WO2023021968A1 - Information processing system, first management device, second management device, and information processing method - Google Patents

Abstract

This information processing system (10) comprises an information terminal (20), a first management device (30), and a control device (50). The first management device (30) includes a first secure storage unit (34) in which a new second private key and a new second public key are stored, and a first storage unit (33). The first management device (30) acquires a server certificate and a root certificate from a first external storage device (71) and stores the acquired server certificate and root certificate in the first storage unit (33). The first management device (30) transmits, to the control device (50), a new root certificate that includes the new second public key. The first management device (30) generates a new signature for a first public key that is included in the server certificate stored in the first storage unit (33) by using the new second private key and transmits a new server certificate that includes the first public key and the new signature to the information terminal (20).

Description

Information processing system, first management device, second management device, and information processing method

The present invention relates to an information processing system, a first management device, a second management device, and an information processing method.

Conventionally, security systems for locking or unlocking the doors of facilities are known. Japanese Unexamined Patent Application Publication No. 2002-201002 discloses a security system that can safely remotely control the locking and unlocking of a house without the need for other equipment such as a fingerprint authentication device.

JP 2014-159692 A

An electric lock is known as a device for locking or unlocking the doors of facilities. An electric lock can be said to be a device that restricts the entry and exit of goods or persons. Here, in an information processing system for granting an information terminal the authority to release restrictions on the entry and exit of goods or people, key information may be stored in a security chip provided in the management device. In such a case, when the old management device is changed to a new management device, it is difficult to hand over the key information stored in the old management device to the new management device.

The present invention provides an information processing system and the like that can continue to operate even when it is difficult to hand over key information.

An information processing system according to an aspect of the present invention is an information processing system used for canceling the restrictions on equipment that restricts the entry and exit of goods or people into and out of a space, comprising: an information terminal; a first management device; a control device, wherein the information terminal is configured to generate the first public key using the first secret key, the first public key, the first public key, and the second secret key; a terminal storage unit that stores a server certificate including a signature; and a terminal communication unit that transmits the server certificate to the control device. a storage unit storing a root certificate including two public keys, a communication unit receiving the server certificate from the information terminal, and storing the signature included in the received server certificate in the storage unit a control unit that performs verification using the second public key included in the root certificate that has been obtained, and releases the restriction on the device if the verification is successful; a first secure storage unit storing a second private key and a new second public key, wherein the new second private key and the new second public key are stored in the first secure storage acquires the server certificate and the root certificate stored in the external storage device from a first secure storage unit having a function to prevent it from being taken out to the outside of the unit, a first storage unit, and an external storage device; a first information processing unit for storing the obtained server certificate and the root certificate in the first storage unit; and a new root certificate including the new second public key, the first information a first communication unit configured to transmit a new root certificate generated by the processing unit to the control device, wherein the first information processing unit is included in the server certificate stored in the first storage unit; generating a new signature for said first public key using said new second private key, and generating said first public key and a new server certificate including said new signature, said first A communication unit is caused to transmit to the information terminal.

An information processing system according to an aspect of the present invention is an information processing system used for canceling the restriction of a device that restricts the entry and exit of goods or people into and out of a space, comprising an information terminal, a first management device, a second A management device and a control device, wherein the second management device stores a third secret key and a third public key, and the information terminal stores the first secret key and the first public key and an intermediate certificate containing a first signature for the third public key generated using the third public key and the second private key, the first public key, and the a terminal storage unit storing a server certificate including a second signature for the first public key generated using a third private key; and storing the server certificate and the intermediate certificate in the control device. a terminal communication unit for transmitting data to a terminal communication unit, wherein the control device includes a storage unit storing a root certificate including a second public key corresponding to the second private key, the server certificate and the intermediate a communication unit that receives a certificate from the information terminal; verifies the first signature included in the received intermediate certificate using the second public key included in the root certificate verifying the second signature included in the server certificate obtained by using the third public key included in the intermediate certificate, and releasing the restriction on the device if each verification is successful. wherein the first management device is a first secure storage unit storing a new second private key and a new second public key, wherein the new second private key and a first secure storage unit having a function to prevent the new second public key from being taken out of the first secure storage unit; a first storage unit; and stored from an external storage device to the external storage device. a first information processing unit that acquires the intermediate certificate and the root certificate that have been obtained and stores the acquired intermediate certificate and the root certificate in the first storage unit; and the new second disclosure. a first communication unit configured to transmit a new root certificate including a key and generated by the first information processing unit to the control device, wherein the first information processing unit comprises: generating a new first signature for the third public key included in the intermediate certificate stored in the first storage unit using the new second private key, and generating the third public key; and causing the first communication unit to transmit a new intermediate certificate including the new first signature to the second management device, and the second management device transmits the new intermediate certificate to the first one tube a second communication unit that receives the new intermediate certificate from the management device and transmits the received new intermediate certificate to the information terminal.

An information processing system according to an aspect of the present invention is an information processing system used for canceling the restriction of a device that restricts the entry and exit of goods or people into and out of a space, comprising an information terminal, a first management device, a second A management device and a control device, wherein the first management device stores a second secret key and a second public key, and the information terminal stores the first secret key and the first public key a third public key, an intermediate certificate containing a first signature for the third public key generated using the second private key, the first public key, and the a terminal storage unit storing a server certificate including a second signature for the first public key generated using a third private key corresponding to the third public key; the server certificate; a terminal communication unit configured to transmit the intermediate certificate to the control device, the control device comprising: a storage unit storing a root certificate including the second public key; a communication unit that receives a certificate from the information terminal; verifies the first signature included in the received intermediate certificate using the second public key included in the root certificate verifying the second signature included in the server certificate obtained by using the third public key included in the intermediate certificate, and releasing the restriction on the device if each verification is successful. and the second management device is a second secure storage unit storing a new third private key and a new third public key, wherein the new third private key and a second secure storage unit having a function to prevent the new third public key from being taken out of the second secure storage unit; a second storage unit; and stored from an external storage device to the external storage device. a second information processing unit that acquires the server certificate obtained and stores the acquired server certificate in the second storage unit; and a third information processing unit that transmits the new third public key to the first management device. a first communication unit for receiving the third public key from the second management device; and a new first communication unit for the received new third public key. generate one signature using the second private key, and send a new intermediate certificate including the new third public key and the new first signature to the first communication unit; to the second management device, and the second information processing unit adds a new second signature for the first public key included in the server certificate stored in the second storage unit to the new first Generated using three private keys and sending the first public key, the new server certificate including the new second signature, and the new intermediate certificate received from the first management device to the second communication unit Send to the information terminal.

A first management device according to an aspect of the present invention is a first management device used for granting an information terminal the authority to release the restriction of a device that restricts the entry and exit of goods or people into and out of a space, The information terminal has a first private key, a first public key, and a server certificate including a signature for the first public key generated using the first public key and the second private key. and the server certificate is transmitted to a control device that controls the device in order to cancel the restriction, and the control device transmits a second public key corresponding to the second private key. When the server certificate is received from the information terminal, the signature included in the received server certificate is stored using the second public key included in the root certificate. If the verification is successful, the restriction on the device is released, and the first management device stores a first secure storage unit in which a new second secret key and a new second public key are stored. a first secure storage unit having a function of preventing the new second private key and the new second public key from being taken out of the first secure storage unit; a first storage unit that acquires the server certificate and the root certificate stored in the external storage device from an external storage device and stores the acquired server certificate and the root certificate in the first storage unit; an information processing unit; and a first communication unit that transmits to the control device a new root certificate that includes the new second public key and is generated by the first information processing unit. and the first information processing unit creates a new signature for the first public key included in the server certificate stored in the first storage unit using the new second private key and cause the first communication unit to transmit the first public key and a new server certificate including the new signature to the information terminal.

A first management device according to an aspect of the present invention is a first management device and a second management device that are used to grant an information terminal the authority to release the restriction of a device that restricts the entry and exit of goods or people into and out of a space. wherein the second management device stores a third private key and a third public key, and the information terminal stores the first private key and the first public key an intermediate certificate containing a first signature for said third public key generated using a key, said third public key and a second private key, said first public key, and and a server certificate including a second signature for the first public key generated using the third private key, the server certificate and the intermediate certificate for removing the restriction. to a control device that controls the device, the control device storing a root certificate containing a second public key corresponding to the second private key, and transmitting the server certificate and the intermediate When a certificate is received from the information terminal, the first signature included in the received intermediate certificate is verified using the second public key included in the root certificate, and the received server The second signature included in the certificate is verified using the third public key included in the intermediate certificate, and if each verification is successful, the restriction on the device is lifted, and the first The management device is a first secure storage unit storing a new second private key and a new second public key, wherein the new second private key and the new second public key are a first secure storage unit having a function of preventing it from being taken out to the outside of the first secure storage unit; a first storage unit; a first information processing unit that obtains a root certificate and stores the obtained intermediate certificate and the root certificate in the first storage unit; and a new root certificate that includes the new second public key. a first communication unit configured to transmit a new root certificate generated by the first information processing unit to the control device, wherein the first information processing unit is stored in the first storage unit; generating a new first signature for the third public key included in the intermediate certificate using the new second private key, and generating the third public key and the new first signature; The first communication unit is caused to transmit a new intermediate certificate including a signature to the second management device.

A second management device according to an aspect of the present invention is a first management device and a second management device used for granting an information terminal the authority to release the restriction of a device that restricts the entry and exit of goods or people into and out of a space. wherein the first management device stores a second private key and a second public key, and the information terminal stores the first private key and the first public key a key, a third public key, an intermediate certificate containing a first signature for said third public key generated using said second private key, said first public key, and and a server certificate containing a second signature for said first public key generated using a third private key corresponding to said third public key, said server certificate and said intermediate transmitting the certificate to a control device that controls the device, the control device storing a root certificate including the second public key, and transmitting the server certificate and the intermediate certificate from the information terminal; receiving, verifying the first signature included in the received intermediate certificate using the second public key included in the root certificate, and verifying the first signature included in the received server certificate; The second signature is verified using the third public key included in the intermediate certificate, and if each verification is successful, the restriction on the device is lifted, and the second management device creates a new third a second secure storage unit storing three private keys and a new third public key, wherein the new third private key and the new third public key are stored in the second secure storage unit; a second secure storage unit having a function of preventing it from being taken out to the outside, a second storage unit, and an external storage device to acquire the server certificate stored in the external storage device, and the acquired server certificate in the second storage unit, and a second communication unit for transmitting the new third public key to the first management device, the second information processing unit comprising: generating a new second signature for the first public key included in the server certificate stored in the second storage unit using the new third private key, and generating the first public key; and causing the second communication unit to transmit the new server certificate including the new second signature and the new intermediate certificate received from the first management device to the information terminal, and The intermediate certificate includes the new third public key and a new first signature for the new third public key generated using the second private key.

