JP2005267520A - Certificate mutual authentication system and certificate mutual authentication method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To enable mutual authentication of a plurality of certificates by a single communication path establishment process, to suppress an increase in time and computer resources for establishing a communication path, and to suppress an increase in communication path management cost. Provide certificate mutual authentication system.
A client 101 serving as a communication path establishment requester transmits a communication path establishment request to a server 201 and receives a plurality of types of certificates from the server. The plurality of certificates received from the server 201 are authenticated, and a plurality of types of client certificates are transmitted to the server 201. The server 201 authenticates a plurality of certificates received from the client 101 and transmits a communication path establishment notification to the client 101.
[Selection] Figure 1

Description

  The present invention relates to a certificate mutual authentication system and a certificate mutual authentication method that enable mutual authentication of a plurality of certificates in the course of a single communication path establishment process.

  FIG. 6 shows a conventional client / server authentication procedure. In FIG. 6, first, the client 101a transmits a communication path establishment request to the server (one application executed in the server) 201a (step S201). The server 201a responds to the request and sends one certificate chain (a series of information necessary for an authentication process including a certificate and encryption key information). DistinguishedName) "is sent to the client 101a (step S202). In the present invention, the certificate chain is also simply referred to as “certificate”.

  The client 101a receives one server-side certificate from the server 201a, confirms (verifies) the received certificate, and receives one client-side certificate authenticated from the certificate authority in the DistinguishedName list. (Step S203).

  The server 201a confirms (authenticates) one client-side certificate received from the client 101a. When the authentication is normally performed, the server 201a transmits a communication path establishment end notification to the client 101a ( Step S204).

  Thereafter, data communication is performed between the client 101a and the server 201a (step S205). Note that if the client 101a cannot present the certificate requested from the server 201a, or if the verification of each other's certificate fails, the communication path is not established.

  By the way, when a plurality of different applications (for example, an English conversation school, an English conversation teaching material ship site, a book shop site, etc.) are operated in one server 201a, when accessing these multiple applications, In the conventional method shown in FIG. 6, a secure communication path is established between the client 101a and the server 201a that is mutually authenticated with one certificate for each application. When accessing a plurality of applications, it is necessary to establish a plurality of communication paths by repeating this a plurality of times. For this reason, a processing time for performing the communication path establishment process a plurality of times is required, and a computer resource for that is required.

  Further, since there are a plurality of communication paths, the management cost of the communication paths is incurred. The management cost includes computer resources necessary for communication channel maintenance and communication, processing necessary for changing the status such as communication channel disconnection and reconnection, and the like.

  Therefore, when different applications (for example, sites such as English conversation school, teaching material ship, book shop, etc.) are operated in one server, multiple certificates can be authenticated at one time and one communication path can be used. It was desired to provide a system that can establish mutual authentication.

  At present, a TLS (Transport Layer Security) protocol is generally widely used for electronic approval of electronic commerce using a Web browser. TLS is a protocol that encrypts and transmits information on the Internet. TLS uses public key encryption, private key encryption, and digital certificates, and can prevent data eavesdropping, falsification, and impersonation. RFC-2246 It is standardized by IETF (for example, see Non-Patent Document 1).

  In an application using the TLS protocol, if an attempt is made to authenticate a plurality of certificates at the same time, there will be the following problem and the operation will not be performed.

  In the TLS protocol, the protocol of the communication content is clearly defined as a specification. Therefore, when a data format different from the specification is transmitted, a communication protocol error occurs and the communication path is not established. Therefore, since the transmission of a plurality of certificates is in a data format not defined by the TLS protocol, a communication protocol error occurs and a communication path is not established.

  In addition, there is a case where it is necessary to establish a secure communication path that enables authentication using a plurality of certificates between two or more computers (hereinafter referred to as peers) connected via a network. For example, this is a case where applications that require authentication of different certificates are operating on different peers on a plurality of peers connected in a peer-to-peer manner as follows.

  It is assumed that an educational application is running on via A and a business application is running on peer B. Users of vias A and B use educational applications and business applications simultaneously.

  In this case, in the peer A education application, peer A and peer B perform mutual authentication based on the certificate issued by via A, and in the business application of peer B, peer A and peer B based on the certificate issued by via B. Performs mutual authentication.

