Verification system, method, and recording medium

Abstract

To verify the identity and non-alteration of a document prepared in relation to a prescribed activity or operation by a qualified person in a certain site or organization in another site or organization.SOLUTION: A system according to claim 1, further comprising: a first device configured to execute a process of acquiring biometric information; and a second device configured to execute a process of performing biometric authentication using the biometric information and a process of determining whether or not a person authenticated as the principal is qualified to perform a predetermined activity or an operation, wherein the first device performs an authentication process on a document created in relation to the predetermined activity or the operation of the person determined to be qualified by the second device. The information processing apparatus further includes a third apparatus that further executes a process of creating a signature using the biometric information for signature of the individual and executes a process of registering the document and the signature created by the first apparatus in a first storage unit, and a fourth apparatus that executes a process of verifying correctness of a set of the document and the signature registered in the first storage unit of the third apparatus using a public key for verifying the signature.SELECTED DRAWING: Figure 1

Description

[Technical Field]

[0001] The present disclosure relates to a verification system, method, and recording medium. [Background technology]

[0002] Digital signatures are a technology that can verify the author of a document and that it has not been tampered with since its creation.

[0003] <Digital signature algorithm> Key Generation: Generate a pair of a signing key (private key) sk and a verification key (public key) vk. (sk, vk)←KeyGen(1 κ ) …(1) κ is a security parameter (for example, the length of the key to be generated).

[0004] In some cases, instead of the key generation algorithm receiving the security parameters directly, the setup algorithm receives common (public) parameters generated from the security parameters and generates a pair of a signing key (private key) sk and a verification key (public key) vk.

[0005] Signing: A signature σ is generated for a document M using a signing key sk according to a predetermined signing algorithm. σ←Sign(sk, M) …(2)

[0006] Verification: Using the verification key vk, the signature σ for the message (document) M is verified (that is, the correctness of the pair of the message (document) M and the signature σ is verified). 0 / 1←Verify(vk, M, σ) …(3) Here, if accepted, it is set to 1, and if not accepted, it is set to 0.

[0007] A digital signature uses a public key (verification key) and a corresponding private key (signature key) to verify whether the signature was created for the document. If the public key is public, anyone who obtains the document and signature pair can verify it.

[0008] In digital signatures using biometric information, for example, the risk of losing the key can be reduced by using the biometric information instead of a key. However, when biometric information is used as a key, leakage of the biometric information means leakage of the key. Because it is difficult to change biometric information, once the biometric information is leaked, the key can no longer be used safely. To address this issue, a biometric signature system has been proposed that can generate a signature for any message (digital document) using the biometric information itself as a secret key, without requiring any auxiliary information other than the biometric information (for example, Patent Document 1). [Prior art documents] [Patent documents]

[0009] [Patent Document 1] Patent No. 5707311 Summary of the Invention [Problem to be solved by the invention]

[0010] For example, when an inspection of a part (product) or the like must be performed by a qualified person (or authorized person) at the upstream side of a supply chain, a system is desired that enables the downstream side receiving the part (product) or the like from the upstream side to verify that the inspection of the part (product) or the like at the upstream side was performed by a qualified person (or authorized person), and to verify the authenticity and non-tampering of documents created in connection with the inspection. Hereinafter, "qualified person" may include "qualified person" or "authorized person." "Qualification" may include "qualification" or "authority."

[0011] While the above problem is one example, one of the objectives of the present disclosure is to provide a verification system, method, and recording medium that can verify, for example, that a document created in connection with a specified activity or operation performed by a qualified person at one site or organization is correct at another site or organization. [Means for solving the problem]

[0012] According to some embodiments disclosed in the present disclosure, a verification system includes a first device that acquires biometric information of an individual, a second device that performs a process of performing biometric authentication using the biometric information and a process of determining whether the individual authenticated as the individual is qualified to perform a predetermined activity or operation, the first device performs a process of creating a signature using the individual's biometric information for signature for a document created in connection with the predetermined activity or operation of the individual determined to be qualified by the second device, a third device that performs a process of registering the document and the signature created by the first device in a first storage unit, and a fourth device that performs a process of verifying the authenticity of the pair of the document and the signature registered in the first storage unit of the third device (verifying the signature for the document) using a public key for verifying the signature.

[0013] The method also includes a first process of performing biometric authentication using biometric information and determining whether or not an individual authenticated as the person is qualified to perform a predetermined activity or operation; a second process of creating a signature using the individual's signature biometric information on a document created in connection with the predetermined activity or operation of the individual determined to be eligible; a third process of registering the document and the signature in a storage device; A verification method is disclosed that includes a fourth process of verifying the correctness of the pair of the document and the signature registered in the storage device (verifying the signature for the document) using a public key for verifying the signature.

[0014] Furthermore, a process of performing biometric authentication using biometric information, a process of determining whether or not the individual authenticated as the identity of the individual is qualified to perform a predetermined activity or operation, a process of creating a signature using the individual's biometric information for signature for a document created in relation to the predetermined activity or operation of the individual who has been determined to be qualified, and a process of registering the document and the signature in a storage device. A non-transitory computer readable medium is disclosed that stores a program (a group of instructions, data) that causes one or more processing devices to execute one or more processes of verifying the correctness of the pair of the document and the signature registered in the storage device (verifying the signature for the document) using a public key for verifying the signature. [Effects of the Invention]

[0015] According to the present disclosure, it is possible to verify the authenticity (e.g., authenticity and non-tampering) of a document created in connection with a specified activity or operation performed by a qualified person at one site or organization at another site or organization. [Brief explanation of the drawings]

[0016] [Figure 1] FIG. 1 is a diagram illustrating an example of a system configuration according to some embodiments of the present disclosure. [Figure 2] FIG. 1 is a diagram illustrating an example of a device configuration according to some embodiments of the present disclosure. [Figure 3] FIG. 10 is a diagram illustrating an example of the configuration of a biometric shared signature in a system according to some embodiments of the present disclosure. [Figure 4] FIG. 10 is a diagram illustrating an example of a processing flow of biometric shared signatures in a system according to some embodiments of the present disclosure. [Figure 5] FIG. 10 is a diagram illustrating another example of the processing flow of biometric shared signatures in the system of some embodiments of the present disclosure. [Figure 6] FIG. 1 is a diagram illustrating a schematic example of an application of some embodiments of the present disclosure. [Figure 7]FIG. 7 is a diagram illustrating an example of the configuration of each device in the system of FIG. 6. [Figure 8] 1A to 1C are diagrams illustrating a verifiable signature document. [Figure 9] (A) and (B) are diagrams illustrating an example of implementation on a computer. DETAILED DESCRIPTION OF THE INVENTION

[0017] Some embodiments of the present disclosure will be described below: Fig. 1 is a diagram schematically illustrating an example of a system according to some embodiments of the present disclosure.

[0018] 1, this system 1 (verification system) includes, for example, four devices (processing devices, information processing devices) 10, 20, 30, and 40. Each of the devices 10, 20, 30, and 40 includes, for example, a processor and a network interface card (NIC), and may be configured as a node that is communicatively connected to other devices via a network (for example, at least one of a wired local area network (LAN), a wireless LAN, a wide area network (WAN), a mobile communication network, a virtual network, etc.).