An information processing method according to an aspect of the present invention is an information processing method executed by a first management device used for granting an information terminal the authority to release the restriction of a device that restricts the movement of goods or people into and out of a space. wherein the information terminal signs a signature on the first public key generated using the first private key and the first public key, and the first public key and the second private key and a server certificate containing the second private key, and transmits the server certificate to a control device that controls the device in order to remove the restriction, and the control device stores the second private key corresponding to the second private key A root certificate containing two public keys is stored, and when the server certificate is received from the information terminal, the signature contained in the received server certificate is transmitted to the second certificate contained in the root certificate. and if the verification is successful, the restriction on the device is released, and the first management device stores a new second secret key and a new second public key. A first secure storage unit having a function of preventing the new second private key and the new second public key from being taken out of the first secure storage unit and a first storage unit, wherein the information processing method acquires the server certificate and the root certificate stored in the external storage device from an external storage device, and stores the acquired server certificate and the storing a root certificate in the first storage unit; generating a new root certificate including the new second public key; and transmitting the generated new root certificate to the control device. and generating a new signature for the first public key included in the server certificate stored in the first storage unit using the new second private key; sending a key and a new server certificate containing the new signature to the information terminal.

An information processing method according to an aspect of the present invention is a first management device and a second management device used for granting an information terminal the authority to release the restriction of a device that restricts the entry and exit of goods or people into and out of a space. An information processing method executed by a first management device, wherein the second management device stores a third secret key and a third public key, and the information terminal stores the first secret key and an intermediate certificate containing a first signature for the third public key generated using the first public key, the third public key, and the second private key, and the first a public key and a server certificate including a second signature for the first public key generated using the third private key; certificate and the intermediate certificate to a control device that controls the device, the control device stores a root certificate containing a second public key corresponding to the second private key, and the server upon receiving the certificate and the intermediate certificate from the information terminal, verifying the first signature included in the received intermediate certificate using the second public key included in the root certificate; verifying the second signature included in the received server certificate using the third public key included in the intermediate certificate, and canceling the restriction of the device if each verification succeeds; and the first management device is a first secure storage unit in which a new second private key and a new second public key are stored, wherein the new second private key and the new first a first secure storage unit having a function of preventing the second public key from being taken out of the first secure storage unit; acquiring the intermediate certificate and the root certificate stored in an external storage device, storing the acquired intermediate certificate and the root certificate in the first storage unit; generating a new root certificate including a public key and transmitting the generated new root certificate to the control device; generating a new first signature for the public key of using the new second private key; and a new intermediate certificate containing the third public key and the new first signature to the second management device.

An information processing method according to an aspect of the present invention is a first management device and a second management device used for granting an information terminal the authority to release the restriction of a device that restricts the entry and exit of goods or people into and out of a space. An information processing method executed by a second management device, wherein the first management device stores a second secret key and a second public key, and the information terminal stores the first secret key and a first public key, a third public key, and an intermediate certificate containing a first signature for the third public key generated using the second private key; storing a public key and a server certificate including a second signature for the first public key generated using a third private key corresponding to the third public key; transmitting the certificate and the intermediate certificate to a control device that controls the device, the control device storing a root certificate including the second public key, and transmitting the server certificate and the intermediate certificate; is received from the information terminal, the first signature included in the received intermediate certificate is verified using the second public key included in the root certificate, and the received server certificate verifies the second signature included in the intermediate certificate using the third public key included in the intermediate certificate, and if each verification is successful, the restriction on the device is canceled, and the second management device is a second secure storage unit storing a new third private key and a new third public key, wherein the new third private key and the new third public key are the third a second secure storage unit having a function of preventing it from being taken out of the second secure storage unit; and a second storage unit, wherein the information processing method is stored in the external storage device from the external storage device. acquiring the server certificate, storing the acquired server certificate in the second storage unit; transmitting the new third public key to the first management device; generating a new second signature for the first public key included in the server certificate stored in the unit using the new third private key; the first public key; , sending a new server certificate containing the new second signature and a new intermediate certificate received from the first management device to the information terminal, wherein the new intermediate certificate is , the new third public key, and a new first signature for the new third public key generated using the second private key.

A program according to one aspect of the present invention is a program for causing a computer to execute the information processing method.

The information processing system, etc. according to one aspect of the present invention can continue to operate even if it is difficult to hand over the key information.

FIG. 1 is an external view of an information processing system according to an embodiment. FIG. 2 is a block diagram of the functional configuration of the information processing system according to the embodiment. FIG. 3 is a sequence diagram of the first half of operation example 1 of the information processing system according to the embodiment. FIG. 4 is a sequence diagram of the second half of operation example 1 of the information processing system according to the embodiment. FIG. 5 is a diagram showing an example of the format of a server certificate. FIG. 6 is a sequence diagram of the first half of Operation Example 2 of the information processing system according to the embodiment. FIG. 7 is a sequence diagram of the latter half of Operation Example 2 of the information processing system according to the embodiment. FIG. 8 is a sequence diagram of operation example 3 of the information processing system according to the embodiment. FIG. 9 is a sequence diagram of operation example 4 of the information processing system according to the embodiment. FIG. 10 is a sequence diagram of operation example 5 of such an information processing system.

Hereinafter, embodiments will be specifically described with reference to the drawings. It should be noted that the embodiments described below are all comprehensive or specific examples. Numerical values, shapes, materials, components, arrangement positions and connection forms of components, steps, order of steps, and the like shown in the following embodiments are examples and are not intended to limit the present invention. Further, among the constituent elements in the following embodiments, constituent elements not described in independent claims will be described as optional constituent elements.

It should be noted that each figure is a schematic diagram and is not necessarily strictly illustrated. Moreover, in each figure, the same code|symbol is attached|subjected with respect to substantially the same structure, and the overlapping description may be abbreviate|omitted or simplified.

(Embodiment)
[composition]
First, the configuration of the information processing system according to the embodiment will be described. FIG. 1 is an external view of an information processing system according to an embodiment. FIG. 2 is a block diagram of the functional configuration of the information processing system according to the embodiment.

As shown in FIG. 1 , information processing system 10 according to the embodiment provides information terminal 20 with information terminal 20 to unlock electric lock 60 so that a visitor to facility 80 can unlock electric lock 60 with information terminal 20 . It is a system for granting authority (or locking authority). The information processing system 10 includes an information terminal 20, a first management device 30, a second management device 40, a control device 50, an electric lock 60, a first external storage device 71, and a second external storage device 72. Prepare. The control device 50 and the electric lock 60 are installed as an electric lock system on the door 81 (or door frame) in the facility 80, for example. The facility 80 is, for example, an apartment complex, but may be a facility other than a residence such as an office building.

The information terminal 20 is an information terminal that a visitor to the facility 80 uses to unlock the electric lock 60 . The information terminal 20 is, for example, a mobile information terminal such as a smart phone or a tablet terminal. The information terminal 20 includes an operation reception section 21 , a terminal communication section 22 , a terminal control section 23 and a terminal storage section 24 .

The operation reception unit 21 receives user operations. The operation reception unit 21 is implemented by, for example, a touch panel, but may be implemented by hardware keys or the like.

The terminal communication unit 22 is a communication circuit for the information terminal 20 to communicate with each of the first management device 30, the second management device 40, and the control device 50. For example, the terminal communication unit 22 performs wireless communication with the first management device 30 and the second management device 40 through a wide area communication network such as the Internet, and performs wireless communication with the control device 50 through a local communication network.

The terminal control unit 23 performs information processing and the like for unlocking the electric lock 60 . The terminal control unit 23 is implemented by, for example, a microcomputer, but may be implemented by a processor. The functions of the terminal control unit 23 are realized by, for example, executing a computer program stored in the terminal storage unit 24 by a microcomputer, processor, or the like that constitutes the terminal control unit 23 .

The terminal storage unit 24 is a storage device that stores the information necessary for the above information processing, the above computer programs, and the like. The terminal storage unit 24 is implemented by, for example, a semiconductor memory.

The first management device 30 is an information terminal used by the administrator of the facility 80 or the like. The manager or the like is the owner of the facility 80 or an employee of the management company of the facility 80 or the like. The first management device 30 is, for example, a portable information terminal such as a smart phone or a tablet terminal, but may be a stationary information terminal such as a personal computer or a server device. The first management device 30 includes a first communication section 31 , a first information processing section 32 , a first storage section 33 and a first secure storage section 34 .

The first communication unit 31 is a communication circuit for the first management device 30 to communicate with each of the information terminal 20, the second management device 40, and the control device 50. The first communication unit 31, for example, communicates with each of the information terminal 20, the second management device 40, and the control device 50 through the wide area communication network. The first communication unit 31 may perform wired communication or wireless communication.

The first information processing section 32 performs information processing for giving the information terminal 20 the authority to unlock the electric lock 60 . The first information processing unit 32 is implemented by, for example, a microcomputer, but may be implemented by a processor. The functions of the first information processing section 32 are realized, for example, by executing a computer program stored in the first storage section 33 by a microcomputer, processor, or the like that constitutes the first information processing section 32 .

The first storage unit 33 is a storage device that stores the information necessary for the information processing and the computer programs. The first storage unit 33 is implemented by, for example, an HDD (Hard Disk Drive), but may be implemented by a semiconductor memory.

The first secure storage unit 34 is a storage device that stores information that requires confidentiality, such as key information, among the information necessary for the above information processing. Specifically, the first secure storage unit 34 stores a second public key and a second secret key (described later). The first secure storage unit 34 is realized, for example, by a dedicated IC (hardware) having a security function called SE (Secure Element) used in smartphones and the like. The SE can obtain the processing result based on the information stored in the SE using an API (Application Programming Interface), but cannot directly refer to the information itself stored in the SE. The first information processing unit 32 uses an API to obtain the processing result based on the second private key and the second information necessary for generating a certificate (server certificate, root certificate, intermediate certificate, etc.). It is possible to obtain the public key, but it is not possible to refer to the second private key itself. In other words, the first secure storage unit 34 has a function of preventing the second secret key from being taken out to the outside of the first management device 30 . The first secure storage unit 34 is a storage device with higher security than the first storage unit 33 .

The second management device 40 is an information terminal used by residents of the facility 80. The second management device 40 is, for example, a portable information terminal, but may be a stationary information terminal such as a personal computer or a server device. The second management device 40 includes a second communication section 41 , a second information processing section 42 , a second storage section 43 and a second secure storage section 44 .

The second communication unit 41 is a communication circuit for the second management device 40 to communicate with each of the information terminal 20, the first management device 30, and the control device 50. The second communication unit 41, for example, communicates with each of the information terminal 20, the first management device 30, and the control device 50 through the wide area communication network. The second communication unit 41 may perform wired communication or wireless communication.

The second information processing unit 42 performs information processing to give the information terminal 20 the authority to unlock the electric lock 60 . The second information processing unit 42 is implemented by, for example, a microcomputer, but may be implemented by a processor. The functions of the second information processing section 42 are realized by, for example, executing a computer program stored in the second storage section 43 by a microcomputer, processor, or the like that constitutes the second information processing section 42 .

