JP2009181545A - Attribute information update request device, attribute information update request method, and attribute information update request program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an attribute information update request apparatus for transmitting to a server device encrypted correction information related to the information stored in the server device, and requesting updating of the correction information. <P>SOLUTION: The attribute information update request apparatus stores a public key. An update information file generating means generates, when update attribute information as information on updating of the attribute information is acquired, an update information file including the update attribute information. A common key generating means generates a common key composed of a sufficiently long character string. An update information file encryption means encrypts the update information file using the common file. A common key encryption means encrypts the common key using the stored public key. An updating information providing means provides a server device with updating information including the encrypted common key and the encrypted update information file. The update request means requests the server device to update the attribute information. <P>COPYRIGHT: (C)2009,JPO&INPIT

Description

  The present invention relates to a technique for making a request for updating attribute information held in a server device from a terminal device.

  In a client server system composed of a terminal device and a server device, the public key generated by the terminal device is transferred to the server device, and the secret key generated when the public key is generated on the terminal device side is retained. Thus, there is a system that enables transmission and reception of encrypted information between the server device and the terminal device (see, for example, Patent Document 1).

JP 2006-293964 A

  By the way, when the correction information related to the information held in the server device is acquired by the terminal device, considering that there may be a situation where the server device cannot be directly operated, the correction information is not only encrypted and transmitted to the server device. It is desirable that an update request for the correction information can be made to the server device.

  Examples of the problems to be solved by the present invention include those described above. An object of the present invention is to provide an attribute information update requesting device that encrypts correction information related to information held in a server device, transmits the information to the server device, and requests the server device to update the correction information. is there.

  The invention according to claim 1 is an attribute information update request device connected to a server device that holds attribute information via a network, and includes public key storage means that stores a public key, and update information of the attribute information. Update information file generating means for generating an update information file including update attribute information, common key generating means for generating a common key, and update information file encryption for encrypting the update information file using the common key Means for providing the server device with update information including the common key encryption means for encrypting the common key using the public key, and the encrypted common key and the encrypted update information file. Update information providing means; and update request means for making an attribute information update request to the server device.

  The invention according to claim 6 is an attribute information update request method executed by a device connected to a server device that holds attribute information via a network, a public key storage step that stores a public key, and the attribute An update information file generation step for generating an update information file including update attribute information that is update information of the information, a common key generation step for generating a common key, and the update information file are encrypted using the common key An update information file encryption step, a common key encryption step for encrypting the common key using the public key, and update information including the encrypted common key and the encrypted update information file. An update information providing step to be provided to the server device, and an update request step for making an attribute information update request to the server device.

  The invention according to claim 7 is an attribute information update request program executed by a device connected to a server device that retains attribute information through a network, the public key storage unit storing a public key, and the attribute An update information file generation unit that generates an update information file including update attribute information that is update information of information, a common key generation unit that generates a common key, and encrypts the update information file using the common key Update information file encryption means, common key encryption means for encrypting the common key using the public key, update information including the encrypted common key and the encrypted update information file The computer is caused to function as update information providing means to be provided to a server device and update request means for making an attribute information update request to the server device. To.

  The invention according to claim 9 is an attribute information update system in which an attribute information update request device and a server device holding attribute information are connected via a network, wherein the attribute information update request device receives a public key. Using public key storage means for storing, update information file generating means for generating an update information file including update attribute information that is update information of the attribute information, common key generating means for generating a common key, and using the common key Update information file encryption means for encrypting the update information file, common key encryption means for encrypting the common key using the public key, the encrypted common key and the encrypted Update information providing means for providing update information including an update information file to the server device, wherein the server device stores secret key storage means for storing a secret key; Update information acquisition means for acquiring information, common key decryption means for decrypting the encrypted common key, update information decryption means for decrypting the update information file, update request reception means for receiving an update request, And attribute information updating means for updating the held attribute information using the decrypted update information file.

  In a preferred embodiment of the present invention, an attribute information update request device connected to a server device that holds attribute information via a network includes a public key storage unit that stores a public key, and an update that is update information of the attribute information. Update information file generation means for generating an update information file including attribute information, common key generation means for generating a common key, update information file encryption means for encrypting the update information file using the common key, , A common key encryption unit that encrypts the common key using the public key, and an update information that provides the server device with update information including the encrypted common key and the encrypted update information file An information providing means; and an update requesting means for making an attribute information update request to the server device.