[0019] The first device 10 acquires biometric information of a user and transmits the biometric information to the second device 20. The second device 20 receives the biometric information transmitted from the first device 10 and uses the biometric information to authenticate the user (e.g., an employee, staff member, worker, etc.). If the second device 20 confirms the identity of the user as a result of biometric authentication, it determines whether the user has the relevant qualification (or authority) for an activity or operation (which may include a series of processes such as multiple operations) performed directly or indirectly by the user (qualification determination) and returns the determination result to the first device 10. The qualification may be a national qualification, a public qualification, or a qualification (or authority) granted by an organization, business (establishment), etc. Hereinafter, qualification (or authority) will be referred to simply as qualification.

[0020] The first device 10 receives the judgment result from the second device 20. If the judgment result is OK (qualified), the activities and operations (e.g., inspection, confirmation, adjustment, operation of inspection equipment, manufacturing equipment, etc.) of the user judged to be qualified are permitted. As a result of a series of processes involving the activities and operations of the user judged to be qualified, related documents (electronic documents such as inspection sheets and control sheets) are created. Note that the document (electronic document) may be created by the user judged to be qualified entering data into a predetermined form using an input device such as a terminal (not shown) of the first device 10. Alternatively, even if a document is automatically generated in part or in whole as a result of the operation of one or more inspection equipment, manufacturing equipment, etc. by the user judged to be qualified, the document may be treated as a document created by a qualified person.

[0021] The first device 10 acquires the document (electronic document), generates a signature (digital signature) for the document using the signature biometric information of the qualified user who performed the activity or operation, and transmits the signature and the document to the third device 30. The first device 10 may temporarily store the document and the signature in a predetermined device (node) (not shown), and the predetermined device (node) may transmit (upload) the document and the signature to the third device 30, or the first device 10 may transmit (upload) the document and the signature directly to the third device 30.

[0022] The third device 30 acquires a verification key (public key) for the signature of the document, and registers the document and signature together with the verification key in a storage unit (not shown). The third device 30 may register the document, signature, and verification key in association with, for example, a user ID (user identity / identification).

[0023] The fourth device 40 obtains the verification key, document, and signature key registered in the third device 30, and uses the verification key to verify the correctness of the document and signature pair (verifies the signature on the document using the verification key).

[0024] According to system 1 in Figure 1, a specified activity or operation is performed by a qualified person, and from a signature using the biometric information of the qualified person who performed the activity or operation, it is possible to verify that the document was created under the activity or operation of the qualified person (authenticity) and that the document has not been tampered with since it was created by the qualified person (non-tampering) by a fourth device 40 located in a different organization or at a different site from first device 10 and which can obtain a verification key, document, and signature.

[0025] 1 illustrates an example of the configuration of the system 1, but it goes without saying that the first device 10 and the second device 20 may be integrated into a single device. In this case, one or more processors may perform the processing of the first device 10 and the second device 20. Furthermore, the first device 10 and the fourth device 40 may be configured as client-side devices, and the third device 30 may be configured as a server (cloud server).

[0026] Furthermore, the second device 20 may be divided into, for example, a device that performs biometric authentication and a device that performs qualification determination (determines whether or not a person is qualified) (i.e., the second device 20 may be configured from multiple devices).

[0027] In the second device 20, biometric authentication may be realized by a cloud solution using FIDO (Fast Identity Online). In this case, the second device 20 is connected to an RP (Relying Party) server or a FIDO server (not shown). In FIDO, data including encrypted biometric information of a registrant is stored in advance on the client (second device 20) side as a template, and a key for decrypting the encrypted information is also stored on the client (second device 20) side. When the biometric information of the person to be authenticated is input to the client (second device 20), the client decrypts the ciphertext of the biometric information included in the template using the key, and determines whether the person to be authenticated corresponds to the registrant using the decrypted biometric information and the input biometric information.

[0028] Furthermore, in the first device 10, when signature generation is performed by distributed processing, as will be described later, it may be configured to be performed by a plurality of devices / processing units.

[0029] Fig. 2 is a diagram illustrating an example of the functional configuration of each device in Fig. 1. The first device 10 includes a biometric information acquisition unit 11 that acquires biometric information for biometric authentication, and a biometric information transmission unit 12 that transmits the biometric information for biometric authentication acquired by the biometric information acquisition unit 11 to the second device 20.

[0030] The second device 20 includes a biometric information receiving unit 21 that receives biometric information from the first device 10, a biometric authentication unit 22 that performs identity authentication (1:N authentication) by, for example, checking whether biometric information registered in advance in a storage unit 23 matches the biometric information received by the biometric information receiving unit 21, a qualification determination unit 24 that determines whether an individual whose identity has been authenticated has a qualification (determines whether the individual is a qualified person) by referring to a storage unit 25 that pre-stores information about the individual's qualifications for predetermined activities, operations, etc., and a determination result transmission unit 26 that transmits the determination result by the qualification determination unit 24 to the first device 10. The biometric authentication unit 22 acquires a user ID corresponding to the registered biometric information matched with the biometric information of the person to be authenticated, and the qualification determination unit 24 may determine whether the user ID has a qualification by referring to the storage unit 25 that stores the user ID, the activity, operation, etc., and the qualification in association with each other. The determination result transmission unit 26 may transmit the determination result by the qualification determination unit 24 to the first device 10.

[0031] The first device 10 includes a determination result receiving unit 13 that receives the determination result transmitted from the second device 20, a document acquiring unit 14 that acquires, if the determination result received by the determination result receiving unit 13 is qualified, a document (e.g., a record document (electronic document) such as an inspection slip) created in connection with a predetermined activity or operation performed by the qualified individual (or performed under the management of the qualified individual), a signature generating unit 15 that generates a signature for the document acquired by the document acquiring unit 14 using biometric information for signature generation acquired by the biometric information acquiring unit 11, and a document and signature sending unit 16 that sends the document and the generated signature to the third device 30. The document and signature sending unit 16 may send the document and the signature to the third device 30 together with the user ID of the qualified individual.

[0032] The third device 30 includes a document and signature receiving unit 31 that receives a document and a signature from the first device 10, a memory unit 32 that stores the document and the signature received by the document and signature receiving unit 31, a verification key acquiring unit 33 that acquires a verification key (public key) for verifying the signature, a memory unit 34 that stores the verification key, a verification key, document and signature managing unit 35 that acquires the document, signature and verification key from the memories 32 and 34 upon receiving an acquisition request from the fourth device 40, and a verification key, document and signature sending unit 36 ​​that transmits the verification key and the document and signature acquired by the verification key, document and signature managing unit 35 to the fourth device 40. The verification key, document and signature managing unit 35 may manage the verification key and the document and signature in association with a user ID.

[0033] The fourth device 40 includes a verification key / document / signature acquisition unit 41 that transmits a request to acquire a verification key, document, and signature to the third device 30 and acquires them, and a signature verification unit 42 that uses the acquired verification key to verify the correctness of the pair of the record and the signature. Note that the verification key for verifying the signature may be generated in advance by the first device 10 or another device (node), acquired by the third device 30, and stored in the storage unit 34 (however, the generation and registration of the verification key are not limited to the above).