The second storage unit 43 is a storage device that stores the information necessary for the information processing, the computer programs, and the like. The second storage unit 43 is implemented by, for example, a semiconductor memory.

The second secure storage unit 44 is a storage device that stores information that requires confidentiality, such as key information, among the information necessary for the above information processing. Specifically, the second secure storage unit 44 stores a third public key and a third private key (described later). The second secure storage unit 44 is implemented by, for example, a dedicated IC (hardware) having a security function called SE used in smartphones and the like. The second information processing unit 42 obtains the processing result based on the third private key and the third public key necessary for generating the certificate (server certificate, intermediate certificate, etc.) using API. However, it is not possible to refer to the third private key itself. In other words, the second secure storage unit 44 has a function of preventing the third secret key from being taken out of the second management device 40 . The second secure storage unit 44 is a storage device with higher security than the second storage unit 43 .

The control device 50 is a control device that controls locking and unlocking of the electric lock 60 . The control device 50 is built into the door 81 or door frame, for example. The control device 50 includes a communication section 51 , a control section 52 and a storage section 53 .

The communication unit 51 is a communication circuit for the control device 50 to communicate with each of the information terminal 20, the first management device 30, and the second management device 40. For example, the communication unit 51 performs wireless communication with the information terminal 20 through the local communication network, and wireless communication with the first management apparatus 30 and the second management apparatus 40 through the wide area communication network.

The control unit 52 performs information processing for locking or unlocking the electric lock 60 . Specifically, the control unit 52 locks or unlocks the electric lock 60 by outputting a control signal to the electric lock 60 . The control unit 52 is implemented by, for example, a microcomputer, but may be implemented by a processor. The functions of the control unit 52 are realized by, for example, executing a computer program stored in the storage unit 53 by a microcomputer, processor, or the like that constitutes the control unit 52 .

The storage unit 53 is a storage device that stores the information necessary for the information processing, the computer programs, and the like. The storage unit 53 is implemented by, for example, a semiconductor memory.

The electric lock 60 locks or unlocks the door 81 based on the control signal output from the control section 52. Specifically, the electric lock 60 has an electric motor and a transmission mechanism that transmits the driving force of the electric motor to the deadbolt. The deadbolt moves to the locked position or the unlocked position by transmitting the driving force of the electric motor to the deadbolt via the transmission mechanism.

The first external storage device 71 is a storage device for backing up information stored in the first storage section 33 of the first management device 30 . The first external storage device 71 stores a server certificate, a root certificate, an intermediate certificate, and the like generated by the first information processing section 32 . The first external storage device 71 is, for example, a cloud server, and the first information processing unit 32 uploads information to the first external storage device 71 via the first communication unit 31, information can be downloaded from the first external storage device 71 using the The first external storage device 71 is not limited to a cloud server, and may be a recording medium directly connected to the first management device 30 such as an SD (Secure Digital) card.

The second external storage device 72 is a storage device for backing up information stored in the second storage section 43 of the second management device 40 . The server certificate generated by the second information processing unit 42 and the like are stored in the second external storage device 72 . The second external storage device 72 is, for example, a cloud server, and the second information processing unit 42 uploads information to the second external storage device 72 via the second communication unit 41, information can be downloaded from the second external storage device 72 by pressing the The second external storage device 72 is not limited to a cloud server, and may be a recording medium directly connected to the second management device 40 such as an SD card.

[Operation example 1]
Next, an operation example 1 of the information processing system 10 will be described. 3 and 4 are sequence diagrams of operation example 1 of the information processing system 10. FIG. In the following operation example 1, it is assumed that the information terminal 20 is used by a visitor to the facility 80 and the first management device 30 is used by a manager of the facility 80 or the like. The visitor is, for example, a person dispatched by a housekeeping service provider, or a parcel delivery person.

First, the operation until the server certificate is stored in the terminal storage unit 24 of the information terminal 20 will be described with reference to FIG. The server certificate serves as an unlocking permit for the electric lock 60 . As shown in FIG. 3, the terminal storage unit 24 of the information terminal 20 stores a first public key and a first secret key. The first public key and the first private key are generated, for example, when an application program (hereinafter simply referred to as an application) for using the information processing system 10 is installed in the information terminal 20, and stored in the terminal memory. Stored in unit 24 .

Also, the first secure storage unit 34 of the first management device 30 stores a second public key and a second secret key. The second public key and the second private key are stored in the first secure storage unit 34, for example, when an application for using the information processing system 10 is installed in the first management device 30. FIG.

First, the visitor performs a predetermined operation on the operation reception unit 21 of the information terminal 20 running the application. The prescribed operation is an operation for installing the server certificate. The operation reception unit 21 receives a predetermined operation (S11).

When the operation reception unit 21 receives a predetermined operation, the terminal control unit 23 generates a server certificate issuance request and causes the terminal communication unit 22 to transmit the generated issuance request to the first management device 30 . The issuance request includes the first public key. That is, the terminal communication unit 22 transmits the first public key to the first management device 30 (S12). Note that the terminal communication unit 22 transmits the first public key to the first management device 30 by wireless communication through the wide area communication network.

The first communication unit 31 of the first management device 30 receives the issue request including the first public key. When the administrator confirms the visitor's issuance request and permits the visitor to unlock the electric lock 60, the first information processing unit 32 sends the received first public key and the signature for the usage conditions to the second It is generated using a private key (S13). Also, the first information processing unit 32 causes the first communication unit 31 to transmit the server certificate including the first public key, the terms of use, and the signature to the information terminal 20 (S14). The usage condition is, for example, information indicating a temporal condition (in other words, expiration date), and is predetermined by, for example, an administrator who uses the first management device 30 or the like. Although not shown, the server certificate is stored in the first storage unit 33 .

　For example, the format of the server certificate is X. 509 certificates are used. FIG. 5 is a diagram showing an example of the format of a server certificate. The validity period of the certificate in FIG. 5 corresponds to the usage conditions, the subject public key information corresponds to the first public key, and the signatureValue corresponds to the signature. Note that usage conditions other than the expiration date may be stored in the extended area of the format in FIG.

The terminal communication unit 22 of the information terminal 20 receives the server certificate. The terminal control unit 23 stores the received server certificate in the terminal storage unit 24 (S15).

Next, the operation until the electric lock 60 is unlocked using the server certificate will be described with reference to FIG. As shown in FIG. 4, the storage unit 53 of the control device 50 stores a root certificate. A root certificate contains a second public key. The root certificate is generated, for example, by the first information processing unit 32 of the first management device 30 , transmitted to the control device 50 by the first communication unit 31 , and stored in the storage unit 53 . The root certificate may be stored in the storage unit 53 by manufacturing equipment when the control device 50 is manufactured. Note that the root certificate is also stored in the first storage unit 33 of the first management device 30 .

First, the visitor moves near the door 81 and performs a predetermined unlocking operation for unlocking the electric lock 60 on the operation reception unit 21 of the information terminal 20 running the application. The operation reception unit 21 receives an unlocking operation (S16). The door 81 is, for example, a door provided in a private portion of the facility 80 (see FIG. 1), but it may be a door provided in the entrance of the facility 80, or a door provided in a common portion other than the entrance. It may be a door that has been installed.

When the operation accepting unit 21 accepts the unlocking operation, the terminal control unit 23 causes the terminal communication unit 22 to transmit the server certificate to the control device 50 . That is, the terminal communication unit 22 transmits the server certificate to the control device 50 (S17). Note that the terminal communication unit 22 transmits the server certificate to the control device 50 by wireless communication through the local communication network. This wireless communication is, for example, short-range wireless communication based on a communication standard such as Bluetooth (registered trademark).

The communication unit 51 of the control device 50 receives the server certificate. The control unit 52 verifies the signature included in the received server certificate using the second public key included in the root certificate stored in the storage unit 53 (S18). If the signature verification is successful, the control unit 52 determines the usage conditions included in the server certificate (S19). As described above, the usage condition is, for example, a temporal condition, and the control unit 52 determines whether the temporal condition is satisfied. When determining that the timing requirements are satisfied, the control unit 52 generates a session key using the first public key included in the server certificate (S20). The control unit 52 encrypts the generated session key with the first public key, and causes the communication unit 51 to transmit the encrypted session key to the information terminal 20 (S21).

The terminal communication unit 22 of the information terminal 20 receives the encrypted session key. The terminal control unit 23 decrypts the session key using the first secret key, and causes the terminal communication unit 22 to transmit an unlock command to the control device 50 through encrypted communication using the session key (S22).

The communication unit 51 of the control device 50 receives the unlock command. The control unit 52 unlocks the electric lock 60 based on the received unlocking command (S23). Specifically, the control unit 52 unlocks the electric lock 60 by transmitting a control signal to the electric lock 60 . The information terminal 20 can also lock the electric lock 60 based on the same operation sequence.

Thus, in the information processing system 10, the first management device 30 can safely grant the unlocking authority of the electric lock 60 to the information terminal 20 using the server certificate and the root certificate.

Although not shown, the second control device 40 can safely authorize the information terminal 20 to unlock the electric lock 60 by using the server certificate and the root certificate in the same manner as the first control device 30. . That is, in the sequence diagram of FIG. 3, the first management device 30 and its components may be read as the second management device 40 and its components. For example, if the first management device 30 is used by an administrator of the facility 80 and the second management device 40 is used by a resident of the facility 80, each of the administrator and the occupants may ask the visitor to enter the facility 80. Permissions can be granted.

In addition, a root certificate (second public key) corresponding to the first management device 30 and a root certificate (third public key) corresponding to the second management device 40 are stored in the storage unit 53 of the control device 50. is stored, both the visitor granted entry authority by the administrator and the visitor granted entry authority by the resident unlock the electric lock 60 using their own information terminal 20. can do.

It should be noted that the control target of the control device 50 is not limited to the electric lock 60. The control device 50 may control a device that restricts entry to or exit from the space within the facility 80. For example, the control device 50 controls the opening and closing of an automatic door provided at the entrance of the facility 80. You may

[Operation example 2]
Next, an operation example 2 of the information processing system 10 will be described. 6 and 7 are sequence diagrams of operation example 2 of the information processing system 10. FIG. The following operation example 2 is an operation example in which the first management device 30 functions as a root CA (Certification Authority) and the second management device 40 functions as an intermediate CA. In operation example 2, the information terminal 20 is used by a visitor to the facility 80, and the first management device 30 is used by the administrator of the facility 80 (the owner of the facility 80 or the employee of the management company of the facility 80). is described as being used by The second management device 40 is described as being used by residents of the facility 80 or the like. In addition, in the description of the operation example 2, the description of the items described in the operation example 1 will be omitted as appropriate.

First, the operation until the intermediate certificate is stored in the second storage unit 43 of the second management device 40 will be described with reference to FIG. As shown in FIG. 6, the first secure storage unit 34 of the first management device 30 stores a second public key and a second private key. A third public key and a third private key are stored in the second secure storage unit 44 of the second management device 40 . The terminal storage unit 24 of the information terminal 20 stores a first public key and a first secret key.