In such a case, when describing a server program using the TLS protocol, it is necessary to establish a communication path for each application that requires authentication, and the processing takes time. Description of a program for managing the established communication path (memory management for storing the communication path, reconnection processing, etc.) becomes complicated.
The TLS Protocol Version 1.0 (http://www.ietf.org/rfc/rfc2246.txt: as of February 26, 2004)

  The present invention has been made to solve such a problem, and an object of the present invention is to enable mutual authentication of a plurality of certificates by a single communication path establishment process, and to establish time and a computer for establishing a communication path. An object of the present invention is to provide a certificate mutual authentication system and a certificate mutual authentication method capable of suppressing an increase in resources and suppressing an increase in communication path management cost.

The present invention has been made to solve the above problems, and the certificate mutual authentication system of the present invention includes a client that makes a communication path establishment request and a server that responds to the communication path establishment request from the client. A certificate mutual authentication system for performing mutual authentication of a plurality of certificates, wherein the client receives communication path establishment request means for transmitting a communication path establishment request to the server, and receives a plurality of certificates from the server. Server certificate receiving means, server certificate authentication means for authenticating a plurality of certificates received from the server, and transmitting a plurality of certificates to the server after authenticating the plurality of certificates received from the server A client certificate transmission means for receiving a communication path establishment notification from the server when the certificate transmitted from the client is authenticated by the server. Path establishment notification receiving means, and the server includes a communication path establishment request receiving means for receiving a communication path establishment request from the client, a server certificate transmission means for transmitting a plurality of certificates to the client, A client certificate receiving means for receiving a plurality of certificates from the client; a client certificate authenticating means for authenticating the plurality of certificates received from the client; and a communication channel after authenticating the plurality of certificates received from the client. And a communication path establishment notification transmitting means for transmitting the establishment notification to the client.
As a result, mutual authentication of a plurality of certificates can be performed by a single communication path establishment process, so that time and computer resources for establishing a communication path can be reduced as compared with the conventional communication path establishment method. In addition, since mutual authentication of a plurality of certificates can be performed with one communication path, the management cost of the communication path can be reduced as compared with the conventional case. The management cost includes computer resources necessary for communication channel maintenance and communication, processing necessary for changing the status such as communication channel disconnection and reconnection, and the like.

In the certificate mutual authentication system of the present invention, the client includes client certificate selection means for selecting a certificate to be transmitted according to a communication path establishment request destination, and the server includes a communication path establishment request. Server certificate selecting means for selecting a certificate to be transmitted according to the source is provided.
Accordingly, it is possible to prevent the client information in the certificate from being unnecessarily grasped using the certificate transmitted from the client side as a clue, and thus it is possible to protect the privacy of the client. Further, since it is possible to prevent the server information in the certificate from being unnecessarily grasped using the certificate transmitted from the server side as a clue, the privacy of the server can be protected. In addition, the time required for certificate confirmation can be shortened by not transmitting a certificate unnecessary for session establishment.

The certificate mutual authentication method of the present invention is a certificate mutual authentication method in which a plurality of certificates are mutually authenticated by a client that makes a communication path establishment request and a server that responds to the communication path establishment request from the client. A communication channel establishment request procedure for transmitting a communication channel establishment request to the server by the client; a server certificate reception procedure for receiving a plurality of certificates from the server; and a plurality of certificates received from the server. A server certificate authentication procedure for authenticating a certificate, a client certificate transmission procedure for transmitting a plurality of certificates to the server after authenticating a plurality of certificates received from the server, and a certificate transmitted from a client When authenticated by the server, a communication path establishment notification receiving procedure for receiving a communication path establishment notification from the server is performed. A communication channel establishment request reception procedure for receiving a communication channel establishment request from a client, a server certificate transmission procedure for transmitting a plurality of certificates to the client, and a client certificate reception procedure for receiving a plurality of certificates from the client; A client certificate authentication procedure for authenticating a plurality of certificates received from the client, and a communication channel establishment notification transmission procedure for transmitting a communication channel establishment notification to the client after authenticating the plurality of certificates received from the client. It is performed.
As a result, mutual authentication of a plurality of certificates can be performed by a single communication path establishment process, so that time and computer resources for establishing a communication path can be reduced as compared with the conventional communication path establishment method. In addition, since mutual authentication of a plurality of certificates can be performed with one communication path, the management cost of the communication path can be reduced as compared with the conventional case. The management cost includes computer resources necessary for communication channel maintenance and communication, processing necessary for changing the status such as communication channel disconnection and reconnection, and the like.