[0034] In the second device 20, the encrypted biometric information may be registered in the storage unit 23 as registered biometric information, and in the first device 10, the biometric information may be encrypted and transmitted to the second device 20.

[0035] Fig. 3 is a diagram illustrating one implementation example of signature generation in the first device 10 of Fig. 2. The first device 10 of Fig. 2 may be configured to be communicatively connected to several devices. Alternatively, the first device 10 of Fig. 2 may be configured with several devices communicatively connected to it. Note that Fig. 3 illustrates elements related to signature generation in the first device 10, etc., and omits other elements (e.g., the second device 20, etc.).

[0036] The fifth device 50 includes a biometric information acquisition unit 51 having a sensor (not shown) that acquires biometric information (first biometric information w) of a user (or an interface that receives biometric information (first biometric information w) acquired by an external sensor via a network such as a communication line), a signature key / verification key generation unit 52 that generates a first signature key x (private key) and a verification key vk (public key), a first auxiliary data generation unit 53 that generates first auxiliary data s1 using the first signature key x and the first biometric information w, a verification key transmission unit 54 that transmits the verification key vk to the third device 30, and a first auxiliary data transmission unit 55 that transmits the first auxiliary data s1 to the sixth device 60. The verification key transmission unit 54 may transmit the verification key vk to the third device 30 together with a user ID.

[0037] The first auxiliary data generation unit 53 generates first auxiliary data s1 using, for example, a value (encoding key) obtained by encoding the first signature key x using an encoding function Encode and the first biometric information w. s1 = Encode(x) + w …(4)

[0038] In formula (4), the operation + may be -. Alternatively, depending on the encoding, it may be a bit-wise exclusive OR operation or the like. For example, when the first biometric information w is binary data and Encode(x) is binary data, the right side of formula (4) may be the bit-wise exclusive OR of the first biometric information w and Encode(x). When the first biometric information w is an n-dimensional vector, the right side of formula (4) may be the vector addition (or vector subtraction) of the first biometric information w and Encode(x).

[0039] The encoding function Encode converts plaintext m contained in the source space into code c. The decoding function Decode converts code c back into plaintext m. c← Encode(m) …(5) m← Decode(c) …(6)

[0040] Here, for a code c' whose difference from any plaintext m included in the information source space is within the correction capability, m = Decode(c') …(7) In the following, we use linear codes.

[0041] Linearity: Encode(m1) + Encode(m2) …(8) is the codeword of m1+m2, m1 + m2 = Decode(Encode(m1) + Encode(m2)) …(9) In equation (9), the "+" on the left and right sides do not have to be the same operation.

[0042] For encoding, for example, an error-correcting code (Hamming code, BCH (Bose-Chaudhuri-Hocquenghem code) code, RS (Reed-Solomon) code, LDPC (low-density parity-check code), etc.) may be used. Alternatively, for example, lattice coding may be used. More specifically, methods using integer lattices, methods using triangular lattices, and methods using more complex lattices are known (see Reference 1, etc.).

[0043] The verification key transmitting unit 54 may transmit the verification key vk to a key server (public key database) (not shown) or the like.

[0044] The fifth device 50 may be the same terminal as the terminal that registers biometric information for biometric authentication, user ID information, etc., in advance in the second device 20. When a user registers biometric information for biometric authentication in the second device 20 using the fifth device 50, online identity verification of the user may be performed between the second device 20 and the fifth device 50 to prevent unauthorized registration of biometric information on the fifth device 50. Identity verification may be performed by comparing an image of an identification document with a face photo, such as the user's driver's license or My Number card (taken using software provided by a specified business operator), with an image of the user's appearance (a face photo of the user taken with a camera in the fifth device 50 when registering the biometric information).

[0045] The first biometric information acquired by the biometric information acquisition unit 51 of the fifth device 50 may be the same as or different from the biometric information used for biometric authentication. For example, biometric authentication may be performed by face authentication, and the first biometric information used for signature generation may be fingerprint information / vein information (finger / palm vein information), etc. When the modalities of the biometric information used for biometric authentication and the biometric information used for signature generation are different, the biometric information acquisition unit 11 (FIGS. 2 and 3) of the first device 10 includes a first sensor (not shown) that acquires biometric information used for biometric authentication and a second sensor (not shown) that acquires biometric information used for signature generation. In this case, the biometric information transmission unit 12 (FIG. 2) of the first device 10 transmits the biometric information used for biometric authentication acquired by the first sensor (not shown) to the second sensor 20.

[0046] The sixth device 60, which generates a signature in a distributed manner with the first device 10, includes a first auxiliary data receiving unit 61 that receives the first auxiliary data s1 sent from the fifth device 50, a memory unit 62 that stores the first auxiliary data s1 received by the first auxiliary data receiving unit 61, and a distributed signature generating unit 63 that sends and receives information to and from the first device 10 and generates a first distributed signature for the document M.

[0047] The shared signature generation unit 63 of the sixth device 60 includes a second auxiliary data / document receiving unit 63A that receives the second auxiliary data s2 and document M sent from the first device 10, a first shared key generation unit 63B that generates a first shared key x' from the first auxiliary data s1 and the second auxiliary data s2, and a first shared signature generation processing unit 63C that generates a shared signature for document M using the first shared key x'.

[0048] In the first device 10, the biometric information acquisition unit 11 includes a sensor (not shown) that acquires second biometric information w' for generating a user's signature. The modalities of the user's first biometric information w and the second biometric information w' are the same. For example, in the fifth device 50, if the sensor (not shown) that acquires the user's first biometric information w is a fingerprint sensor, the second sensor (not shown) in the biometric information acquisition unit 11 that acquires the second biometric information w' for generating a signature is also a fingerprint sensor.

[0049] In the first device 10, the signature generation unit 15 exchanges information with the sixth device 60 and generates a signature σ for the document M using the first signature key x. The document and signature transmission unit 16 transmits the signature σ and the document M to the third device 30.

[0050] The signature generation unit 15 of the first device 10 includes a second shared key generation unit 15A that generates a second shared key (differential key Δ), a second auxiliary data generation unit 15B that generates second auxiliary data s2 using the second shared key (differential key Δ) and the second biometric information w′, a second auxiliary data / document transmission unit 15C that transmits the second auxiliary data s2 and document M to the sixth device 60, and a second shared signature generation processing unit 15D that exchanges information with the first shared signature generation processing unit 63C of the sixth device 60 and generates a signature for document M.