  Specifically, the attribute information update request device is applied to various computers such as a personal computer. The attribute information update request device stores the public key. When the update information file generation unit acquires the update attribute information that is the update information of the attribute information, the update information file generation unit generates an update information file that is a file including the update attribute information. A specific example of the format of the update information file is a CSV (Comma Separated Values) file.

  The common key generation unit generates a common key. The common key is generated using a sufficiently long character string. The update information file encryption means encrypts the update information file using the common file. The common key encryption means encrypts the common key using the stored public key.

  The update information providing means provides the server device with update information including the encrypted common key and the encrypted update information file. Then, the update request means makes an attribute information update request to the server device.

  In this way, the attribute information update request device encrypts the update information file including the update attribute information and provides it to the server device. After that, the attribute information update request device requests the server device to update the attribute information. In addition to avoiding the risk of content being decrypted and transmitting it to the server device, the server device can be made to update the attribute information even when the server device cannot be directly operated.

  In one aspect of the attribute information update request device, the public key and the secret key are generated, and the secret key providing unit that provides the secret key to the server device is further provided, the public key The storage means stores the public key generated by the key information generation means.

  According to this, the attribute information update requesting device can cause the server device to decrypt the common key encrypted with the public key. That is, the information encrypted by the attribute information update requesting device can be decrypted.

  In another aspect of the attribute information update requesting device, the apparatus further comprises an authentication key generating means for generating an authentication key, wherein the update information providing means provides the update information including the authentication key, The update request means transmits the authentication key when an update request is made.

  In this case, the attribute information update request device provides an authentication key to the server device at the time of transmission of update information and an update request, and performs an update request with the device that provided the update information to the server device. It is possible to determine whether or not the device is the same, and it is possible to avoid updating unauthorized information.

  In another aspect of the attribute information update requesting device, the update information file generating unit generates an update information file related to update attribute information that is updated for a highly confidential item.

  As a result, the attribute information update request device generates an update information file and performs an encryption process on the update information file, even though the attribute information is not changed for a highly confidential item. Can be avoided.

  In another aspect of the attribute information update requesting device, the update information file encryption unit further encrypts a synchronization ID that is an identifier of the update attribute information, and the update information providing unit includes the update information in the update information. It is provided including the synchronization ID.

  In this case, the attribute information update request device can cause the server device to specify the attribute information to be updated.

  In another aspect of the present invention, there is provided an attribute information update request method executed by a device connected to a server device holding attribute information via a network, a public key storing step for storing a public key, and the attribute information An update information file generation step for generating an update information file including update attribute information that is update information of the update information, a common key generation step for generating a common key, and an update for encrypting the update information file using the common key An information file encryption step, a common key encryption step for encrypting the common key using the public key, and update information including the encrypted common key and the encrypted update information file. An update information providing step to be provided to the device, and an update request step for making an attribute information update request to the server device.

  Also by the above method, the update information file including the update attribute information is encrypted and provided to the server device, and then the attribute information update request is sent to the server device, so that the content of the attribute information can be decrypted. In addition to avoiding the danger and transmitting to the server device, even when the server device cannot be directly operated, the server device can be made to update the attribute information.

  In another aspect of the present invention, there is provided an attribute information update request program executed by a device connected to a server device that holds attribute information via a network, a public key storage unit that stores a public key, and the attribute information Update information file generating means for generating an update information file including update attribute information that is update information of the update information, a common key generating means for generating a common key, and an update for encrypting the update information file using the common key Information file encryption means, common key encryption means for encrypting the common key using the public key, and update information including the encrypted common key and the encrypted update information file The computer functions as update information providing means to be provided to the apparatus and update request means for making an attribute information update request to the server apparatus. By executing this program on a computer, the attribute information update requesting device can be realized. This attribute information update request program can be suitably handled in a state where it is recorded on a recording medium.

  In another aspect of the present invention, there is provided an attribute information update system in which an attribute information update request device and a server device holding attribute information are connected via a network, the attribute information update request device storing a public key Using the public key storage means, an update information file generation means for generating an update information file including update attribute information which is update information of the attribute information, a common key generation means for generating a common key, and the common key Update information file encryption means for encrypting the update information file, common key encryption means for encrypting the common key using the public key, the encrypted common key, and the encrypted update Update information providing means for providing update information including an information file to the server device, the server device comprising: a secret key storage means for storing a secret key; and the update information. Update information acquisition means for acquiring, a common key decryption means for decrypting the encrypted common key, an update information decryption means for decrypting the update information file, an update request reception means for receiving an update request, Attribute information updating means for updating the attribute information held using the decrypted update information file.