In the certificate mutual authentication system of the present invention, a client as a communication channel establishment requester transmits a communication channel establishment request to the server and receives a plurality of certificates from the server. Then, the plurality of certificates received from the server are authenticated, and a plurality of types of client certificates are transmitted to the server. The server authenticates a plurality of certificates received from the client and transmits a communication path establishment notification to the client.
As a result, mutual authentication of a plurality of certificates can be performed by a single communication path establishment process, so that time and computer resources for establishing a communication path can be reduced as compared with conventional communication path establishment means. In addition, since mutual authentication of a plurality of certificates can be performed with one communication path, the management cost of the communication path can be reduced as compared with the conventional case. The management cost includes computer resources necessary for communication channel maintenance and communication, processing necessary for changing the status such as communication channel disconnection and reconnection, and the like.

In the certificate mutual authentication system of the present invention, the client selects the certificate of the client to be transmitted according to the communication path establishment request destination. Further, the server selects a certificate to be transmitted according to the communication path establishment request source.
Accordingly, it is possible to prevent the client information in the certificate from being unnecessarily grasped using the certificate transmitted from the client side as a clue, and thus it is possible to protect the privacy of the client. Further, since it is possible to prevent the server information in the certificate from being unnecessarily grasped using the certificate transmitted from the server side as a clue, the privacy of the server can be protected. In addition, the time required for certificate confirmation can be shortened by not transmitting a certificate unnecessary for session establishment.

In the certificate mutual authentication method of the present invention, a client as a communication channel establishment requester transmits a communication channel establishment request to the server and receives a plurality of certificates from the server. Then, the plurality of certificates received from the server are authenticated, and a plurality of types of client certificates are transmitted to the server. The server authenticates a plurality of certificates received from the client and transmits a communication path establishment notification to the client.
As a result, mutual authentication of a plurality of certificates can be performed by a single communication path establishment process, so that time and computer resources for establishing a communication path can be reduced as compared with conventional communication path establishment means. In addition, since mutual authentication of a plurality of certificates can be performed with one communication path, the management cost of the communication path can be reduced as compared with the conventional case. The management cost includes computer resources necessary for communication channel maintenance and communication, processing necessary for changing the status such as communication channel disconnection and reconnection, and the like.

Next, the best mode for carrying out the present invention will be described with reference to the drawings.
FIG. 1 is a diagram for explaining a certificate mutual authentication system of the present invention. In FIG. 1, a client 101 that is a communication path establishment requester and a server 201 that responds to a communication path establishment request are connected by a communication network 1, and a plurality of applications A, B, and C (for example, An English conversation school, an English conversation teaching material shop, a book shop site, etc.) are in operation.

  In such a case, in order for the client 101 to access the plurality of applications A, B, and C in the server 201, conventionally, the “application A certificate (server side)” and the “application A client” Establishing the communication path by mutual authentication of the "certificate of the certificate (client side)" and establishing the communication path by the mutual authentication of the "application B certificate (server side)" and "the certificate of the client for the application B (client side)" Processing, a communication path establishment process by mutual authentication of “application C certificate (server side)” and “client certificate for application C (client side)” was individually required. For this reason, a processing time for performing the communication path establishment processing a plurality of times is required, and a computer resource for that is required.

  In the certificate mutual authentication system of the present invention, when there is a communication path establishment request from the client 101 to the server 201, a plurality of certificates (application A certificate, application B certificate, Application C certificate) is sent at once. Further, a plurality of certificates (a client certificate for application A, a client certificate for application B, and a client certificate for application C) are sent from the client 101 to the server 201 at a time. Mutual authentication of at once.

  FIG. 2 shows an authentication procedure in the certificate mutual authentication system of the present invention. FIG. 2 is a diagram showing an outline of a method for establishing a communication path mutually authenticated by a plurality of certificates. However, the outline of the certificate and authentication is shown, and the sequence such as the encryption key exchange by the public key method is omitted.