[0051] The second auxiliary data generation unit 15B generates second auxiliary data s2 using the value obtained by encoding the second key share (Δ) using the encoding function Encode and the second biometric information w′, for example, using the following equation. s2 = Encode (Δ) + w' …(10)

[0052] The first key share generation unit 63B of the sixth device 60 generates the first key share x' by decrypting the difference between the first auxiliary data s1 and the second auxiliary data s2 as follows. x' = Decode (s1 - s2) …(11)

[0053] The right side of equation (11) is Decode (s1 - s2) = Decode (Encode(x) + w-{Encode (Δ) + w'}) =Decode ({Encode(x) - Encode (Δ)}+ w - w') =Decode (Encode(x - Δ)) + Decode (w - w') …(12)

[0054] If the difference (distance) |w-w'| between the first biometric information w and the second biometric information w' is within the error correction range, Equation (12) can be expressed as follows: Decode (s1 - s2)=Decode (Encode(x - Δ)) = x-Δ …(13) and equation (11) becomes: x'=x-Δ …(14) This becomes:

[0055] The second shared signature generation processing unit 15D of the first device 10 and the first shared signature generation processing unit 63C of the sixth device 60 exchange information, and generate a signature for the document M using the second shared key Δ and the first shared key x′, respectively. The shared signature is realized by a method according to the signature scheme (algorithm), etc. Furthermore, even for the same signature scheme (for example, Schnorr signature), there are several realization methods, as will be described later.

[0056] In the third device 30, the verification key acquisition unit 33 receives the verification key vk generated by the fifth device 50. The document and signature receiving unit 31 receives the document M and signature σ transmitted from the first device 10. The verification key, document, and signature management unit 35 stores the verification key in the memory unit 32 in association with the document and signature. Upon receiving a request (verification key, document, and signature acquisition request) from the fourth device 40, the verification key, document, and signature management unit 35 reads the corresponding verification key, document, and signature from the memory unit 32 and transmits the verification key, document, and signature from the verification key, document, and signature transmission unit 36 ​​to the fourth device 40.

[0057] The Schnorr signature will be described as an example of shared signature generation between the signature generation unit 15 of the first device 10 and the shared signature generation unit 63 of the sixth device 60. First, an overview of the Schnorr signature will be given.

[0058] <Key generation> p and q are prime numbers, and q|(p - 1) (q is a divisor of p-1) g is the multiplicative group Zp * element of order q, that is, g^q ≡ 1 (mod p) A private key is chosen uniformly at random. x ←R Zq …(15) Zq=Z / qZ is the set of integers from 0 to q, and the symbol "← R " represents a uniformly random selection from the source (in this case, Zq).

[0059] Calculate the public key vk. vk = g^x mod p …(16) Let p, q, g, and v be the public keys. k However, p, q, and g are common parameters shared by each device, and the public key is v k It may also be possible to use the following.

[0060] <signature> Choose k uniformly at random. k ← R Zq …(17)

[0061] r = g^k mod p …(18) e = H(r, M) …(19) s = k - e*x mod q …(20) signature σ=(e, s)

[0062] <Verification> Signature verification: Verify(v k , M, σ)(v k = g^x mod p: public key), for a signature σ=(e, s) and a document M, r' = (g^s)(v k ^e) mod p …(21) Calculate e = H(r', M) …(22) If it is true, it returns 1 (accepted), otherwise it returns 0 (not accepted). k , M, σ), g^k = (g^s)*(v k ^e) mod p …(23) If the above is true, 1 (accepted) may be returned, and if not, 0 (not accepted) may be returned.

[0063] 4 is a diagram showing an example of a calculation flow of two-party shared signature generation (Two-Party Schnorr signature) between the first device 10 and the sixth device 60. In the following, the numbers in parentheses in each device in FIG. 4 are the processing (step) numbers in that device.

[0064] In the fifth device 50, the biometric information acquisition unit 51 acquires the first biometric information w (Step 1).

[0065] In the fifth device 50, the signing key / verification key generation unit 52 uniformly randomly selects a first signing key x (step 2). x ← R F n * …(twenty four)

[0066] In the fifth device 50, the signing key / verification key generation unit 52 generates a verification key v corresponding to the first signing key x (vk←VkGen(x)) (step 3). vk← g^x …(25)

[0067] The first signing key x and verification key vk pair may be generated in a single key generation procedure.

[0068] In the fifth device 50, the verification key transmitter 54 transmits the verification key vk to the device 30 (step 4).

[0069] In the fifth device 50, the first auxiliary data generation unit 53 generates first auxiliary data s1 using an encoding key c (=Encode(x)) obtained by encoding the first signature key x and the first biometric information w (step 5). s1=Encode(x)+w …(26)

[0070] In the fifth device 50, the first auxiliary data transmitter 55 transmits the first auxiliary data s1 to the sixth device 60 (step 6).

[0071] In the sixth device 60, the first auxiliary data receiving unit 61 receives the first auxiliary data s1 and stores it in the first auxiliary data storage unit 62 (step 1).

[0072] In the first device 10, the biometric information acquisition unit 11 acquires the second biometric information w' (1), and the document acquisition unit 14 acquires the document (record document) M (step 2).

[0073] In the first device 10, the second key share generation unit 15A uniformly randomly selects a second key share Δ (step 3). Δ ← R Z q …(27)

[0074] In the first device 10, the second auxiliary data generation unit 15B generates second auxiliary data s2 using the second key share Δ and the second biometric information w′ (step 4). s2=Encode(Δ)+w' …(28)

[0075] In the first device 10, the second auxiliary data / document transmission unit 15C transmits the second auxiliary data s2 and the document M to the sixth device 60 (step 5).

[0076] In the sixth device 60, the second auxiliary data / document receiving unit 63A receives the second auxiliary data s2 and document M transmitted from the second auxiliary data / document transmitting unit 15C of the device 10 (step 2).

[0077] In the sixth device 60, the first key share generation unit 63B decrypts the difference (s1-s2) between the first auxiliary data s1 and the second auxiliary data s2 to generate a first key share x' (step 3). If the difference (distance) between the first biometric information w and the second biometric information w' is within the error correction range, the following holds: x' = Decode(s1-s2) = (x-Δ) mod q (x'∈Z q ) …(29)

[0078] In the first device 10, the second shared signature generation processing unit 15D executes, for example, the following.

[0079] The second shared signature generation processor 15D uniformly randomly selects a first random number k1 (step 6). k1 ← R Zq(k1∈[0,q-1]) …(30)

[0080] In the first device 10, the second shared signature generation processor 15D obtains a value r1 by raising the generator g to the first random number k1 (step 7). r1 = g^k1 mod p …(31)

[0081] In the first device 10, the second shared signature generation processing unit 15D transmits r1 to the sixth device 60 (step 8).

[0082] In the sixth device 60, the first shared signature generation processor 63C receives r1 sent from the device 10 (step 4).

[0083] In the sixth device 60, the first shared signature generation processor 63C uniformly randomly selects a second random number k2 (step 5). k2 ← R Zq(k2∈[0,q-1]) …(32)

[0084] In the sixth device 60, the first shared signature generation processor 63C obtains a value r2 by raising the generator g to the second random number k2 (step 6). r2 = g^k2 mod p …(33)

[0085] In the sixth device 60, the first shared signature generation processor 63C obtains the value r by multiplying r2 by r1 transmitted from the first device 10 (step 7). r = r1*r2 mod p …(34)

[0086] In the sixth device 60, the first shared signature generation processor 63C inputs r and the document M to a hash function H, e = H(r, M) (∈Z q * :Z q and the set of integers prime to q) ...(35) Calculate (Step 8).

[0087] In the sixth device 60, the first shared signature generation processor 63C calculates the multiplication value of e and the first shared key x′ using the second random number k2: s' = k2 -e*x' mod q …(36) Calculate (Step 9). (e, s') can also be considered (part of) a shared signature.