  Thus, in the attribute information update system, the attribute information update request device encrypts the update information file including the attribute information to be updated, and transmits the update information file to the server device. Then, the server device decrypts the update information. Also, the attribute information update requesting device sends an update request for attribute information after transmitting the update information file to the server device. Then, the server device updates the attribute information in response to the attribute information update request.

  Therefore, in the attribute information update system, the attribute information of the update target acquired by the attribute information update requesting device can be reflected in the attribute information of the server device without direct operation by the user at the server device.

  Hereinafter, preferred embodiments of the present invention will be described with reference to the drawings.

[Overview of attribute information update system]
FIG. 1 shows a conceptual diagram of the attribute information update system 1. In this embodiment, the attribute information update system 1 includes an attribute information update request device 100 and a server device 200 that holds a database of attribute information (for example, member information). The apparatus 200 is connected by a predetermined communication means.

  When the attribute information update requesting apparatus 100 acquires correction information of attribute information included in the database held by the server apparatus 200 from other than the server apparatus 200, the attribute information update requesting apparatus 100 refers to the correction information and stores confidential information such as personal information. If it is determined that the high information has been corrected, a file including the correction information is generated, the file is encrypted, and the encrypted file is transmitted to the server apparatus 200. Then, the server device 200 receives the encrypted file and decrypts the encrypted file.

  The attribute information update request device 100 requests the server device 200 to update the information in the encrypted file. After receiving the update request, the server device 200 updates the content of the correction information to the attribute information database.

  Thus, in the attribute information update system 1, after the attribute information update request device 100 encrypts the correction information acquired by the attribute information update request device 100, the encrypted information is provided to the server device 200. Since the attribute information update request is made to the server apparatus 200, the attribute information held by the server apparatus is updated even when the server apparatus itself cannot be directly operated, for example, the server apparatus 200 is a rental server. be able to.

[Attribute information update request device]
FIG. 2 shows a functional configuration of the attribute information update request device 100. The attribute information update request device 100 is actually various computers such as a personal computer. The attribute information update requesting apparatus 100 includes a control unit 20, a storage unit 36, a transmission / reception unit 38, a display unit 40, and an input device 60, as shown in the figure. The control unit 20 includes a key information generation unit 101, a secret key provision unit 102, an update information file generation unit 103, a common key generation unit 104, an update information file encryption unit 105, a common key encryption unit 106, an authentication A key generation unit 107, an update information providing unit 108, and an update request unit 109 are provided. Specifically, the control unit 20 is a CPU (Central Processing Unit), a RAM (Random Access Memory), or the like, and performs overall control of the attribute information update request apparatus 100 as a whole. That is, when the control unit 20 executes a predetermined program, the key information generation unit 101, the secret key provision unit 102, the update information file generation unit 103, the common key generation unit 104, and the update information file encryption unit 105 A common key encryption unit 106, an authentication key generation unit 107, an update information providing unit 108, and an update request unit 109.

  The storage unit 36 stores various information (for example, generated various keys, an update information file, etc.). Specifically, it is a HDD (Hard Disk Drive) or the like.

  The transmission / reception unit 38 transmits and receives various types of information. The display unit 40 is a display or the like.

  The input device 60 includes keys, switches, buttons, a remote controller, a voice input device, and the like for inputting various commands and data.

  The key information generation unit 101 generates a public / private key pair using a public key cryptosystem (Rivest-Shamir-Adleman) based on a passphrase input by a user's input operation.

  The secret key providing unit 102 transmits the secret key generated by the key information generating unit 101 to the server device 200 via the transmission / reception unit 38.

  When the update information file generation unit 103 acquires the corrected attribute information, as a result of referring to the corrected attribute information, a highly confidential item (for example, address information) is changed in the attribute information. If so, extract the modified attribute information and create a file. Hereinafter, the file is also referred to as an update information file. An example of the file format of the update information file is a CSV format.

  The common key generation unit 104 generates a common key used for encrypting the update information file. Specifically, the common key generation unit 104 uses a sufficiently long character string (for example, correction date / time + serial No (a character string in which predetermined numbers and letters are mixed) + member's e-mail address). Is generated.