First, the second information processing unit 42 of the second management device 40 generates an intermediate certificate issuance request based on the operation of the resident, etc., and sends the generated issuance request to the second communication unit 41 of the first management device. 30. The issuance request includes the third public key. That is, the second communication unit 41 transmits the third public key to the first management device 30 (S31). In addition, the second communication unit 41 transmits the third public key to the first management device 30 by communication through the wide area communication network.

The first communication unit 31 of the first management device 30 receives the issue request including the third public key. When the administrator confirms the resident's request for issuance and permits the resident to issue the server certificate, the first information processing unit 32 receives the third public key and the first signature for the first usage conditions. is generated using the second secret key (S32). In addition, the first information processing unit 32 causes the first communication unit 31 to transmit the intermediate certificate including the third public key, the first usage conditions, and the first signature to the second management device 40 (S33 ). The first use condition is, for example, information indicating a temporal condition (in other words, expiration date), and is predetermined by, for example, an administrator who uses the first management device 30 or the like. Although not shown, the intermediate certificate is stored in the first storage unit 33 .

As for the format of the intermediate certificate, for example, the X. 509 certificates are used.

The second communication unit 41 of the second management device 40 receives the intermediate certificate. The second information processing unit 42 stores the received intermediate certificate in the second storage unit 43 (S34).

After that, the visitor performs a predetermined operation on the operation reception unit 21 of the information terminal 20 that is running the application. The prescribed operation is an operation for installing the server certificate and the intermediate certificate. The operation reception unit 21 receives a predetermined operation (S35).

When the unlocking operation is accepted by the operation accepting unit 21, the terminal control unit 23 generates an issue request for the server certificate and the intermediate certificate, and transmits the created issue request to the terminal communication unit 22 to the second management device 40. Let The issuance request includes the first public key. That is, the terminal communication unit 22 transmits the first public key to the second management device 40 (S36). Note that the terminal communication unit 22 transmits the first public key to the second management device 40 by wireless communication through the wide area communication network.

The second communication unit 41 of the second management device 40 receives the issue request including the first public key. When the resident confirms the visitor's issuance request and permits the visitor to unlock the electric lock 60, the second information processing unit 42 receives the first public key and the second usage condition for the second usage condition. A signature is generated using the third private key (S37). In addition, the second information processing unit 42 stores the server certificate including the first public key, the second terms of use, and the second signature received in step S33 (in other words, stored in the second storage unit 43). stored) to the information terminal 20 (S38). The second usage condition is, for example, information indicating a temporal condition (in other words, expiration date), and is predetermined by the resident who uses the second management device 40, for example. Although not shown, the server certificate is stored in the second storage unit 43 . Note that the format of the server certificate is, for example, X. 509 certificates are used.

The terminal communication unit 22 of the information terminal 20 receives the server certificate and the intermediate certificate. The terminal control unit 23 stores the received server certificate and intermediate certificate in the terminal storage unit 24 (S39).

Next, the operation until the electric lock 60 is unlocked using the server certificate and the intermediate certificate will be described with reference to FIG. As shown in FIG. 7, the storage unit 53 of the control device 50 stores a root certificate. In operation example 2, the root certificate includes the second public key. The root certificate is generated, for example, by the first information processing unit 32 of the first management device 30 , transmitted to the control device 50 by the first communication unit 31 , and stored in the storage unit 53 . The root certificate may be stored in the storage unit 53 by manufacturing equipment when the control device 50 is manufactured. Note that the root certificate is also stored in the first storage unit 33 of the first management device 30 .

The visitor moves near the door 81 and performs a predetermined unlocking operation for unlocking the electric lock 60 on the operation reception unit 21 of the information terminal 20 running the above application. The operation accepting unit 21 accepts an unlocking operation (S40). When the operation accepting unit 21 accepts the unlocking operation, the terminal control unit 23 causes the terminal communication unit 22 to transmit the server certificate and the intermediate certificate to the control device 50 . That is, the terminal communication unit 22 transmits the server certificate and the intermediate certificate to the control device 50 (S41). Note that the terminal communication unit 22 transmits the server certificate and the intermediate certificate to the control device 50 by wireless communication through the local communication network.

The communication unit 51 of the control device 50 receives the server certificate and the intermediate certificate. Control unit 52 verifies the first signature included in the received intermediate certificate using the second public key included in the root certificate stored in storage unit 53 (S42). If the verification of the first signature is successful, the control unit 52 determines the first use condition included in the intermediate certificate (S43).

If the determination of the first usage condition is successful, the control unit 52 verifies the second signature included in the received server certificate using the third public key included in the intermediate certificate (S44 ). If the verification of the second signature is successful, the control unit 52 determines the second usage conditions included in the server certificate (S45). Subsequent steps S46 to S49 are the same as steps S20 to S23 in Operation Example 1, and the electric lock 60 is finally unlocked. The information terminal 20 can also lock the electric lock 60 based on the same operation sequence.

Thus, in the information processing system 10, the second control device 40 can grant the unlocking authority of the electric lock 60 to the information terminal 20. Although not shown, the first management device 30 may issue a server certificate to the second management device 40 in the second operation example. In this case, the second control device 40 can unlock the electric lock 60 by acquiring the server certificate issued by the first control device 30 and transmitting it to the control device 50 . That is, in the operation example 2, the first management device 30 gives the second management device 40 the authority to unlock the electric lock 60 and the authority to issue the server certificate (the authority to unlock the electric lock for the information terminal 20). authorization) can be granted.

As described above, when the user of the second management device 40 is a resident, the resident can unlock the electric lock 60 of the private area contracted by the resident while staying in the facility 80, Also, while staying in the facility 80, the visitor can be permitted to unlock the electric lock 60 of the private portion. Note that the server certificate issued by the second management device 40 can be invalidated by the first management device 30 .

[Operation Example 3]
In the information processing system 10 , the first secure storage section 34 is used to prevent leakage of key information stored in the first management device 30 . When the first management device 30 is a smartphone, the use of a smartphone-standard SE as the first secure storage unit 34 has the advantage of enabling protection of key information while suppressing cost increases.

However, the key information stored in the first secure storage unit 34 cannot be retrieved outside the first management device 30. In other words, the key information stored in the first secure storage section 34 cannot be backed up. Then, when the first management device 30 is changed to a new first management device 30 due to model change or failure, the problem is that the key information cannot be handed over to the new first management device 30 .

Therefore, in the following operation example 3, the operation when the first management apparatus 30 is changed to a new first management apparatus 30 in the configuration in which the information processing system 10 executes the operation example 1 will be described. FIG. 8 is a sequence diagram of operation example 3 of the information processing system 10 . In the following description of FIG. 8, the new first management device 30 is simply referred to as the first management device 30, and the first management device 30 that has been used until then is referred to as the old first management device 30, etc. do.

The administrator installs an application for using the information processing system 10 on the first management device 30 . As a result, a new second public key and a new second secret key are stored in the first secure storage unit 34 of the first management device 30 (S51).

Next, the first information processing unit 32 of the first management device 30 acquires the server certificate and root certificate stored in the first external storage device 71 from the first external storage device 71, and acquires the acquired server certificate. And the root certificate is stored in the first storage unit 33 (S52). The server certificate and root certificate acquired in step S52 are the server certificate and root certificate generated by the old first management device 30 and backed up in the first external storage device 71 . Specifically, the first information processing section 32 acquires the server certificate and the root certificate from the first external storage device 71 via the first communication section 31 .

Next, the first information processing section 32 generates a new signature (S53). The first information processing unit 32 generates a new signature for the first public key included in the server certificate stored in the first storage unit 33 in step S52 using the new second private key. The first information processing unit 32 also causes the first communication unit 31 to transmit the first public key and a new server certificate including the new signature to the information terminal 20 (S54). It should be noted that, as in the first operation example, the server certificate may include usage conditions.

The terminal communication unit 22 of the information terminal 20 receives the new server certificate. The terminal control unit 23 stores the received new server certificate in the terminal storage unit 24 (S55).

Further, the first information processing unit 32 generates a new root certificate including the new second public key (S56), and sends the generated new root certificate to the control device 50 via the first communication unit 31. Send (S57). In other words, the first communication unit 31 transmits the new root certificate generated by the first information processing unit 32 to the control device 50 .

The communication unit 51 of the control device 50 receives the new root certificate. The control unit 52 stores the received new root certificate in the storage unit 53 (S58).

Next, the first information processing unit 32 of the first management device 30 causes the first communication unit 31 to transmit a deletion command for deleting the old root certificate stored in the storage unit 53 to the control device 50 ( S59). In other words, the first communication unit 31 transmits a deletion command to the control device 50 .

The communication unit 51 of the control device 50 receives the deletion command. The control unit 52 cancels (deletes) the old root certificate from the storage unit 53 based on the received deletion command (S60). As a result, even if the control device 50 receives an old server certificate from the information terminal 20, the electric lock 60 will not be unlocked.

According to the operation example 3 described above, even if the key information stored in the first secure storage unit 34 of the old first management device 30 cannot be retrieved, the information processing system 10 A new root certificate and server certificate corresponding to the new key information stored in the first secure storage unit 34 of the can be generated. That is, the information processing system 10 can be continuously operated even if a new first management apparatus 30 is introduced.

The order of the processing of steps S51 to S60, particularly the order of the processing of steps S53 to S60, may be arbitrarily changed within a possible range. Here, in the example of FIG. 8 , after the new root certificate is sent to the control device 50 , the deletion command is sent to the control device 50 . That is, after the new root certificate is stored in the storage unit 53, the old root certificate is deleted. As a result, both the old root certificate and the new root certificate are stored in the storage unit 53 of the control device 50 during the period T1 from step S58 to step S60.

Then, during the period T1, it is possible to unlock the electric lock 60 with both the information terminal 20 in which the new server certificate is stored and the information terminal 20 in which the old server certificate is stored. In other words, the information processing system 10 can provide a root certificate migration period. In the period before the period T1, the electric lock 60 can be unlocked by the information terminal 20 in which the old server certificate is stored, and in the period after the period T1, the new server certificate It is possible to unlock the electric lock 60 by the information terminal 20 in which is stored.

Note that if it takes time to update the server certificates of many information terminals 20 (many visitors) to new server certificates, the old root certificate will be replaced after a transition period is provided as described above. It is also possible to operate such as updating so that the expiration date is shortened.

Further, when it is desired to immediately prohibit the unlocking of the electric lock 60 by the old server certificate, a deletion command is sent to the control device 50 before the new root certificate is sent to the control device 50. Just do it. In other words, the old root certificate should be deleted before the new root certificate is stored in the storage unit 53 .

[Operation example 4]
Next, the operation when the first management apparatus 30 is changed to a new first management apparatus 30 in the configuration in which the information processing system 10 executes Operation Example 2 will be described. FIG. 9 is a sequence diagram of operation example 4 of such an information processing system 10 . In the following description of FIG. 9, the new first management device 30 is simply referred to as the first management device 30, and the first management device 30 that has been used is referred to as the old first management device 30, etc. do.