[0088] In the sixth device 60, the first shared signature generation processor 63C transmits r2 calculated by equation (33) and s' (the second element of the shared signature (e, s')) to the device 10 (step 10).

[0089] In the first device 10, the second shared signature generation processor 15D receives r2 and s' sent from the sixth device 60 (step 9).

[0090] In the first device 10, the second shared signature generation processing unit 15D obtains the value r by multiplying r2 (= g^k2 mod p) received from the sixth device 60 by r1 (= g^k1 mod p) calculated by the second shared signature generation processing unit 15D (step 10). r = r1*r2 mod p=g^(k1+k2 mod q) mod p …(37)

[0091] In the first device 10, the second shared signature generation processing unit 15D inputs r and the document M to a hash function H, and calculates: e = H(r, M) …(38) Calculate (Step 11).

[0092] In the first device 10, the second shared signature generation processing unit 15D s =(s'+ k1 - e*Δ) mod q = {(k1+k2) - e*(x'+Δ)} mod q …(39) Calculate (Step 12).

[0093] With the above steps, in the first device 10, the second shared signature generation processing unit 15D generates (completes) a signature σ=(e, s) (signature using the first signature key x) for the document M using the signature key (x'+Δ) (step 13).

[0094] In the first device 10, the document and signature sending unit 16 sends the document M and the signature σ=(e, s) to the device 30 (step 14).

[0095] In the third device 30, the verification key acquisition unit 33 acquires the verification key vk from the fifth device 50 (step 1).

[0096] In the third device 30, when the document / signature receiving unit 31 receives the signature σ=(e, s) and the document M, the verification key / document / signature management unit 35 associates the verification key vk received by the verification key acquisition unit 33 with the signature σ and the document M and registers them in the memory unit 34 (step 2).

[0097] In the third device 30, when the verification key, document, and signature acquisition request is received from the fourth device 40, the verification key / document / signature management unit 35 reads the verification key vk and the signature σ and document M from the memory unit 34, and the verification key / document / signature transmission unit 36 ​​transmits the verification key vk, the signature σ, and the document M to the fourth device 40 (step 3).

[0098] In the fourth device 40, the verification key / document / signature acquisition unit 41 acquires the verification key vk, the signature σ, and the document M (step 1).

[0099] In the fourth device 40, the signature verification unit 42 verifies the correctness of the pair of the signature σ=(e, s) and the document M using the verification key vk (=ĝx mod p) (Verify(vk, σ, M)) (step 2).

[0100] That is, the signature verification unit 42 of the fourth device 40 obtains a value r' by multiplying the value obtained by raising the generator g to the power s by the value obtained by raising the public key v to the power e. r' = (g^s)*(v^e) mod p …(40) Then, the hash value for r' and document M H(r', M) …(41) Calculate e = H(r', M) …(42) If true, Verify(vk, M, σ) returns 1 (accepted), otherwise it returns 0 (not accepted).

[0101] That is, on the right side of equation (40), g^s = g^ {(k1 + k2 - e*(x'+Δ)) mod q} mod p …(43) v^e = g^{(x*e) mod q} mod p …(44) Therefore, r' in equation (40) is given by: r' = g^{(k1+k2 -e*(x'+Δ) +e*x) mod q} mod p …(45)

[0102] where: x=x'+Δ mod q …(46) Then, equation (45) becomes r' = g^{(k1+k2) mod q} mod p …(47) and r' is equal to r in equation (37).

[0103] therefore, H(r', M) = H(r, M)=e …(48) holds, and verifying the signature σ: Verify(vk, M, σ) returns 1 (accepted).

[0104] on the other hand, x ≠ x'+Δ mod q …(49) If so, r' ≠ r, therefore, H(r', M)≠e …(50) and Verify(vk, M, σ) returns 0 (rejection).

[0105] In the Verify(vk, σ, M) of the signature verification unit 42 of the fourth device 40, if (g^s)*(v^e) matches the right-hand side of equation (37): r1*r2 mod p=g^{(k1+k2)mod q} mod p, 1 (accepted) may be returned, and if they do not match, 0 (not accepted) may be returned.

[0106] Fig. 5 is a diagram for explaining a modification of Fig. 4. Steps 1 to 5 in the first device 10 and steps 1 to 3 in the sixth device 60 are the same as those in Fig. 4, and therefore description thereof will be omitted.

[0107] In the sixth device 60, the first shared signature generation processing unit 63C generates a first signature σ' (=Sign(x', M)) for the document M using the second shared key x' (step 4) and transmits the first signature σ' to the first device 10 (step 5).

[0108] In the first device 10, the second shared signature generation processing unit 15D receives the first signature σ' (=Sign(x', M)) (step 6), and generates a second signature σ (=Sign(x, M)) for the document M using the first signature σ' and the second shared key Δ, from the first signature σ' (=Sign(x', M)) for the document M using the first shared key x', by the key homomorphic operation KHom(Δ, σ') (step 7). Signature σ(=Sign(x,M))← KHom(Δ,σ') …(51)

[0109] The document and signature sending unit 16 of the first device 10 sends the second signature σ (=Sign(x, M)) generated in step 7 and the document M to the device 30 (step 8).

[0110] Regarding Schnorr signatures, let (e, s') be the first signature σ' for document M using the first shared key x'. The e and s' of the first signature σ' are given below.

[0111] The verification key is v k = g^x' mod p …(52)

[0112] Choose k uniformly at random. k ← R Zq …(53)

[0113] r = g^k mod p …(54) e = H(r, M) …(55) s' = k - e*x' mod q …(56)

[0114] Here, the verification key v corresponding to the sum of the first shared key x' and the second shared key Δ is k 'of v k '=g^(x'+Δ) …(57) year, s = s' - e*Δ mod q …(58) Then, let the second signature σ be (e, s).

[0115] H(g^s'*v k ^e mod p, M) =H(g^(ke*x'-e*Δ)*g^(x'+Δ)e mod p, M) =H(g^k mod p, M)=e …(59)

[0116] That is, the second signature σ=(e, s) is a signature on the document M using the first signing key x (=x'+Δ), and the function Khom converts the first signature σ=(e, s') using the first shared key x' into the second signature σ=(e, s) using the signing key (x'+Δ) obtained by shifting the first shared key x' by the second shared key Δ.

