature algorithm specified by the signature algorithm identifier. A signature verification apparatus comprising: a signature verification execution unit that verifies that the data is generated by applying a procedure to a private key paired with the public key and the signature target data. 2. A signature verification program verification information storage unit for storing the signature verification program verification information used for verifying the signature verification program authentication information corresponding to the signature verification program, wherein the signature verification program acquisition unit is a verification program. The signature verification program authentication information corresponding to the signature verification program is acquired from the holding server, and the signature verification program authentication information and the signature verification program verification information stored in the signature verification program authentication information storage means are used to execute the signature verification program. The signature verification apparatus according to claim 1, wherein authentication is performed. 3. A server verification information storage means for storing server verification information used for authenticating the server authentication information acquired from the verification program holding server, the server authentication information acquiring means acquiring the server authentication information from the verification program holding server. 3. The signature verification apparatus according to claim 1, wherein the verification program holding server is authenticated using the authentication information and the server verification information stored in the server verification information storage means. 4. A signature verification program information storage unit for storing signature verification program information, which is a set of a signature verification program and a signature algorithm identifier corresponding to a signature verification procedure described in the signature verification program, and the signature. The verification execution means determines whether or not the signature verification program information including the input signature algorithm identifier is stored in the signature verification program information storage means, and if it is determined to be stored, the signature verification program information is verified. 4. The signature verification apparatus according to claim 1, wherein the signature verification program is acquired from the program information, and the signature data is verified by the acquired signature verification program. 5. A signature verification program information storage unit for storing signature verification program information, which is a set of a signature verification program and a signature algorithm identifier corresponding to a signature verification procedure described in the signature verification program, and a verification program storage unit. A signature verification program information registration means for storing a set of a signature verification program acquired from a server and a signature algorithm identifier corresponding to the signature verification program as signature verification program information in the signature verification program information storage means. The signature verification device according to any one of claims 1 to 4. 6. The signature verification program includes a creation date and time of the signature verification program, and is a pair of a signature verification program and a signature algorithm identifier corresponding to a signature verification procedure described in the signature verification program. Signature verification program information storage means for storing program information, wherein the signature verification execution means acquires signature verification program information including the input signature algorithm identifier from the signature verification program information storage means, and verifies the signature. The signature data is verified by a signature verification program that includes the creation date and time included in the signature verification program of the program information and the newer creation date and time included in the signature verification program acquired from the verification program holding server. The signature verification device according to claim 1. 7. The signature data is output as valid when the verification of the signature data by the signature verification executing unit is successful, while the signature data is output as invalid when the verification of the signature data fails. 7. The signature verification device according to claim 1, further comprising: a verification result output unit. 8. The signature verification apparatus according to claim 1, further comprising verification target input means for inputting the signature data, the signature target data, the signature algorithm identifier, and the public key certificate. 9. A verification program holding server which is an address of a verification program holding server which holds a signature verification program which is a program in which a public key and a signature verification procedure corresponding to a signature algorithm corresponding to the key algorithm of the public key are described. A public key certificate including an address is issued from a certificate authority, and one or more signature verification programs are stored in the verification program holding server together with a signature algorithm identifier corresponding to the signature verification procedure described in the signature verification program. The certificate information acquisition step of acquiring the verification program holding server address and the public key from the public key certificate input together with the signature data to be verified, and the verification program holding server address acquired. Connected to the verification program holding server A signature verification program acquisition step of acquiring a signature verification program in which a signature verification procedure corresponding to a signature algorithm specified by the signature algorithm identifier input together with the signature data is described; A signature verification procedure is applied to the signature target data input together with the signature data, the signature data, and the acquired public key, and the signature data corresponds to the signature algorithm specified by the signature algorithm identifier. A signature verification method, comprising: a signature verification execution step of verifying that the data is generated by applying a generation procedure to a private key paired with the public key and the signature target data. 10. The signature verification program acquisition step acquires signature verification program authentication information corresponding to the signature verification program from the verification program holding server, and the signature verification program authentication information and the signature verification program verification information stored in advance. 10. The signature verification method according to claim 9, wherein the signature verification program is authenticated using. 11. The verification program holding server is obtained by acquiring server authentication information from the verification program holding server and using the server authentication information and the server verification information stored in advance. Signature verification method described. 12. The signature verification execution step determines whether or not the signature verification program information including the input signature algorithm identifier is stored in a signature verification program information storage unit in which the signature verification program information is stored. When it is determined that the signature verification program is stored, the signature verification program included in the signature verification program information is acquired from the signature verification program information, and the signature data is verified by the acquired signature verification program. The signature verification method according to any one of claims 9 to 11. 13. A signature verification program information registration step for storing a set of a signature verification program acquired from a verification program holding server and a signature algorithm identifier corresponding to the signature verification program as signature verification program information. The signature verification method according to any one of claims 9 to 12. 14. The signature verification program includes a creation date and time of the signature verification program, and in the signature verification execution step, signature verification program information including the input signature algorithm identifier is stored in the signature verification program information. The created date and time acquired from the signature verification program information storage means obtained and stored in the signature verification program of the signature verification program information and the creation date and time included in the signature verification program acquired from the verification program holding server 14. The signature verification method according to claim 9, further comprising verifying the signature data with a signature verification program including the signature verification program. 15. The signature data is output as valid when the verification of the signature data in the signature verification execution step is successful, while the signature data is invalid when the verification of the signature data fails. 15. The signature verification method according to claim 9, further comprising a verification result output step of outputting. 16. The method according to claim 9, further comprising a verification target input step for inputting the signature data, the signature target data, the signature algorithm identifier, and the public key certificate.
5. The signature verification method according to any one of 5 above. 17. A computer program for executing the signature verification method according to claim 9. Description: 18. A recording medium on which a computer program for executing the signature verification method according to claim 9 is recorded. 19. A verification program holding server which is an address of a verification program holding server which holds a signature verification program which is a program in which a public key and a signature verification procedure corresponding to a signature algorithm corresponding to the key algorithm of the public key are described. A certificate authority which issues a public key certificate including an address. 20. A verification program holding server which is an address of a verification program holding server which holds a signature verification program which is a program in which a public key and a signature verification procedure corresponding to a signature algorithm corresponding to the key algorithm of the public key are described. A public key certificate issuing method, characterized in that a public key certificate including an address is issued.