The administrator installs an application for using the information processing system 10 on the first management device 30 . As a result, a new second public key and a new second secret key are stored in the first secure storage unit 34 of the first management device 30 (S61).

Next, the first information processing unit 32 of the first management device 30 acquires the intermediate certificate and root certificate stored in the first external storage device 71 from the first external storage device 71, and acquires the acquired intermediate certificate. And the root certificate is stored in the first storage unit 33 (S62). The intermediate certificate and root certificate acquired in step S62 are the intermediate certificate and root certificate generated by the old first management device 30 and backed up in the first external storage device 71 . Note that the first information processing unit 32 specifically acquires the intermediate certificate and the root certificate from the first external storage device 71 via the first communication unit 31 .

Next, the first information processing section 32 generates a new first signature (S63). The first information processing unit 32 creates a new first signature for the third public key included in the intermediate certificate stored in the first storage unit 33 in step S62 using the new second private key. Generate. Also, the first information processing unit 32 causes the first communication unit 31 to transmit the third public key and the new intermediate certificate including the new first signature to the second management device 40 (S64). . It should be noted that the intermediate certificate may include the first terms of use, as in Operation Example 2.

The second communication unit 41 of the second management device 40 receives the new intermediate certificate. The second information processing unit 42 stores the new intermediate certificate received by the second communication unit 41 in the second storage unit 43 (S65). At this time, the old intermediate certificate stored in the second storage unit 43 may be deleted. That is, intermediate certificates may be replaced.

In addition, the second information processing unit 42 transfers the new intermediate certificate stored in step S65 and the server certificate originally stored in the second storage unit 43 to the information terminal 20 via the second communication unit 41. Send (S66). It should be noted that at least the intermediate certificate should be transmitted in step S66. In other words, the second communication unit 41 should just transmit the intermediate certificate to the information terminal 20 .

The terminal communication unit 22 of the information terminal 20 receives the new intermediate certificate and server certificate. The terminal control unit 23 stores the received new intermediate certificate in the terminal storage unit 24 (S67). Note that the terminal storage unit 24 also stores a server certificate.

Further, the first information processing unit 32 generates a new root certificate including the new second public key (S68), and transmits the generated new root certificate to the first communication unit 31 to the control device 50. Send (S69). In other words, the first communication unit 31 transmits the new root certificate generated by the first information processing unit 32 to the control device 50 .

The communication unit 51 of the control device 50 receives the new root certificate. Control unit 52 stores the received new root certificate in storage unit 53 (S70).

Next, the first information processing unit 32 of the first management device 30 causes the first communication unit 31 to transmit a deletion command for deleting the old root certificate stored in the storage unit 53 to the control device 50 ( S71). In other words, the first communication unit 31 transmits a deletion command to the control device 50 .

The communication unit 51 of the control device 50 receives the deletion command. The control unit 52 cancels (deletes) the old root certificate from the storage unit 53 based on the received deletion command (S72). As a result, even if the control device 50 receives an old server certificate from the information terminal 20, the electric lock 60 will not be unlocked.

According to the operation example 4 described above, even if the key information stored in the first secure storage unit 34 of the old first management device 30 cannot be retrieved, the first secure storage unit of the new first management device 30 New root and intermediate certificates corresponding to the new key information stored in 34 can be generated. That is, the information processing system 10 can be continuously operated even if a new first management apparatus 30 is introduced.

The order of the processing of steps S61 to S72, particularly the order of the processing of steps S63 to S72 may be arbitrarily changed within a possible range. Here, in the example of FIG. 9 , after the new root certificate is sent to the control device 50 , the deletion command is sent to the control device 50 . That is, after the new root certificate is stored in the storage unit 53, the old root certificate is deleted. As a result, both the old root certificate and the new root certificate are stored in the storage unit 53 of the control device 50 during the period T2 from step S70 to step S72.

Then, during period T2, it is possible to unlock the electric lock 60 with both the information terminal 20 storing the new intermediate certificate and the information terminal 20 storing the old intermediate certificate. In other words, the information processing system 10 can provide a root certificate migration period. In the period before the period T2, the electric lock 60 can be unlocked by the information terminal 20 in which the old intermediate certificate is stored, and in the period after the period T2, the new intermediate certificate It is possible to unlock the electric lock 60 by the information terminal 20 in which is stored.

If it is desired to immediately prohibit the unlocking of the electric lock 60 by the old intermediate certificate, a deletion command is sent to the control device 50 before the new root certificate is sent to the control device 50. Just do it. In other words, the old root certificate should be deleted before the new root certificate is stored in the storage unit 53 .

[Operation Example 5]
In the information processing system 10 , the second secure storage unit 44 is used to prevent leakage of key information stored in the second management device 40 . When the second management device 40 is a smartphone, the use of a smartphone standard SE as the second secure storage unit 44 has the advantage of enabling protection of key information while suppressing cost increases.

However, the key information stored in the second secure storage unit 44 cannot be retrieved outside the second management device 40. In other words, the key information stored in the second secure storage section 44 cannot be backed up. Then, when the second management device 40 is changed to a new second management device 40 due to model change or failure, the problem is that the key information cannot be handed over to the new second management device 40 .

Therefore, in the following operation example 5, the operation when the second management apparatus 40 is changed to a new second management apparatus 40 in the configuration in which the information processing system 10 executes the operation example 2 will be described. FIG. 10 is a sequence diagram of operation example 4 of such an information processing system 10 . In the following description of FIG. 10, the new second management device 40 is simply referred to as the second management device 40, and the second management device 40 that has been used until then is referred to as the old second management device 40, etc. do.

A resident installs an application for using the information processing system 10 on the second management device 40 . As a result, a new third public key and a new third private key are stored in the second secure storage unit 44 of the second management device 40 (S81).

Next, the second information processing unit 42 of the second management device 40 generates an intermediate certificate issuance request based on the operation of the resident, etc., and sends the generated issuance request to the second communication unit 41 for the first management. It is transmitted to the device 30 (S82). The issuance request includes a new third public key.

The first communication unit 31 of the first management device 30 receives the issue request including the new third public key. When the manager confirms the resident's request for issuance and permits the resident to issue the server certificate, the first information processing unit 32 adds a new first signature to the received new third public key. It is generated using the second secret key (S83). The first information processing unit 32 also causes the first communication unit 31 to transmit the third public key and the new intermediate certificate including the first signature to the second management device 40 (S84). As in Operation Example 2, the new intermediate certificate may include the first terms of use.

The second communication unit 41 of the second management device 40 receives the new intermediate certificate. The second information processing unit 42 stores the received intermediate certificate in the second storage unit 43 (S85).

Next, the second information processing unit 42 of the second management device 40 acquires the server certificate stored in the second external storage device 72 from the second external storage device 72, and stores the acquired server certificate in the second storage. The data is stored in the unit 43 (S86). The server certificate acquired in step S86 is the server certificate generated by the old second management device 40 and backed up in the second external storage device 72 . Note that the second information processing unit 42 specifically acquires the server certificate from the second external storage device 72 via the second communication unit 41 .

Next, the second information processing unit 42 generates a new second signature (S87). The second information processing unit 42 creates a new second signature for the first public key included in the server certificate stored in the second storage unit 43 in step S86 using the new third private key. Generate. Also, the second information processing unit 42 receives the first public key and the new server certificate including the new second signature in step S84 (stored in the second storage unit 43 in step S85). b) causes the second communication unit 41 to transmit the new intermediate certificate to the information terminal 20 (S88). It should be noted that the new server certificate may include the second terms of use, as in the second operation example.

The terminal communication unit 22 of the information terminal 20 receives the new server certificate and the new intermediate certificate. The terminal control unit 23 stores the received new server certificate and new intermediate certificate in the terminal storage unit 24 (S89).

Also, the first information processing unit 32 of the first management device 30 causes the first communication unit 31 to transmit a revocation command for revoking the old intermediate certificate to the control device 50 (S90). In other words, the first communication unit 31 transmits an invalidation command to the control device 50 . The revocation command is, for example, information indicating a list of intermediate certificates to be revoked, and more specifically, a CRL (Certificate Revocation List) or the like is used.

The communication unit 51 of the control device 50 receives the invalidation command. The control unit 52 revokes the old intermediate certificate after receiving the revocation command (S91). More specifically, the control device 50 will not unlock the electric lock 60 even if the old intermediate certificate is received from the information terminal 20 .

According to Operation Example 5 as described above, even if the key information stored in the second secure storage unit 44 of the old second management device 40 cannot be extracted, the information processing system 10 can A new server certificate and intermediate certificate corresponding to the new key information stored in the second secure storage unit 44 of the can be generated. That is, the information processing system 10 can be continuously operated even if a new second management device 40 is introduced.

The order of the processing of steps S81 to S91, particularly the order of the processing of steps S83 to S91 may be arbitrarily changed within a possible range. Here, in the example of FIG. 10 , after a new certificate (new server certificate and new intermediate certificate) is sent to information terminal 20 , a revocation command is sent to control device 50 . That is, after the new certificate is stored in the terminal storage unit 24, the old intermediate certificate is revoked. As a result, in the period T3 from step S89 to step S91, the electric lock 60 can be unlocked by both the information terminal 20 storing the new certificate and the information terminal 20 storing the old certificate. becomes possible. In other words, the information processing system 10 can provide a certificate transition period. In the period after period T3, the electric lock 60 can be unlocked by the information terminal 20 in which the new certificate is stored.

If it is desired to immediately prohibit the unlocking of the electric lock 60 using the old certificate, the revocation command may be sent to the control device 50 before the new certificate is sent to the information terminal 20. . In other words, the old intermediate certificate should be revoked before the new certificate is stored in the terminal storage unit 24 .

(Modification)
In the above embodiment, the usage conditions were included in the server certificate, but the usage conditions may be transmitted from the information terminal 20 to the control device 50 by a secure method separately from the server certificate. For example, after step S21 in FIG. 4, the usage conditions may be transmitted from the information terminal 20 to the control device 50 together with the signature of the first management device 30 through encrypted communication using a session key. By separating the server certificate and the terms of use, it is possible to flexibly add or change the terms of use without reissuing the server certificate.

Further, in the above embodiment, the control device 50 (the second management device 40 and the control device 50 in the information processing system 10a) uses the electric lock 60 or the automatic door to prevent people from entering and exiting the space in the facility 80. Although the device for restricting is controlled, the device for restricting entry and exit of articles may be controlled. For example, the control device 50 may control an electric lock that locks and unlocks the door of a delivery box, coin locker, safe deposit box, or the like. In other words, the control device 50 may control equipment that restricts the entry and exit of goods or people into and out of the space.

In addition, the information processing system 10 and the information processing system 10a can be used not only for equipment that restricts the entry and exit of goods or people from the space, but also for the case where only a specific person is permitted to control home appliances such as lighting equipment and air conditioners. Applicable.