[0117] For ease of explanation, the above is based on the disclosure in Reference 2 (Schnorr signature, where the signature key x(s kThe explanation was based on the algorithm Adapt, which converts a signature σ by a signing key x' = x + Δ into a signature σ' by a signing key x' = x + Δ. However, the algorithm Adapt in Reference 2 takes the signing key vk, the document M, the signature σ, and the difference Δ as inputs, and converts them into a verification key v k '(p k )(←g^x*g^Δ) and σ', which does not completely match KHom in this disclosure. Note that, in addition to σ ← KHom(Δ,σ'), depending on the signature algorithm, it may be one that includes Δ, σ', and a document M as in equation (60), or one that includes Δ, σ', and M as in equation (61) with a verification key vk. σ← KHom(Δ,σ',M) …(60) σ← KHom(Δ,σ', M, vk) …(61)

[0118] Here, when biometric information is represented as an n-dimensional feature vector in Euclidean space, a non-limiting example of generating auxiliary data by performing an operation (addition) on this biometric information and an encoding key obtained by encoding a signature key (first signature key x) will be described. A square lattice may be used for encoding as the encoding function Encode that expands the first signature key x, which is a scalar value (integer), into an n-dimensional vector (see Patent Document 1, etc.). The first biometric information w and the second biometric information w' are assumed to be n-dimensional real vectors. w= (w1, …, w n ), w'= (w'1,…, w' n ) …(62)

[0119] The distance between the first biometric information w and the second biometric information w' is L ∞ A norm (maximum norm) may also be used. d (n) ∞ (w,w')= max {|w i -w' i |, i=1,…,n} …(63)

[0120] Distance d (n) ∞ (w, w') is a given threshold t h Below(d (n) ∞(w,w')≦t h ) then it is considered a match (same organism).

[0121] Let Y be an n-dimensional integer vector and define the lattice point set L as follows: L={Y=(y1,…,y n )| y i is a non-negative integer, 0≦y i ≦K} …(64) where K is t h Ya|w i | is a predetermined integer that is sufficiently larger than

[0122] The function int() that associates one integer z with an n-dimensional integer vector Y∈L is defined by the following equation (65). TIFF2026000070000002.tif19153 …(65) Inverse function int -1 () is a function that maps an integer z to an n-dimensional integer vector Y. Y ← int -1 (z) …(66)

[0123] The first signing key x (an integer) is converted to the inverse function int -1 When input into (), we get an n-dimensional integer vector A. A=(a1,…, a n )←int -1 (x) …(67)

[0124] Encoding function Encode() h *int -1 () The encoding key c obtained by encoding the first signing key x is an n-dimensional vector and is given by: c=(c1,…,c n )←Encode(x)=2t h *int -1 (x)=2t h *(a1,…, a n ) …(68)

[0125] Therefore, the first auxiliary data s1 is given by: s1 = Encode(x) + w = ​​2t h *(a1,…, a n )+(w1,…, w n ) =(2t h *a1+w1,…,2t h *a n +w n ) …(69)

[0126] When a square lattice is used for encoding the second auxiliary data s2 generated from the second biometric information w′ and the second shared key ΔEncode in the same manner as the first auxiliary data s1, c'=(c'1,...,c' n )←Encode(Δ)=2t h *int -1 (Δ)=2t h *(a'1,…, a' n ) …(70) Then, the second auxiliary data s2 is the following n-dimensional real-valued vector: s2= 2t h *int -1 (x')+w' = 2t h *(a'1,…, a' n )+(w'1,…,w' n ) =(2t h *a'1+w'1,…,2t h *a' n +w' n ) …(71)

[0127] The first key share generation unit 63B of the sixth device 60 decodes the difference between the first auxiliary data s1 and the second auxiliary data s2 to obtain the first key share x'. x'=Decode(s1-s2) …(72)

[0128] The arguments s1-s2 of the decoding function Decode are expressed as follows: s1-s2= (w1, …, w n )-(w′1, …, w′ n ) +Encode(x ) - Encode(Δ) =(w1-w′1,…,w n - w' n )+Encode(x-Δ) …(73)

[0129] When the difference (distance) between the first biometric information w and the second biometric information w′ is within the error correction range of the linear code, the decoding function Decode is used to obtain (w1-w′1,..., w n -w' n ) is absorbed, and Decode(s1-s2) in equation (72) becomes Decode (Encode(x-Δ))==x-Δ …(74) Therefore, equation (72) becomes: x'=x-Δ …(75) This becomes:

[0130] Encoding function Encode is 2t h *int -1 When () is used, the decoding function Decode is Decode(c) =int(c / 2t h ) …(76) It may also be possible to use the following.

[0131] x'=Decode(s1-s2) TIFF2026000070000003.tif15153 TIFF2026000070000004.tif15153 …(77)

[0132] Regarding the first biometric information w and the second biometric information w′, Distance d (n) ∞ (w,w') = max { |w i - w' i |, i=1,…,n} ≦ t h …(78) Then, in equation (73), the n-dimensional vector (w-w') / 2t h All components are within ±1 / 2.

[0133] Therefore, equation (77) becomes x'=Decode(s1-s2)=int(int -1 (x-Δ))=x-Δ …(79) This becomes:

[0134] Although the device (terminal) configuration is different, it is also possible to use a biometric signature system configured as in Patent Document 1, etc., in which a biometric certificate including registration commitment information and a public key is registered in advance, a biometric signature including a temporary public key, an electronic signature, and a signature commitment is generated, and a signature verification terminal verifies whether the electronic signature included in the biometric signature is a correct signature for a document using the temporary public key included in the biometric signature and the predetermined electronic signature algorithm, and verifies the validity of the set of the registration commitment information and the signature commitment information using the public key and the temporary public key. However, what will be registered in the external device (repository server) is a biometric certificate including a registration commitment Ce=Emb(X,KSe) in which a private key KSe is embedded in a registration feature X of biometric information using the embedding function Emb, or a biometric signature including a signature commitment Cs=Emb(X',KSs) in which a temporary private key KSs is embedded in a signature feature X' using the embedding function Emb. When a commitment with a secret key embedded in biometric information is registered in an external device, there is a possibility (though not completely impossible) that some of the biometric information may be leaked (Reference 4).

[0135] In contrast, according to the present disclosure, the first auxiliary data and the second auxiliary data (also referred to as key parameters or auxiliary keys) created based on biometric information are not registered in an external storage device such as the third device 30 (which can be accessed by not only the parties involved but also third parties). In other words, no part of the biometric information is leaked from the external storage device. This ensures the security of the biometric information (key). In other words, the distributed signature generation using biometric information disclosed in the present disclosure can simultaneously reduce the risks of both key loss and key leakage in digital signatures.

[0136] Fig. 6 is a diagram showing a schematic diagram of an example of a system implementation. At a first business entity 101, a biometric signature of a qualified worker is attached to a record document (e.g., an inspection record sheet) of work (such as an inspection) performed by the worker, and the signature and the record document (e.g., the signed inspection record sheet) are registered in a work record management device. At a second business entity 102, the authenticity of the pair of the signature and the record document can be verified using a verification key, which is a public key, thereby ensuring the identity and non-tampering. In other words, Fig. 6 shows an example of a system implementation in which the second business entity 102 verifies whether or not a product completion inspection performed by a qualified worker at the first business entity 101 has been inspected by an unqualified person or has involved any fraud, such as tampering with the inspection data.

[0137] The work terminal 110 acquires biometric information of the worker 103 using a camera or the like (not shown), and transmits the acquired biometric information to the biometric authentication / qualification determination device 120. The work terminal 110 may be a camera-equipped PC (Personal Computer) placed at the work site, or may be a dedicated terminal. As an example of a dedicated terminal, the work terminal 110 may be a control console of a manufacturing device or an inspection device operated by the worker 103.