  The update information file encryption unit 105 encrypts the update information file using the common key generated by the common key generation unit 104. The update information file encryption unit 105 also encrypts the synchronization ID. Here, the synchronization ID is information that can uniquely identify the attribute information, and is a value defined in the server device 200. As a method for specifying the synchronization ID corresponding to the attribute information to be encrypted, the attribute information update requesting apparatus 100 holds a list of attribute information and acquires the synchronization ID from the list, or the server apparatus 200 is inquired for synchronization. There is a method of acquiring an ID.

  The common key encryption unit 106 encrypts the common key using the public key generated by the key information generation unit 101. The authentication key generation unit 107 generates an authentication key (random character string made up of numbers, alphabets, etc.) used for update authentication.

  The update information providing unit 108 transmits various types of information used at the time of update to the server device 200 via the transmission / reception unit 38.

  Specifically, the update information providing unit 108 transmits the authentication key generated by the authentication key generating unit 107 to the server device 200. Then, the update information providing unit 108 also transmits the encrypted update information file, synchronization ID, and common key to the server device 200.

  The update request unit 109 transmits the authentication key and makes an update request. Specifically, the update request unit 109 activates a CGI (Common Gateway Interface) for updating attribute information that operates on the server device 200.

[Server device]
FIG. 3 shows a functional configuration of the server device 200. As illustrated, the server device 200 includes a control unit 210, a storage unit 250, a transmission / reception unit 220, an input device 230, and a display unit 240. The control unit 210 includes a secret key acquisition unit 201, an update information acquisition unit 202, a common key decryption unit 203, an attribute information decryption unit 204, an update request reception unit 205, and a database update unit 206. Specifically, the control unit 210 is a CPU, a RAM, or the like, and performs overall control of the entire server device 200. That is, when the control unit 210 executes a predetermined program, the secret key acquisition unit 201, the update information acquisition unit 202, the common key decryption unit 203, the attribute information decryption unit 204, and the update request reception unit 205 The database update unit 206 is realized.

  The transmission / reception unit 220 transmits / receives various data. Specifically, a communication interface or the like. The input device 230 includes keys, switches, buttons, a remote controller, a voice input device, and the like for inputting various commands and data. The display unit 240 is a display or the like. The storage unit 250 stores an attribute information DB 280 that manages attribute information, and stores a secret key acquired from the attribute information update requesting apparatus 100. Specifically, it is a HDD (Hard Disk Drive) or the like.

  The attribute information DB 280 is a database for managing attribute information, and the attribute information in this embodiment indicates member information (member's personal information such as name and address, the number of points).

  The secret key acquisition unit 201 acquires the secret key transmitted by the attribute information update requesting device 100 via the transmission / reception unit 220 and stores the secret key in the storage device 250.

  The update information acquisition unit 202 acquires the update information (encrypted update information file, synchronization ID, and common key) transmitted by the attribute information update request apparatus 100 via the transmission / reception unit 220.

  The common key decryption unit 203 decrypts the encrypted common key acquired by the update information acquisition unit 202 using the secret key. The attribute information decryption unit 204 decrypts the encrypted update information file using the common key.

  The update request receiving unit 205 receives the authentication key together with the update request from the attribute information update requesting apparatus 100.

  When the update request receiving unit 205 receives the update request, the database update unit 206 compares the authentication key included in the update information with the authentication key received by the update request receiving unit 205, and both authentication keys are If they are identical, the information in the decrypted update information file is reflected in the attribute information DB 280.

[Attribute information update request method and attribute information update method]
Next, an attribute information update request method and an attribute information update method will be described with reference to FIG.

  The attribute information update method here means that when the attribute information update request device 100 acquires the modified attribute information, various information including the attribute information is encrypted, and the encrypted information is transmitted to the server device 200. Thereafter, an update request is made to the server apparatus 200, and the attribute information update request is made.

  The attribute information update method is a method in which the server apparatus 200 decrypts the encrypted information acquired from the attribute information update request apparatus 100, receives the update request from the attribute information update request apparatus 100, and decrypts the attribute information. Is reflected in the attribute information DB 280.

  As a premise, the key information generation unit 101 of the attribute information update requesting apparatus 100 generates a secret key and a public key using a public key cryptosystem based on a passphrase input by the user, and a secret key providing unit 102 However, it is assumed that the secret key is transmitted to the server apparatus 200 and the secret key acquired by the server apparatus 200 is held.