Further, although not shown in the above embodiment, after transmitting the server certificate in step S17 and step S41, the control device 50 transmits pseudo information including random numbers to the information terminal 20, and the information terminal 20 receives The pseudo information obtained may be signed with the first secret key and transmitted to the control device 50 . In steps S18 and S42, the control device 50 verifies the signature received from the information terminal 20 using the first public key included in the server certificate, thereby preventing certificate theft. is.

Also, by verifying the ID of the control device 50 included in the server certificate in steps S19 and S43, it is possible to prevent diversion of certificates for other control devices.

Also, in the above embodiment, the information terminal 20 does not include a secure storage unit, but may include a secure storage unit (hereinafter also referred to as a terminal secure storage unit). For example, the terminal secure storage unit specifically stores a first public key and a first secret key. The terminal secure storage unit is realized, for example, by a dedicated IC having a security function called SE used in smartphones and the like. The terminal control unit 23 can use the API to obtain the processing result based on the first private key and the first public key necessary for generating the server certificate. You can't refer to it. In other words, the terminal secure storage unit has a function of preventing the first secret key from being taken out of the information terminal 20 . The terminal secure storage unit is a storage device with higher security than the terminal storage unit 24 .

[Effects, etc.]
As described above, the information processing system 10 is used to release restrictions on devices that restrict the entry and exit of goods or people into and out of space. The information processing system 10 includes an information terminal 20 , a first management device 30 and a control device 50 . The information terminal 20 has a first private key, a first public key, and a server certificate containing a signature for the first public key generated using the first public key and the second private key. and a terminal communication unit 22 that transmits the server certificate to the control device 50 . The control device 50 includes a storage unit 53 storing a root certificate including a second public key corresponding to the second private key, a communication unit 51 receiving the server certificate from the information terminal 20, and a a control unit 52 for verifying the signature included in the server certificate using the second public key included in the root certificate stored in the storage unit 53, and canceling the restriction of the device when the verification is successful. . The first management device 30 is a first secure storage unit 34 in which a new second private key and a new second public key are stored, and stores the new second private key and the new second public key. A first secure storage unit 34 having a function to prevent the key from being taken out to the outside of the first secure storage unit 34, a first storage unit 33, and stored from the first external storage device 71 to the first external storage device 71. a first information processing unit 32 that acquires the server certificate and the root certificate that have been acquired and stores the acquired server certificate and root certificate in the first storage unit 33; and a first communication unit 31 that transmits a new root certificate, which is a root certificate generated by the first information processing unit 32 , to the control device 50 . The first information processing unit 32 generates a new signature for the first public key included in the server certificate stored in the first storage unit 33 using the new second private key, and publishes the first public key. It causes the first communication unit 31 to transmit the key and the new server certificate including the new signature to the information terminal 20 .

Even if the old first management device 30 is replaced with a new first management device 30, such an information processing system 10 can grant the information terminal 20 the authority to release the restrictions on the entry and exit of goods or people. can.

Also, for example, after transmitting the new root certificate to the control device 50 , the first communication unit 31 transmits to the control device 50 a deletion command for deleting the root certificate stored in the storage unit 53 .

Such an information processing system 10 can provide a root certificate migration period.

Further, for example, the first communication unit 31 transmits a deletion command for deleting the root certificate stored in the storage unit 53 to the control device 50 before transmitting the new root certificate to the control device 50. .

Such an information processing system 10 can quickly prohibit the use of old root certificates.

In addition, the information processing system 10 is used to release restrictions on devices that restrict the entry and exit of goods or people into and out of space. The information processing system 10 includes an information terminal 20 , a first management device 30 , a second management device 40 and a control device 50 . The second management device 40 stores a third secret key and a third public key. The information terminal 20 generates an intermediate signature containing a first signature for a third public key generated using a first private key, a first public key, a third public key, and the second private key. a terminal storage unit 24 storing a certificate, a first public key, and a server certificate including a second signature for the first public key generated using a third private key; a server; and a terminal communication unit 22 that transmits the certificate and the intermediate certificate to the control device 50 . The control device 50 includes a storage unit 53 storing a root certificate including a second public key corresponding to the second private key, and a communication unit 51 receiving a server certificate and an intermediate certificate from the information terminal 20. , verifying the first signature contained in the received intermediate certificate using the second public key contained in the root certificate, and applying the second signature contained in the received server certificate to the intermediate certificate and a control unit 52 that verifies using the included third public key and cancels the restriction of the device when each verification is successful. The first management device 30 is a first secure storage unit 34 in which a new second private key and a new second public key are stored, and stores the new second private key and the new second public key. A first secure storage unit 34 having a function to prevent the key from being taken out to the outside of the first secure storage unit 34, a first storage unit 33, and stored from the first external storage device 71 to the first external storage device 71. a first information processing unit 32 that acquires the obtained intermediate certificate and root certificate and stores the acquired intermediate certificate and root certificate in the first storage unit 33; and a first communication unit 31 that transmits a new root certificate, which is a new root certificate generated by the first information processing unit 32 , to the control device 50 . The first information processing unit 32 generates a new first signature for the third public key included in the intermediate certificate stored in the first storage unit 33 using the new second private key, The third public key and a new intermediate certificate containing the new first signature are transmitted to the second management device 40 by the first communication unit 31, and the second management device 40 transmits the new intermediate certificate. It has a second communication unit 41 that receives from the first management device and transmits the received new intermediate certificate to the information terminal 20 .

Even if the old first management device 30 is replaced with a new first management device 30, such an information processing system 10 can grant the information terminal 20 the authority to release the restrictions on the entry and exit of goods or people. can.

Further, for example, after transmitting the new intermediate certificate to the second management device 40, the first communication unit 31 transmits a deletion command for deleting the root certificate stored in the storage unit 53 to the control device 50. do.

Such an information processing system 10 can provide a root certificate migration period.

Further, for example, the first communication unit 31 sends a deletion command to the control device 50 to delete the root certificate stored in the storage unit 53 before transmitting the new intermediate certificate to the second management device 40. Send.

Such an information processing system 10 can quickly prohibit the use of old root certificates.

In addition, the information processing system 10 is used to release restrictions on devices that restrict the entry and exit of goods or people into and out of space. The information processing system 10 includes an information terminal 20 , a first management device 30 , a second management device 40 and a control device 50 . The first management device 30 stores a second secret key and a second public key. The information terminal 20 generates an intermediate signature containing a first signature for a third public key generated using a first private key, a first public key, a third public key, and the second private key. A certificate and a server certificate including a second signature for the first public key generated using a first public key and a third private key corresponding to the third public key are stored. and a terminal communication unit 22 for transmitting the server certificate and the intermediate certificate to the control device 50 . The control device 50 includes a storage unit 53 that stores a root certificate including a second public key, a communication unit 51 that receives a server certificate and an intermediate certificate from the information terminal 20, and a verifying the contained first signature using the second public key contained in the root certificate, and verifying the second signature contained in the received server certificate with the third public key contained in the intermediate certificate; and a control unit 52 that verifies using the device, and cancels the restriction on the device if each verification succeeds. The second management device 40 is a second secure storage unit 44 in which a new third private key and a new third public key are stored. A second secure storage unit 44 having a function to prevent the key from being taken out to the outside of the second secure storage unit 44, a second storage unit 43, and stored from the second external storage device 72 to the second external storage device 72. a second information processing unit 42 that acquires the server certificate obtained and stores the acquired server certificate in the second storage unit 43; and a second communication that transmits a new third public key to the first management device 30. a portion 41; The first management device 30 receives the third public key from the second management device 40, and converts the new first signature for the received new third public key into the second secret key. and causes the first communication unit 31 to transmit a new intermediate certificate including a new third public key and a new first signature to the second management device 40, and the second information processing The unit 42 generates a new second signature for the first public key included in the server certificate stored in the second storage unit 43 using the new third private key, and generates the first public key , and the new server certificate including the new second signature and the new intermediate certificate received from the first management device 30 are transmitted to the information terminal 20 by the second communication unit 41 .

Even if the old second management device 40 is replaced with a new second management device 40, such an information processing system 10 can grant the information terminal 20 the authority to release the restrictions on the entry and exit of goods or people. can.

Also, for example, after transmitting the new intermediate certificate to the second management device 40, the first communication unit 31 transmits to the control device 50 a revocation command for revoking the intermediate certificate.

Such an information processing system 10 can provide a transition period for intermediate certificates.

Also, for example, the first communication unit 31 transmits a revocation command for revoking the intermediate certificate to the control device 50 before transmitting the new intermediate certificate to the second management device 40 .

Such an information processing system 10 can quickly prohibit the use of old intermediate certificates.

In addition, the first management device 30 is used to grant the information terminal 20 the authority to release restrictions on devices that restrict the entry and exit of goods or people into and out of the space. The information terminal 20 has a first private key, a first public key, and a server certificate containing a signature for the first public key generated using the first public key and the second private key. is stored, and the server certificate is transmitted to the control device 50 that controls the device in order to release the restriction. The control device 50 stores a root certificate including the second public key corresponding to the second private key, and when receiving the server certificate from the information terminal 20, the signature included in the received server certificate is verified using the second public key included in the root certificate, and if the verification succeeds, the restrictions on the device are lifted. The first management device 30 is a first secure storage unit 34 in which a new second private key and a new second public key are stored, and stores the new second private key and the new second public key. A first secure storage unit 34 having a function to prevent the key from being taken out to the outside of the first secure storage unit 34, a first storage unit 33, and stored from the first external storage device 71 to the first external storage device 71. a first information processing unit 32 that acquires the server certificate and the root certificate that have been acquired and stores the acquired server certificate and root certificate in the first storage unit 33; and a first communication unit 31 that transmits a new root certificate, which is a root certificate generated by the first information processing unit 32 , to the control device 50 . The first information processing unit 32 generates a new signature for the first public key included in the server certificate stored in the first storage unit 33 using the new second private key, and publishes the first public key. It causes the first communication unit 31 to transmit the key and the new server certificate including the new signature to the information terminal 20 .

Such a first management device 30, when newly introduced into the information processing system 10, can grant the information terminal 20 the authority to release restrictions on the entry and exit of goods or people.