  In addition, it is assumed that a plurality of applications (for example, English conversation school, English conversation teaching material shop, book shop site, etc.) are operated on the server 201, and a certificate for authentication is prepared for each.

  First, the client 101 transmits a communication path establishment request to the server 201 (step S101). The server 201 responds to the communication path establishment request, and “certificate chain (a series of information necessary for an authentication process including a certificate, encryption key information, information related to a certificate authority, etc., simply referred to as“ certificate ”). Is transmitted to the client 101. At this time, a plurality of certificates may be transmitted. The data to be sent is the number of certificates, followed by that number of certificates. Also, the server 201 transmits to the client 101 a “list of certificate authority identification names (DistinguishedName)” that can be authenticated. Further, it requests transmission of a client certificate (a plurality of candidates) (step S102).

  The client 101 receives information on the number of certificates from the server 201, and then receives certificates for the number of certificates. All received server certificates are confirmed (verified) by public key cryptography. In this case, the client 101 verifies all the certificates regardless of whether or not there is a certificate for the application to be accessed.

  Next, the certificate authenticated from the certificate authority in the “DistinguishedName list” received from the server 201 is transmitted to the server 201 (step S103). A plurality of certificates may be transmitted at this time. As for the data to be transmitted, the number of certificates and the number of subsequent certificates are transmitted. For example, when accessing two applications, two certificates are transmitted to the server 201.

  The server 201 receives the number of certificates from the client 101, and then receives the same number of certificates. The certificates of all the received clients 101 are verified, and if authentication is successful, a communication path establishment notification is transmitted to the clients 101 (step S104).

  Thereafter, data communication is performed between the client 101 and the server 201 (step S105). Note that if the client 101 cannot present the certificate requested by the server 201, or if even one of the certificates fails, the communication path is not established. In addition, a communication path is not established even when certificates cannot be received by the number of certificates received in steps S102 and S103.

  As described above, in this example, a plurality of certificates are verified by the server 201 and the client 101, and if verification fails even for one of the certificates during the verification, the communication path is established for the following reason. Not supposed to be.

  Since a plurality of authentications are performed by one communication path, if one of the verifications fails, there is a possibility that unauthorized communication using another authentication result may be performed. In addition, there is a method to establish a communication path excluding those that failed verification, but if it is not possible to authenticate with each other's assumed certificate, it is more natural to fail the communication path establishment itself Although the method is not adopted due to the complexity of the protocol, it is of course possible to establish a communication path excluding the verification failure.

  Further, when a communication path is established between the client 101 and the server 201 and data communication is performed, communication can be performed according to a security policy (security standard). FIG. 3 is a diagram showing an example of a security policy (security standard) table. Based on the information in the security policy table, the accessible range is limited according to the access source. For example, level 1 (lowest security level) is set for user A, level 2 (medium security level) is set for user B, level 3 (highest security level) is set for user C, and the target file is level 2 In the case of a file, this is an example in which only the user B and the user C who are higher than the level set in the file can be viewed.

  In addition, it is possible to dynamically select a certificate to be used on each of the client 101 side and the server 201 side. For example, referring to the information in the certificate selection table shown in FIG. 4, the client 101 side selects a required usage certificate for each access destination (IP address), and the server 201 side selects the request source (user IP address). It is possible to select a usage certificate to be sent for each (address).

  For example, in FIG. 4A, when accessing the “English conversation school” from the client 101 side, only the certificate for the English conversation school is sent from the client 101 side to the server 201 side. When accessing “Company A”, three certificates are transmitted: a certificate for the English conversation school, a certificate for the company A, and a certificate for the book shop.

  As shown in FIG. 4 (b), when the server 201 receives a communication path establishment request from the requester of the IP address (111.aaa.bbb.ccc), only the English conversation school certificate is obtained. Send. If there is a communication path establishment request from the requester of the IP address (111.bbb.ccc.aaa), there are three certificates: an English conversation school certificate, a company A certificate, and a book shop certificate. Send a certificate.