  First, the attribute information update request method will be described. When the modified attribute information is acquired by a predetermined method, the update information file generation unit 103 determines whether or not the attribute information has been modified for a specific highly confidential item. Is changed, an update information file that is a file including the attribute information is generated. The update information file includes a synchronization ID that can uniquely identify the attribute information.

  Then, the common key generation unit 104 generates a common key using a sufficiently long character string (for example, modification date + serial number + email address).

  Then, the update information file encryption unit 105 encrypts the update information file using the common key. Then, the common key encryption unit 106 encrypts the common key using a public key.

  Then, the authentication key generation unit 107 generates an authentication key. The update information providing unit 108 transmits update information (authentication key, common key, synchronization ID, and update information file) to the server device 200 via the transmission / reception unit 38.

  Then, the update request unit 109 transmits an authentication key to the server device 200 and makes an attribute information update request.

  In this way, the attribute information update request device 100 provides the encrypted attribute information to the server device 200 and makes a request for updating the attribute information to the server device 200, so there is a risk that the content of the attribute information can be decrypted. The server apparatus 200 can be made to update the attribute information even when the server apparatus 200 cannot be directly operated.

  The key information generation unit 101 generates a secret key and a public key using a passphrase input by the user, and the secret key provision unit 102 uses the secret key generated by the key information generation unit 101. It is transmitted to the server device 200. As a result, the attribute information update request device 100 can cause the server device 200 to decrypt the common key encrypted with the public key. That is, the server apparatus 200 can decrypt the information encrypted by the attribute information update request apparatus 100.

  Further, in the attribute information update request device 100, the authentication key generation unit 107 generates an authentication key and includes the authentication key in the update information. Then, the update request unit 109 transmits the authentication key to the server device 200 when an update request is made. As a result, the attribute information update request device 100 provides an authentication key to the server device 200 at the time of attribute information transmission and update request, and the server device 200 sends an update request to the device that provided the attribute information. It is possible to determine whether or not the performed apparatus is the same.

  In addition, when the updated information file generation unit 103 acquires the modified attribute information, the update information file generation unit 103 determines an item to be changed in the attribute information, and if an item with high confidentiality has been changed, the update information file Is generated. This prevents the attribute information update requesting apparatus 100 from generating an update information file and performing an encryption process on the update information file even though the highly confidential item has not been changed. be able to. As a method of determining whether or not a highly confidential item has been modified, the item that was input (deleted / changed / added, etc.) at the time of registration of the attribute to be modified by the user is specified, and the item is programmed. For example, there is a method for determining whether or not the item is highly confidential.

  Next, the attribute information update method will be described. First, in the server device 200, when the update information acquisition unit 202 acquires the update information (authentication key, common key, synchronization ID, and update information file) from the attribute information update request device 100, the common key decryption unit 203 The obtained encrypted common key is decrypted using the secret key.

  Then, the attribute information decryption unit 204 decrypts the encrypted synchronization ID and update information file using the common key.

  Thereby, the server apparatus 200 can decrypt the encrypted update information file acquired from the attribute information update request apparatus 100.

  When the update request receiving unit 205 acquires the authentication key from the attribute information update requesting apparatus 100 and receives the update request, the database updating unit 206 includes the update information received by the update information acquiring unit 202 in the update information. If the authentication key matches the authentication key acquired by the update request receiving unit 205, the attribute information in the decrypted update information file is reflected in the attribute information DB 280.

  As described above, the server device 200 decrypts the encrypted attribute information acquired from the attribute information update request device 100, and after the decryption, in response to the update request from the attribute information update request device 100, the attribute information is sent to the attribute information DB 280. Can be reflected.

  The update information file encryption unit 105 encrypts the synchronization ID, and the update information providing unit 108 provides the update information including the synchronization ID. In this case, the attribute information update request device 100 can cause the server device 200 to specify the attribute information to be updated.

[Attribute information update request processing and attribute information update processing]
Next, the “attribute information update request process” and the “attribute information update process” will be described with reference to the flowchart shown in FIG. These processes are realized by the control unit 20 in the attribute information update request apparatus 100 and the control unit 210 in the server apparatus 200 executing a program prepared in advance.

  The attribute information update request process is a process performed by the attribute information update request apparatus 100. When the modified attribute information is acquired, various information including the attribute information is encrypted, and the encrypted information is stored in the server apparatus. 200, and a request for updating the attribute information is sent to the server apparatus 200 separately.