[0138] The biometric authentication / qualification determination device 120 performs biometric authentication of the worker 103 using the biometric information acquired by the work terminal 110. It compares pre-registered biometric information (feature amount) with the biometric information (feature amount) acquired by the work terminal 110, and determines that the worker is the actual person if, for example, the similarity is higher than a predetermined threshold. The biometric authentication by the biometric authentication / qualification determination device 120 may be, for example, 1:N authentication. If the biometric authentication confirms that the worker is the actual person, the biometric authentication / qualification determination device 120 determines whether the worker 103 is qualified with regard to the work process (activities and operations) performed directly or indirectly by the worker 103, and returns the determination result to the work terminal 110.

[0139] The work terminal 110 receives the judgment result from the biometric authentication / qualification judgment device 120, and if the judgment result is OK (if the worker 103 is judged to be qualified), the work process (activities and operations (including a series of processes such as inspection equipment and manufacturing equipment)) by the worker 103 is permitted. When a work record (electronic document) of the work process by the worker 103 who has been judged to be qualified is generated automatically, semi-manually, or manually, the work terminal 110 generates a signature (digital signature) for the work record using the biometric information of the worker 103, and registers the generated signature together with the work record in the local work record management device 150, corresponding to the ID of the worker 103.

[0140] The local work record management device 150 registers the work record and signature of the worker 103 and uploads the registered work record and signature to the global work record management device 130 synchronously or asynchronously. Note that while FIG. 6 shows a configuration in which one biometric authentication / qualification determination device 120 is provided for one work terminal 110, a configuration in which one biometric authentication / qualification determination device 120 is provided for multiple work terminals 110 may also be used. Also, while FIG. 6 shows one local work record management device 150 provided for one work terminal 110, one local work record management device 150 may also be provided for multiple work terminals 110 of the first business operator 101. The local work record management device 150 is accessible within the first business operator 101, and access from outside (e.g., the second business operator 102) is not permitted.

[0141] The biometric information for biometric authentication and the biometric information for biometric signature of the worker 103 acquired by the worker terminal 110 may be of different modalities or may be the same.

[0142] The global work record management device 130 is provided in common for a plurality of businesses (businesses).

[0143] The verification device 140 of the second business operator 102 obtains the work record, signature, and verification key to be verified from the global work record management device 130, and verifies the signature on the work record using the verification key (verifies whether the pair of work record and signature is correct).

[0144] As a configuration for determining whether an individual is qualified (authorized) or not based on biometric authentication and information about the individual, for example, Reference 4 discloses a configuration in which biometric authentication is performed to determine whether the individual is qualified (authorized), maintenance activity information regarding maintenance activities for equipment for which maintenance activities are permitted based on the authentication and the authority determination is received, and the received maintenance activity information is compared with the permitted maintenance activities read from the maintenance activity rules to perform a logical operation on maintenance activity consistency; however, the authenticity of the maintenance activity information (for example, identity or non-tampering) cannot be verified by outside parties or other organizations.

[0145] Fig. 7 is a diagram schematically illustrating an example of the device configuration of the system 1' in Fig. 6. The work terminal 110 includes a biometric information acquisition unit 111 that acquires biometric information of the worker 103, such as a camera or a fingerprint authentication reader, and a biometric information transmission unit 112 that transmits the biometric information acquired by the biometric information acquisition unit 111 to the second device 20.

[0146] The biometric authentication / qualification determination device 120 includes a biometric information receiving unit 121 that receives biometric information from the work terminal 110, a biometric authentication unit 122 that performs identity authentication (1:N authentication) by checking whether any biometric information registered in advance in a memory unit 123 matches the biometric information received by the biometric information receiving unit 121, a qualification determination unit 124 that determines whether or not the worker 103, who has been authenticated as the person in question, is qualified by referring to a memory unit 125 that pre-stores the qualifications for predetermined activities, operations, etc., and a determination result transmission unit 126 that transmits the determination result to the work terminal 110. However, depending on the operating form of the work terminal 10 at the first business operator 101, 1:1 authentication may be performed in which the worker 103 has his / her employee ID (worker ID) read by a reader or the like (not shown) of the work terminal 110, and the biometric authentication / qualification determination device 120 retrieves a template (registered biometric information) corresponding to the employee ID (worker ID) or the like from a storage unit and compares it with the biometric information acquired by the work terminal 110. The biometric authentication unit 122 obtains the ID of the worker 103 corresponding to the registered biometric information compared with the biometric information of the person to be authenticated, and the qualification determination unit 124 may determine whether the worker 103 is qualified to perform an activity, operation, etc. by referring to a storage unit 125 that stores user IDs, activities, operations, etc., in association with the presence or absence of qualifications.

[0147] The work terminal 110 is equipped with a judgment result receiving unit 113 that receives the judgment result sent from the biometric authentication / qualification judgment device 120, a work record acquisition unit 114 that acquires a work record (for example, an electronic document such as an inspection slip that records the inspection results of a part (product)) created in connection with a specified activity or operation performed by the qualified worker 103 (or performed under the management of the worker 103) if the judgment result received by the judgment result receiving unit 113 is qualified, a signature generation unit 115 that generates a signature for the work record acquired by the work record acquisition unit 114 using the biometric information for signature generation acquired by the biometric information acquisition unit 111, and a work record / signature transmission unit 116 that transmits the generated work record and signature to the local work record management device 150.

[0148] The local work record management device 150 includes a work record / signature receiving unit 151 that receives the work record and the signature, a memory unit 152 that stores the work record and the signature, and a work record / signature sending unit 153 that sends the work record and the signature to the global work record management device 130. The memory unit 152 may store related information such as the ID of the worker 103 in association (link) with the work record and the signature, as well as the ID of the first business operator 101 (site), an ID that identifies the work process, the serial number of the product to be manufactured or inspected, the lot number, the manufacturing equipment (inspection equipment) number, the time of the work, the worker's name, and the time the work record was created.

[0149] The global work record management device 130 includes a work record / signature receiving unit 131 that receives a work record and a signature from the local work record management device 150, a memory unit 132 that stores the work record and the signature, a verification key acquisition unit 133 that acquires a verification key (public key) for verifying the signature, a memory unit 134 that stores the verification key, a verification key / work record / signature management unit 135 that acquires the work record / signature and the verification key from the memories 132 and 134 upon receiving an acquisition request from the verification device 140, and a verification key / work record / signature sending unit 136 that transmits the verification key and work record / signature acquired by the verification key / work record / signature management unit 135 to the verification device 140. The verification key / work record / signature management unit 135 may manage the verification key and the work record / signature, for example, in association with a worker ID.

[0150] A verification device 140 in a site (office) of a second business operator 102, which is separate from the first business operator 101, includes a verification key / work record / signature acquisition unit 141 that transmits a request to acquire a verification key, document, and signature to the global work record management device 130 and acquires them, and a signature verification unit 142 that uses the acquired verification key to verify the correctness of a pair of work record and signature. Note that the verification key for verifying the signature may be acquired by the global work record management device 130 from a key generation device (not shown) corresponding to the fifth device 50 in Fig. 3, or the key generation device (not shown) may register the verification key in a key server (public key database) (not shown), and the global work record management device 130 may acquire it from the key server.