In addition, the first management device 30 is one of the first management device 30 and the second management device 40 used for granting the information terminal 20 the authority to release the restriction on the equipment that restricts the entry and exit of goods or people into and out of the space. is the first management device 30 of. The second management device 40 stores a third private key and a third public key, and the information terminal 20 stores the first private key, the first public key, the third public key, and an intermediate certificate containing a first signature to a third public key generated using a second private key; a first public key; and a first certificate generated using the third private key It stores a server certificate containing a second signature on the public key, and transmits the server certificate and the intermediate certificate to the control device 50 that controls the device in order to remove the restriction. The control device 50 stores a root certificate including a second public key corresponding to the second private key, and when receiving the server certificate and the intermediate certificate from the information terminal 20, the received intermediate certificate verifies the first signature contained in using the second public key contained in the root certificate, and verifies the second signature contained in the received server certificate with the third public key contained in the intermediate certificate , and if each verification succeeds, the device restriction is lifted. The first management device 30 is a first secure storage unit 34 in which a new second private key and a new second public key are stored, and stores the new second private key and the new second public key. A first secure storage unit 34 having a function to prevent the key from being taken out to the outside of the first secure storage unit 34, a first storage unit 33, and stored from the first external storage device 71 to the first external storage device 71. a first information processing unit 32 that acquires the obtained intermediate certificate and root certificate and stores the acquired intermediate certificate and root certificate in the first storage unit 33; and a first communication unit 31 that transmits a new root certificate, which is a new root certificate generated by the first information processing unit 32 , to the control device 50 . The first information processing unit 32 generates a new first signature for the third public key included in the intermediate certificate stored in the first storage unit 33 using the new second private key, It causes the first communication unit 31 to transmit the third public key and a new intermediate certificate containing the new first signature to the second management device 40 .

Such a first management device 30, when newly introduced into the information processing system 10, can authorize the information terminal 20 to release restrictions on the entry and exit of goods or people.

In addition, the second management device 40 is one of the first management device 30 and the second management device 40 used for granting the information terminal 20 the authority to release the restriction on the equipment that restricts the entry and exit of goods or people into and out of the space. is the second management device 40 of. The first management device 30 stores a second secret key and a second public key. The information terminal 20 generates an intermediate signature containing a first signature for a third public key generated using a first private key, a first public key, a third public key, and the second private key. store a certificate and a server certificate including a second signature for the first public key generated using the first public key and a third private key corresponding to the third public key; and transmits the server certificate and the intermediate certificate to the control device 50 that controls the device. The control device 50 stores a root certificate including a second public key, receives a server certificate and an intermediate certificate from the information terminal 20, and adds a first signature included in the received intermediate certificate. Verifying using the second public key contained in the root certificate, verifying the second signature contained in the received server certificate using the third public key contained in the intermediate certificate, and verifying each Remove device restrictions if verification succeeds. The second management device 40 is a second secure storage unit 44 in which a new third private key and a new third public key are stored. A second secure storage unit 44 having a function to prevent the key from being taken out to the outside of the second secure storage unit 44, a second storage unit 43, and stored from the second external storage device 72 to the second external storage device 72. a second information processing unit 42 that acquires the server certificate obtained and stores the acquired server certificate in the second storage unit 43; and a second communication that transmits a new third public key to the first management device 30. A second information processing unit 42 converts a new second signature for the first public key included in the server certificate stored in the second storage unit 43 into a new third private key. and send the first public key, the new server certificate including the new second signature, and the new intermediate certificate received from the first management device 30 to the second communication unit 41 Send it to the information terminal 20 . The new intermediate certificate includes a new third public key and a new first signature for the new third public key generated using the second private key.

Such a second management device 40 can give the information terminal 20 the authority to release the restrictions on the entry and exit of goods or people when it is newly introduced into the information processing system 10 .

In addition, the information processing method executed by the first management device 30, which is used for granting the information terminal 20 the authority to release the restriction on equipment that restricts the entry and exit of goods or people from the space, is performed by the first external storage device 71. acquiring the server certificate and root certificate stored in the first external storage device 71, storing the acquired server certificate and root certificate in the first storage unit 33; a step of generating a new root certificate containing the root certificate and transmitting the generated new root certificate to the control device 50; generating a signature using the new second private key; and sending the first public key and a new server certificate including the new signature to the information terminal.

Such an information processing method can use the newly introduced first management device 30 to give the information terminal 20 the authority to release the restrictions on the entry and exit of goods or people.

In addition, the first management device 30 out of the first management device 30 and the second management device 40 used for granting the information terminal 20 the authority to release the restriction of equipment that restricts the entry and exit of goods or people into and out of the space The information processing method to be executed is to acquire the intermediate certificate and root certificate stored in the first external storage device 71 from the first external storage device 71, and store the acquired intermediate certificate and root certificate in the first storage unit. 33; generating a new root certificate containing the new second public key; transmitting the generated new root certificate to the control device 50; a step of generating a new first signature for a third public key included in the obtained intermediate certificate using the new second private key; and generating the third public key and the new first signature. and sending the new intermediate certificate containing the certificate to the second management device 40 .

Such an information processing method can use the newly introduced first management device 30 to give the information terminal 20 the authority to release the restrictions on the entry and exit of goods or people.

In addition, the second management device 40 out of the first management device 30 and the second management device 40 used for granting the information terminal 20 the authority to release the restriction on the equipment that restricts the entry and exit of goods or people into and out of the space The information processing method to be executed includes the steps of acquiring the server certificate stored in the second external storage device 72 from the second external storage device 72, storing the acquired server certificate in the second storage unit 43, a step of transmitting the third public key to the first management device 30; a step of generating using a private key; a first public key; a new server certificate including a new second signature; 20. The new intermediate certificate includes a new third public key and a new first signature for the new third public key generated using the second private key.

Such an information processing method can use the newly introduced second management device 40 to grant the information terminal 20 the authority to release the restrictions on the entry and exit of goods or people.

(Other embodiments)
Although the embodiments have been described above, the present invention is not limited to the above embodiments.

For example, in the above embodiments, the information processing system was implemented by a plurality of devices, but it may be implemented as a single device. For example, the information processing system may be implemented as a single device corresponding to any one of the information terminal, first management device, second management device, and control device. When the information processing system is realized by a plurality of devices, the components (especially functional components) included in the information processing system may be distributed to the plurality of devices in any way.

Further, in the above embodiment, the processing executed by a specific processing unit may be executed by another processing unit. In addition, the order of multiple processes may be changed, and multiple processes may be executed in parallel.

Also, in the above embodiments, each component may be realized by executing a software program suitable for each component. Each component may be realized by reading and executing a software program recorded in a recording medium such as a hard disk or a semiconductor memory by a program execution unit such as a CPU or processor.

Also, each component may be realized by hardware. For example, each component may be a circuit (or integrated circuit). These circuits may form one circuit as a whole, or may be separate circuits. These circuits may be general-purpose circuits or dedicated circuits.

Also, general or specific aspects of the present invention may be implemented in a system, apparatus, method, integrated circuit, computer program, or recording medium such as a computer-readable CD-ROM. Also, general or specific aspects of the present invention may be implemented in any combination of systems, devices, methods, integrated circuits, computer programs and recording media.

For example, the present invention may be implemented as the information terminal, first management device, second management device, control device, or electric lock system (control device and electric lock) of the above embodiments.

The present invention may also be implemented as an information processing method executed by a computer such as the information processing system of the above embodiment. Further, the present invention may be implemented as a program for causing a computer to execute the information processing method. The present invention may be implemented as a computer-readable non-temporary recording medium in which such a program is recorded.

The present invention may also be implemented as an application program for causing a general-purpose information terminal to function as the information terminal, first management device, or second management device of the above embodiments. The present invention may be implemented as a computer-readable non-temporary recording medium in which such an application program is recorded.

In addition, forms obtained by applying various modifications to each embodiment that a person skilled in the art can think of, or realized by arbitrarily combining the constituent elements and functions of each embodiment without departing from the spirit of the present invention. Also included in the present invention.

REFERENCE SIGNS LIST 10 information processing system 20 information terminal 21 operation reception unit 22 terminal communication unit 23 terminal control unit 24 terminal storage unit 30 first management device 31 first communication unit 32 first information processing unit 33 first storage unit 34 first secure storage unit 40 second management device 41 second communication unit 42 second information processing unit 43 second storage unit 44 second secure storage unit 50 control device 51 communication unit 52 control unit 53 storage unit 60 electric lock 71 first external storage device 72 second Two external storage devices 80 facilities 81 doors

Claims (16)