  The attribute information update process is a process performed by the server apparatus 200. The encrypted information acquired from the attribute information update request apparatus 100 is decrypted, and the decryption is performed after receiving the update request from the attribute information update request apparatus 100. The attribute information is reflected in the attribute information DB 280.

  In the attribute information update requesting apparatus 100, the key information generation unit 101 generates a public / private key pair from the passphrase input by the user using a public key cryptosystem (step S1).

  Then, the secret key providing unit 102 provides the secret key generated by the key information generating unit 101 to the server device 200 via the transmission / reception unit 38 (step S2). Accordingly, the secret key acquisition unit 201 in the server device 200 acquires a secret key and stores the secret key in the storage unit 250 (step S21).

  Then, the update information file generation unit 103 refers to the modified attribute information when acquiring the modified attribute information, determines whether or not the highly confidential item has been modified, and determines the highly confidential item. Is modified, an update information file including the modified attribute information is generated (step S3).

  Then, the common key generation unit 104 generates a common key using a common key encryption method (step S4). Then, the update information file encryption unit 105 encrypts the update information file and the synchronization ID corresponding to the attribute information included in the update information file using the common key (step S5).

  Then, the common key encryption unit 106 encrypts the common key using the public key (step S6). Then, the authentication key generation unit 107 generates an authentication key (step S7).

  Then, the update information providing unit 108 transmits the authentication key generated by the authentication key generation unit 107 to the server device 200, and then transmits the encrypted update information file, the synchronization ID, and the common key to the server device 200 ( Step S8).

  In the server device 200, the update information acquisition unit 202 acquires an authentication key, an update information file, a synchronization ID, and a common key (step S22).

  Then, the common key decryption unit 203 decrypts the common key using the secret key (step S23). Then, the attribute information decryption unit 204 decrypts the update information file and the synchronization ID using the decrypted common key (step S24).

  Then, in the attribute information update request device 100, the update request unit 109 transmits an authentication key to the server device 200 and makes an attribute information update request (step S9), and ends the attribute information update request processing.

  In response to this, in the server device 200, the update request receiving unit 205 receives the authentication key and the update request (step S25).

  Then, the database update unit 206 compares the authentication key acquired by the update information acquisition unit 202 with the authentication key received by the update request reception unit 205, and decrypts the authentication key if they match. The attribute information in the attribute information DB 280 corresponding to the synchronization ID is changed to the attribute information in the decrypted update information file (step S26), and the attribute information update process ends.

  As described above, the attribute information update request device 100 connected to the server device 200 that holds the attribute information through the network includes the public key storage unit that stores the public key, and the update attribute information that is update information of the attribute information. An update information file generating means for generating an update information file including a common key generating means for generating a common key, an update information file encrypting means for encrypting the update information file using the common key, and a public key. A common key encrypting unit that encrypts the common key, an update information providing unit that provides the server device with update information including the encrypted common key and the encrypted update information file, and an attribute to the server device. Update request means for making an information update request.

  Therefore, the attribute information update request device 100 encrypts the update information file including the update attribute information and provides it to the server device 200, and then makes an attribute information update request to the server device 200. The server device 200 can be made to update the attribute information even when the server device 200 cannot be directly operated.

  In the attribute information update system 1, the attribute information update request device 100 encrypts the update information file including the attribute information to be updated, and transmits the update information file to the server device 200. Then, the server device 200 decrypts the update information. Further, the attribute information update requesting apparatus 100 transmits an update information file to the server apparatus 200 and then makes an attribute information update request. Then, the server device 200 updates the attribute information DB 280 in response to the attribute information update request.

  Therefore, in the attribute information update system 1, the server apparatus 200 reflects the attribute information to be updated acquired by the attribute information update request apparatus 100 in the attribute information database of the server apparatus 200 without direct operation by the user. Can be made.

[Other examples]
In the above-described embodiment, after the key information generation unit 101 of the attribute information update request device 100 generates a public key and a secret key, the secret key provision unit 102 sends the secret key to the server device 200 via the transmission / reception unit 38. Although the case of transmitting has been described, the present invention is not limited to this, and the server apparatus 200 may be made to acquire a secret key using other various methods. For example, there is a method of storing the secret key in the server device 200 using a medium such as a DVD (Digital Versatile Disk) that holds the secret key.