  As a result, it is possible to prevent the client information in the certificate from being unnecessarily grasped by using the certificate transmitted from the client 101 as a clue, so that the privacy of the client 101 can be protected. Further, since it is possible to prevent the server information in the certificate from being unnecessarily grasped using the certificate transmitted from the server 201 side, the privacy of the server 201 can be protected. In addition, the time required for certificate confirmation can be shortened by not transmitting a certificate unnecessary for session establishment.

  In the above-described embodiment of the present invention, the client 101 as the communication path establishment requester and the server 201 that responds to the communication path establishment request are shown. However, the client 101 may be a server. Further, the client 101 and the server 201 may be peers. In addition, the number of certificates transmitted from the client 101 and the server 201 does not always need to be plural, and it goes without saying that there may be one.

  FIG. 5 is a diagram showing a configuration example of the client and the server, and shows what is directly related to the present invention.

  The client 101 includes a control unit 102 that controls the entire client, a communication interface 103 that connects the communication network 1 and the client 101, a processing program unit 110, and a storage unit 120.

The processing program unit 110 includes the following processing units.
The communication path establishment request processing unit (communication path establishment request unit) 111 performs processing for transmitting a communication path establishment request to the server 201.

  The server certificate reception processing unit (server certificate reception unit) 112 performs processing for receiving a plurality of types of certificates from the server 201.

  A server certificate authentication processing unit (server certificate authentication means) 113 performs processing for authenticating a certificate received from the server 201.

  A client certificate transmission processing unit (client certificate transmission unit) 114 performs processing for transmitting a plurality of client certificates to the server 201.

  A communication channel establishment notification reception processing unit (communication channel establishment notification receiving unit) 115 performs processing for receiving a communication channel establishment notification from the server 201.

  The client certificate selection processing unit (client certificate selection means) 116 performs processing for selecting a certificate to be transmitted to the server 201 according to a communication path establishment request destination (access destination).

  In addition, the storage unit 120 stores client certificate information, a certificate selection table, and the like.

  The server 201 includes a control unit 202 that controls the entire server, a communication interface 203 that connects the communication network 1 and the server 201, a processing program unit 210, and a database 220.

The processing program unit 210 includes the following processing units.
A communication path establishment request reception processing unit (communication path establishment request receiving unit) 211 performs processing for receiving a communication path establishment request from the client 101.

  A server certificate transmission processing unit (server certificate transmission unit) 212 performs processing for transmitting a plurality of types of certificates to the client 101.

  A client certificate reception processing unit (client certificate receiving unit) 213 performs processing for receiving a plurality of types of certificates from the client 101.

  A client certificate authentication processing unit (client certificate authentication unit) 214 performs processing for authenticating a certificate received from the client 101.

  The communication path establishment notification transmission processing unit (communication path establishment notification transmission means) 215 performs processing for transmitting a communication path establishment notification to the client after the client 101 is authenticated.

  A server certificate selection processing unit (server certificate selection means) 216 performs processing for selecting a certificate to be transmitted in accordance with the client 101.

  The security policy processing unit 217 sets a security level according to the client 101, for example, sets a range of files that can be viewed.

  The database 220 stores application information (a plurality of applications A, B, etc.), certificate information corresponding to each application, a certificate selection table, a policy table, and the like.

  The processing program unit 110 in the client 101 and the processing program unit 210 in the server 201 may be realized by dedicated hardware. The processing program unit includes a memory and a CPU (central processing unit). The information processing apparatus may be implemented by loading a program (not shown) for realizing the function of the processing unit into a memory and executing the program.

  Further, a program for realizing the functions of the processing program unit 110 in the client 101 and the processing program unit 210 in the server 201 is recorded on a computer-readable recording medium, and the program recorded on the recording medium is stored in the computer. The processing necessary for the present invention may be performed by reading the system and executing it. Here, the “computer system” includes an OS and hardware such as peripheral devices.

The “computer-readable recording medium” refers to a storage device such as a flexible medium, a magneto-optical disk, a portable medium such as a ROM and a CD-ROM, and a hard disk incorporated in a computer system.
Furthermore, the “computer-readable recording medium” dynamically holds a program for a short time like a communication line when transmitting a program via a network such as the Internet or a communication line such as a telephone line. In this case, it is intended to include those that hold a program for a certain period of time, such as a volatile memory inside a computer system that becomes a server or a client in that case (transmission medium or transmission wave).
The program may be for realizing a part of the functions described above, and further, a program that can realize the functions described above in combination with a program already recorded in a computer system, a so-called difference file (difference). Program).