An information processing system used to remove the restriction of a device that restricts the entry and exit of goods or people to a space,
An information terminal, a first management device, and a control device,
The information terminal is
A first private key, a first public key, and a server certificate including a signature for the first public key generated using the first public key and the second private key are stored. a terminal storage unit that
a terminal communication unit that transmits the server certificate to the control device;
The control device is
a storage unit storing a root certificate including a second public key corresponding to the second private key;
a communication unit that receives the server certificate from the information terminal;
verifying the signature included in the received server certificate using the second public key included in the root certificate stored in the storage unit, and if the verification succeeds, restricting the device; and a control unit for releasing the
The first management device is
A first secure storage unit storing a new second private key and a new second public key, wherein the new second private key and the new second public key are the first secure a first secure storage unit having a function of preventing it from being taken out of the storage unit;
a first storage unit;
A first information processing unit that acquires the server certificate and the root certificate stored in the external storage device from an external storage device and stores the acquired server certificate and the root certificate in the first storage unit. and,
a first communication unit configured to transmit a new root certificate including the new second public key and generated by the first information processing unit to the control device;
The first information processing unit uses the new second private key to generate a new signature for the first public key included in the server certificate stored in the first storage unit, and An information processing system that causes the first communication unit to transmit a first public key and a new server certificate including the new signature to the information terminal. 2. After transmitting the new root certificate to the control device, the first communication unit transmits a deletion command for deleting the root certificate stored in the storage unit to the control device. The information processing system according to . The first communication unit transmits a deletion command for deleting the root certificate stored in the storage unit to the control device before transmitting the new root certificate to the control device. 1. The information processing system according to 1. An information processing system used to remove the restriction of a device that restricts the entry and exit of goods or people to a space,
An information terminal, a first management device, a second management device, and a control device,
The second management device stores a third private key and a third public key,
The information terminal is
a first private key and a first public key, and an intermediate certificate containing a first signature for said third public key generated using said third public key and said second private key; , a terminal storage unit storing the first public key and a server certificate containing a second signature for the first public key generated using the third private key;
a terminal communication unit configured to transmit the server certificate and the intermediate certificate to the control device;
a storage unit storing a root certificate including a second public key corresponding to the second private key;
a communication unit that receives the server certificate and the intermediate certificate from the information terminal;
verifying the first signature included in the received intermediate certificate using the second public key included in the root certificate, and verifying the second signature included in the received server certificate; using the third public key included in the intermediate certificate, and canceling the restriction of the device when each verification is successful,
The first management device is
A first secure storage unit storing a new second private key and a new second public key, wherein the new second private key and the new second public key are the first secure a first secure storage unit having a function of preventing it from being taken out of the storage unit;
a first storage unit;
first information processing for acquiring the intermediate certificate and the root certificate stored in the external storage device from an external storage device and storing the acquired intermediate certificate and the root certificate in the first storage unit; Department and
a first communication unit configured to transmit a new root certificate including the new second public key and generated by the first information processing unit to the control device;
The first information processing unit generates a new first signature for the third public key included in the intermediate certificate stored in the first storage unit using the new second private key. and causing the first communication unit to transmit the third public key and a new intermediate certificate containing the new first signature to the second management device,
The information processing system, wherein the second management device includes a second communication unit that receives the new intermediate certificate from the first management device and transmits the received new intermediate certificate to the information terminal. After transmitting the new intermediate certificate to the second management device, the first communication unit transmits a deletion command for deleting the root certificate stored in the storage unit to the control device. Item 5. The information processing system according to item 4. The first communication unit transmits a deletion command for deleting the root certificate stored in the storage unit to the control device before transmitting the new intermediate certificate to the second management device. The information processing system according to claim 4. An information processing system used to remove the restriction of a device that restricts the entry and exit of goods or people to a space,
An information terminal, a first management device, a second management device, and a control device,
The first management device stores a second private key and a second public key,
The information terminal is
a first private key and a first public key, a third public key, and an intermediate certificate containing a first signature for said third public key generated using said second private key; , the first public key, and a server certificate including a second signature for the first public key generated using a third private key corresponding to the third public key. a terminal storage unit that
a terminal communication unit that transmits the server certificate and the intermediate certificate to the control device;
The control device is
a storage unit storing a root certificate including the second public key;
a communication unit that receives the server certificate and the intermediate certificate from the information terminal;
verifying the first signature included in the received intermediate certificate using the second public key included in the root certificate, and verifying the second signature included in the received server certificate; using the third public key included in the intermediate certificate, and canceling the restriction of the device when each verification is successful,
The second management device is
A second secure storage unit storing a new third private key and a new third public key, wherein the new third private key and the new third public key are the second secure a second secure storage unit having a function of preventing it from being taken out of the storage unit;
a second storage unit;
a second information processing unit that acquires the server certificate stored in the external storage device from an external storage device and stores the acquired server certificate in the second storage unit;
a second communication unit that transmits the new third public key to the first management device;
The first management device is
a first communication unit that receives the third public key from the second management device;
generating a new first signature for the received new third public key using the second private key, comprising the new third public key and the new first signature cause the first communication unit to transmit a new intermediate certificate to the second management device;
The second information processing unit generates a new second signature for the first public key included in the server certificate stored in the second storage unit using the new third private key. and sending the first public key, the new server certificate including the new second signature, and the new intermediate certificate received from the first management device to the second communication unit An information processing system that transmits information to an information terminal. The information processing according to claim 7, wherein said first communication unit transmits a revocation command for revoking said intermediate certificate to said control device after transmitting said new intermediate certificate to said second management device. system. 8. The information according to claim 7, wherein the first communication unit transmits a revocation command for revoking the intermediate certificate to the control device before transmitting the new intermediate certificate to the second management device. processing system. A first management device used to grant an information terminal the authority to release the restriction of a device that restricts the entry and exit of goods or people into and out of space,
The information terminal is
storing a first private key and a first public key, and a server certificate including a signature for the first public key generated using the first public key and the second private key; and transmitting the server certificate to a control device that controls the device in order to remove the restriction;
The control device stores a root certificate including a second public key corresponding to the second private key, and when receiving the server certificate from the information terminal, the received server certificate verifying the contained signature using the second public key contained in the root certificate, and releasing the restriction of the device if the verification is successful;
The first management device is
A first secure storage unit storing a new second private key and a new second public key, wherein the new second private key and the new second public key are the first secure a first secure storage unit having a function of preventing it from being taken out of the storage unit;
a first storage unit;
A first information processing unit that acquires the server certificate and the root certificate stored in the external storage device from an external storage device and stores the acquired server certificate and the root certificate in the first storage unit. and,
a first communication unit configured to transmit a new root certificate including the new second public key and generated by the first information processing unit to the control device;
The first information processing unit uses the new second private key to generate a new signature for the first public key included in the server certificate stored in the first storage unit, and A first management device that causes the first communication unit to transmit a first public key and a new server certificate including the new signature to the information terminal. A first management device out of a first management device and a second management device used for granting an information terminal the authority to release the restriction of a device that restricts the movement of goods or people into and out of a space,
The second management device stores a third private key and a third public key,
The information terminal creates a first signature for the third public key generated using the first private key, the first public key, the third public key, and the second private key. and a server certificate containing a second signature for the first public key generated using the first public key and the third private key, transmitting the server certificate and the intermediate certificate to a control device that controls the device in order to remove the restriction;
The control device stores a root certificate including a second public key corresponding to the second private key, and receives the server certificate and the intermediate certificate from the information terminal. verifying the first signature included in the intermediate certificate using the second public key included in the root certificate, and verifying the second signature included in the received server certificate to the intermediate certificate; verifying using the third public key included in the certificate, and canceling the restriction of the device when each verification is successful;
The first management device is
A first secure storage unit storing a new second private key and a new second public key, wherein the new second private key and the new second public key are the first secure a first secure storage unit having a function of preventing it from being taken out of the storage unit;
a first storage unit;
first information processing for acquiring the intermediate certificate and the root certificate stored in the external storage device from an external storage device and storing the acquired intermediate certificate and the root certificate in the first storage unit; Department and
a first communication unit configured to transmit a new root certificate including the new second public key and generated by the first information processing unit to the control device;
The first information processing unit generates a new first signature for the third public key included in the intermediate certificate stored in the first storage unit using the new second private key. and causes the first communication unit to transmit the third public key and a new intermediate certificate including the new first signature to the second management device. A second management device out of a first management device and a second management device used for granting an information terminal the authority to release the restriction of a device that restricts the movement of goods or people into and out of a space,
The first management device stores a second private key and a second public key,
The information terminal creates a first signature for the third public key generated using the first private key, the first public key, the third public key, and the second private key. and a server certificate containing a second signature for said first public key generated using said first public key and a third private key corresponding to said third public key and transmitting the server certificate and the intermediate certificate to a control device that controls the device;
The control device stores a root certificate including the second public key, receives the server certificate and the intermediate certificate from the information terminal, and receives the intermediate certificate included in the received intermediate certificate. verifying the first signature using the second public key contained in the root certificate, and verifying the second signature contained in the received server certificate by verifying the third signature contained in the intermediate certificate; verify using the public key of, and if each verification is successful, remove the restriction of the device;
The second management device is
A second secure storage unit storing a new third private key and a new third public key, wherein the new third private key and the new third public key are the second secure a second secure storage unit having a function of preventing it from being taken out of the storage unit;
a second storage unit;
a second information processing unit that acquires the server certificate stored in the external storage device from an external storage device and stores the acquired server certificate in the second storage unit;
a second communication unit that transmits the new third public key to the first management device;
The second information processing unit generates a new second signature for the first public key included in the server certificate stored in the second storage unit using the new third private key. and transmitting the first public key, the new server certificate including the new second signature, and the new intermediate certificate received from the first management device to the second communication unit as the information send it to your device
said new intermediate certificate includes said new third public key and a new first signature for said new third public key generated using said second private key; management device. An information processing method executed by a first management device used for granting an information terminal the authority to release the restriction of a device that restricts the movement of goods or people into and out of a space,
The information terminal is
storing a first private key and a first public key, and a server certificate including a signature for the first public key generated using the first public key and the second private key; and transmitting the server certificate to a control device that controls the device in order to remove the restriction;
The control device stores a root certificate including a second public key corresponding to the second private key, and when receiving the server certificate from the information terminal, the received server certificate verifying the contained signature using the second public key contained in the root certificate, and releasing the restriction of the device if the verification is successful;
The first management device is
A first secure storage unit storing a new second private key and a new second public key, wherein the new second private key and the new second public key are the first secure a first secure storage unit having a function of preventing it from being taken out of the storage unit;
a first storage unit;
The information processing method includes:
obtaining the server certificate and the root certificate stored in the external storage device from an external storage device, and storing the obtained server certificate and the root certificate in the first storage unit;
generating a new root certificate containing the new second public key, and transmitting the generated new root certificate to the control device;
generating a new signature for the first public key included in the server certificate stored in the first storage unit using the new second private key;
and transmitting the first public key and a new server certificate including the new signature to the information terminal. An information processing method executed by a first management device out of a first management device and a second management device used for granting an information terminal the authority to release the restriction of a device that restricts the movement of goods or people into and out of a space and
The second management device stores a third private key and a third public key,
The information terminal creates a first signature for the third public key generated using the first private key, the first public key, the third public key, and the second private key. and a server certificate containing a second signature for the first public key generated using the first public key and the third private key, transmitting the server certificate and the intermediate certificate to a control device that controls the device in order to remove the restriction;
The control device stores a root certificate including a second public key corresponding to the second private key, and receives the server certificate and the intermediate certificate from the information terminal. verifying the first signature included in the intermediate certificate using the second public key included in the root certificate, and verifying the second signature included in the received server certificate to the intermediate certificate; verifying using the third public key included in the certificate, and canceling the restriction of the device when each verification is successful;
The first management device is
A first secure storage unit storing a new second private key and a new second public key, wherein the new second private key and the new second public key are the first secure a first secure storage unit having a function of preventing it from being taken out of the storage unit;
a first storage unit;
The information processing method includes:
obtaining the intermediate certificate and the root certificate stored in the external storage device from an external storage device, and storing the obtained intermediate certificate and the root certificate in the first storage unit;
generating a new root certificate containing the new second public key, and transmitting the generated new root certificate to the control device;
generating a new first signature for the third public key included in the intermediate certificate stored in the first storage unit using the new second private key;
and transmitting a new intermediate certificate including the third public key and the new first signature to the second management device. An information processing method executed by a second control device out of a first control device and a second control device used for granting an information terminal the authority to release the restriction of a device that restricts the entry and exit of goods or people into and out of a space and
The first management device stores a second private key and a second public key,
The information terminal creates a first signature for the third public key generated using the first private key, the first public key, the third public key, and the second private key. and a server certificate containing a second signature for said first public key generated using said first public key and a third private key corresponding to said third public key and transmitting the server certificate and the intermediate certificate to a control device that controls the device;
The control device stores a root certificate including the second public key, receives the server certificate and the intermediate certificate from the information terminal, and receives the intermediate certificate included in the received intermediate certificate. verifying the first signature using the second public key contained in the root certificate, and verifying the second signature contained in the received server certificate by verifying the third signature contained in the intermediate certificate; verify using the public key of, and if each verification is successful, remove the restriction of the device;
The second management device is
A second secure storage unit storing a new third private key and a new third public key, wherein the new third private key and the new third public key are the second secure a second secure storage unit having a function of preventing it from being taken out of the storage unit;
a second storage unit;
The information processing method includes:
obtaining the server certificate stored in the external storage device from an external storage device, and storing the obtained server certificate in the second storage unit;
sending the new third public key to the first management device;
generating a new second signature for the first public key included in the server certificate stored in the second storage unit using the new third private key;
transmitting a new server certificate containing the first public key and the new second signature, and a new intermediate certificate received from the first management device to the information terminal; ,
The new intermediate certificate includes the new third public key and a new first signature for the new third public key generated using the second private key. Method. A program for causing a computer to execute the information processing method according to any one of claims 13 to 15.

Images