  In the above-described embodiment, a case has been described in which the key information generation unit 101 of the attribute information update request device 100 generates a secret key and a public key, and the secret key provision unit 102 provides the secret key to the server device 200. The present invention is not limited to this, and the server apparatus 200 generates a public key / private key pair in response to an instruction from the attribute information update request apparatus 100, and the public key is sent from the server apparatus 200 to the attribute information update request apparatus 100. You may make it transmit to. In this case, the server apparatus 200 can hold the decryption secret key, and the attribute information update request apparatus 100 can hold the encryption public key. That is, the attribute information update request device 100 can encrypt the attribute information, and the server device 200 can decrypt the encrypted attribute information.

  In the above case, since the key transmitted from the server apparatus 200 to the attribute information update request apparatus 100 is a public key, the encrypted information can be decrypted even when the public key is acquired by a third party. Can not. Therefore, the attribute information update system 1 that enables safer information transfer can be realized.

It is a figure which shows schematic structure of an attribute information update system. It is a block diagram which shows schematic structure of an attribute information update request | requirement apparatus. It is a block diagram which shows schematic structure of a server apparatus. It is explanatory drawing which shows the attribute information update request method and the attribute information update method. It is a flowchart of an attribute information update request process and an attribute information update process.

Explanation of symbols

1 Attribute Information Update System 100 Attribute Information Update Request Device 200 Server Device

Claims (9)

An attribute information update request device connected via a network to a server device holding attribute information,
Public key storage means for storing the public key;
Update information file generating means for generating an update information file including update attribute information which is update information of the attribute information;
A common key generating means for generating a common key;
Update information file encryption means for encrypting the update information file using the common key;
A common key encryption means for encrypting the common key using the public key;
Update information providing means for providing the server device with update information including the encrypted common key and the encrypted update information file;
Update request means for making an attribute information update request to the server device;
An attribute information update request device comprising: Key information generating means for generating the public key and the secret key;
A secret key providing means for providing the secret key to the server device;
Further comprising
The attribute information update request apparatus according to claim 1, wherein the public key storage unit stores the public key generated by the key information generation unit. An authentication key generating means for generating an authentication key;
The update information providing means provides the update information including the authentication key,
The attribute information update request device according to claim 1, wherein the update request unit transmits the authentication key at the time of an update request.   4. The attribute information update request according to claim 1, wherein the update information file generation unit generates an update information file related to update attribute information updated for a highly confidential item. 5. apparatus. The update information file encryption means further encrypts a synchronization ID that is an identifier of the update attribute information,
5. The attribute information update request device according to claim 1, wherein the update information providing unit provides the update information including the synchronization ID. 6. An attribute information update request method executed on a server connected to a server device holding attribute information via a network,
A public key storing step for storing the public key;
An update information file generation step for generating an update information file including update attribute information which is update information of the attribute information;
A common key generation step for generating a common key;
An update information file encryption step for encrypting the update information file using the common key;
A common key encryption step of encrypting the common key using the public key;
An update information providing step of providing update information including the encrypted common key and the encrypted update information file to the server device;
An update request step for making an update request for attribute information to the server device;
An attribute information update request method characterized by comprising: An attribute information update request program that is executed by a server device that holds attribute information and a device connected via a network,
Public key storage means for storing the public key;
Update information file generating means for generating an update information file including update attribute information which is update information of the attribute information;
A common key generating means for generating a common key;
Update information file encryption means for encrypting the update information file using the common key;
A common key encryption means for encrypting the common key using the public key;
Update information providing means for providing the server device with update information including the encrypted common key and the encrypted update information file;
An attribute information update request program that causes the computer to function as an update request unit that makes an attribute information update request to the server device.   A storage medium storing the attribute information update request program according to claim 7. An attribute information update system in which an attribute information update request device and a server device holding attribute information are connected via a network,
The attribute information update request device includes:
Public key storage means for storing the public key;
Update information file generating means for generating an update information file including update attribute information which is update information of the attribute information;
A common key generating means for generating a common key;
Update information file encryption means for encrypting the update information file using the common key;
A common key encryption means for encrypting the common key using the public key;
Update information providing means for providing update information including the encrypted common key and the encrypted update information file to the server device,
The server device
A secret key storage means for storing a secret key;
Update information acquisition means for acquiring the update information;
A common key decryption means for decrypting the encrypted common key;
Update information decoding means for decoding the update information file;
An update request receiving means for receiving an update request;
An attribute information update system comprising: attribute information update means for updating the attribute information held using the decrypted update information file.

Images