  Although the embodiment of the present invention has been described above, the certificate mutual authentication system is not limited to the illustrated example described above, and various modifications can be made without departing from the scope of the present invention. Of course.

  Since the present invention enables mutual authentication of a plurality of certificates by a single communication path establishment process, it is possible to suppress an increase in time and computer resources for establishing a communication path, compared to a conventional communication path establishment method. It has an effect and is useful for a certificate mutual authentication system and a certificate mutual authentication method.

It is a figure for demonstrating the certificate mutual authentication system of this invention. It is a figure which shows the procedure of the authentication in the certificate mutual authentication system of this invention. It is a figure which shows the example of a security policy table. It is a figure which shows the example of a certificate selection table. It is a figure which shows the structural example of a client and a server. It is a figure which shows the procedure of the authentication of the conventional client and server.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Communication network 101 Client 201 Server 102 Control part 103 Communication interface 110 Processing program part 111 Communication path establishment request processing part 112 Server certificate reception processing part 113 Server certificate authentication processing part 114 Client certificate transmission processing part 115 Communication path establishment Notification reception processing unit 116 Client certificate selection processing unit 120 Database 201 Server 202 Control unit 203 Communication interface 210 Processing program unit 211 Communication path establishment request reception processing unit 212 Server certificate transmission processing unit 213 Client certificate reception processing unit 214 Client Certificate authentication processing unit 215 Communication path establishment notification transmission processing unit 216 Server certificate selection processing unit 217 Security policy processing unit 220 Database

Claims (3)

A certificate mutual authentication system that performs mutual authentication of a plurality of certificates by a client that makes a communication path establishment request and a server that responds to the communication path establishment request from the client,
The client includes
A communication path establishment request means for transmitting a communication path establishment request to the server;
Server certificate receiving means for receiving a plurality of certificates from the server;
Server certificate authenticating means for authenticating a plurality of certificates received from the server;
Client certificate transmission means for transmitting a plurality of certificates to the server after authenticating the plurality of certificates received from the server;
Communication path establishment notification receiving means for receiving a communication path establishment notification from the server when the certificate transmitted from the client is authenticated by the server, and
The server includes
A communication path establishment request receiving means for receiving a communication path establishment request from the client;
Server certificate transmission means for transmitting a plurality of certificates to the client;
Client certificate receiving means for receiving a plurality of certificates from the client;
Client certificate authenticating means for authenticating a plurality of certificates received from the client;
A certificate mutual authentication system comprising: a communication path establishment notification transmission unit configured to transmit a communication path establishment notification to a client after authenticating a plurality of certificates received from the client. The client includes client certificate selection means for selecting a certificate to be transmitted according to a communication path establishment request destination.
2. The certificate mutual authentication system according to claim 1, wherein the server comprises server certificate selection means for selecting a certificate to be transmitted in accordance with a communication path establishment request source. A certificate mutual authentication method for performing mutual authentication of a plurality of certificates between a client that makes a communication path establishment request and a server that responds to the communication path establishment request from the client,
By the client
A communication path establishment request procedure for transmitting a communication path establishment request to the server;
A server certificate receiving procedure for receiving a plurality of certificates from the server;
A server certificate authentication procedure for authenticating a plurality of certificates received from the server;
A client certificate transmission procedure for transmitting a plurality of certificates to the server after authenticating the plurality of certificates received from the server;
When the certificate transmitted from the client is authenticated by the server, a communication path establishment notification receiving procedure for receiving a communication path establishment notification from the server is performed.
By the server
A communication path establishment request receiving procedure for receiving a communication path establishment request from the client;
A server certificate transmission procedure for transmitting a plurality of certificates to the client;
A client certificate receiving procedure for receiving a plurality of certificates from the client;
A client certificate authentication procedure for authenticating a plurality of certificates received from the client;
A certificate mutual authentication method comprising: performing a communication path establishment notification transmission procedure for transmitting a communication path establishment notification to a client after authenticating a plurality of certificates received from the client.

Images