[0151] The first business operator 101 and the second business operator 102 may be upstream and downstream units in a supply chain, such as when the first business operator 101 receives parts manufactured by the first business operator 101 and the second business operator 102 assembles the parts. In this case, the global work record management device 130 may be a database or a blockchain that constitutes a supply chain infrastructure. The second business operator 102 (second supply chain unit) downstream of the supply chain, which receives parts or products from the first business operator 101 (first supply chain unit) upstream of the supply chain, can verify that inspections of parts (products) and the like at the first business operator 101 were performed by biometrically authenticated qualified personnel, and verify the identity and authenticity of the work records created. Alternatively, the second business operator 102 may be upstream in the supply chain, and the first business operator 101 may be downstream in the supply chain. In this case, an upstream business operator in the supply chain can verify that the inspection of a product assembled or manufactured using parts by the first business operator 101, who is the supplier of the parts, etc., has been carried out by the qualified person who created the signature, and that the work record has not been tampered with since it was created. In this way, a set of a work record and signature created by one business operator (business establishment) can be verified by another (external) business operator (business establishment) using a verification key, thereby ensuring traceability regarding the quality of parts (products), etc.

[0152] Furthermore, by registering pairs of work records (logs), signatures, and their verification keys for one or more processes in multiple units of the supply chain in the global work record management device 130, these pairs of work records (logs), signatures, and their verification keys can be shared among multiple units in the supply chain, enabling centralized management of information from product manufacturing to distribution. As a result, this information can be used, for example, to investigate the cause of a product problem or determine which products should be recalled. Registering work records together with signatures in the global work record management device 130 also helps prevent fraud, such as tampering with work records. Furthermore, distributed signature generation processing using biometric information can simultaneously reduce the risks of both key loss and key leakage in digital signatures.

[0153] In cases where a document that requires a signature or name / seal by law or regulation can be replaced with an electronic signature, the electronic signature can also be applied to fields where the electronic signature can be a signature using biometric information as described above. The work terminal 110 in Fig. 6 may be an operation terminal, an examination terminal, or a medical qualification certification terminal. In particular, it is suitable for application in the supply chain of pharmaceuticals and medical fields, where traceability is important.

[0154] In the above embodiment, the management device (for example, the biometric authentication / qualification determination device 120 in FIG. 6) manages whether or not a user has qualifications, but the user may also hold and manage qualification information himself or herself without going through an administrator (Self-Sovereign Identity: SSI). For example, if the qualification is an official qualification or one approved by a business or the like, verifiable credentials (VC) may be used. Verifiable credentials (VC) are certificates issued by an issuer and held by a holder, and a verifier verifies whether the certificate is valid.

[0155] Figure 8(A) is a diagram explaining verifiable credentials (VC) (Reference 5: §1.2 Ecosystem Overview, Figure 1). An issuer is a source of data required for verification by government agencies, trusted organizations, etc., and upon request from a holder, verifies ID information registered in a verifiable data registry and issues VCs. The holder registers ID information in a verifiable data registry using a schema. The holder requests the issuer to issue a VC for the ID information, stores the VC issued by the issuer, and presents the ID information and VC to a verifier. The verifier verifies the schema and ID information registered in the verifiable data registry against the ID information presented by the holder, and verifies the presented VC. The verifiable data registry (VDR) manages the certificate (VC) schema, ID information, issuer's public key, and other related data required for systems to use certificates (VC).

[0156] Figure 8(B) shows the elements of a verifiable credential (VC) (Reference 5 §3.2 Credentials, Figure 5 Basic components of a verifiable credential, Figure 5). · Metadata (Credential Metadata): Metadata indicating the issuer, the date and time of issue, etc. Claim(s): The claims made by the certificate. · Proof(s): Digital signature by the issuer.

[0157] Figure 8(C) shows the elements of a Verifiable Presentation (VP) (Reference 5, §3.3 Presentations, Figure 7, Figure 8). VP is a data format for presenting a certificate to a verifier. Presentation Metadata: Metadata that indicates the presenter, publication date, etc. Verifiable Credential(s): The VC to be presented Proof(s): Digital signatures that prove the creator is the holder.

[0158] Verification of VP follows, for example, reference 5 (§3.3 Presentations, Figure 8 Information graphs associated with a basic verifiable presentation) and patent document 1.

[0159] A user requests verifiable credentials to perform a task from the appropriate authority (certificate issuing authority). The authority issues a signed verifiable credential (VC) that attests to the user's identity (credentials). The VC is stored in a wallet provided by, for example, an app on the user's smartphone. As the holder of the VC, the user can present the verifiable credential (VC) as proof of credentials.

[0160] For example, the third device 30 in Fig. 1 may store and hold a verifiable presentation (VP) of a user (holder, worker 103 in Fig. 6) in association with a signature and a document (work record + signature in Fig. 6), and the fourth device 40 may verify the signature of the document (work record + signature in Fig. 6) using a verification key, and also verify the signature of the issuer of the VC included in the VP and the signature of the holder (user) from the user's (holder's) VP as a verifier. Alternatively, the first device 10 (work terminal 110 in Fig. 6) may generate a signature for the VP using biometric information using the distributed signature generation method described above, add it to the signature of the VP proof(s), and register it in the third device 30 in Fig. 1 (global work record management device 130 in Fig. 6), and the fourth device 40 may verify the holder's (user's) signature from the VP using the same verification key as the signature for the document.

[0161] 1 may confirm eligibility by acquiring a VC (VP) from a wallet of a user (holder) smartphone (not shown) as a verifier and verifying the signature of the VC (VP). For example, the second device 20 may acquire the user's VC for a user whose biometric authentication is OK, acquire a decentralized identifier (DID) included in the VC (VP), acquire the issuer's (holder's) DID document linked to the DID from a verifiable data registry (VDR), acquire the issuer's (holder's) verification key from the issuer's (holder's) DID document, and verify the signature of the VC (VP) to confirm that it is a valid certificate, thereby determining eligibility. In this case, the second device 20 may be provided with a virtual wallet that stores the user's VC, and for a user whose biometric authentication is OK (a user whose identity has been verified), the second device 20 may obtain a VC (VP) from the virtual wallet corresponding to the user ID corresponding to the biometric information, obtain a decentralized identifier (DID) included in the VC (VP), obtain a verification key of the issuer (holder) from a verifiable data registry (VDR), and verify the signature of the VC (VP) to confirm that it is a valid certificate.

[0162] FIG. 9 is a schematic diagram illustrating an example in which each device in the system 1 described above is implemented using a computer equipped with a communication function and communicatively connectable with each other via a network. In FIG. 9(A), each device (10, 20, 30, 40, 50, 60) includes a processor 201 (or processors), a storage device 202, an input / output device 203, and a communication interface 204. The storage device 202 may include semiconductor storage such as RAM (Random Access Memory), ROM (Read Only Memory), or EEPROM (Electrically Erasable and Programmable ROM), a hard disk drive (HDD), a compact disc (CD), or a digital versatile disc (DVD). The processor 201 executes a program (not shown) stored in the storage device 202 to realize the processing and functions of each device. The input / output device 203 may include a keyboard and a display. In the device 10, the input / output device 203 may include a sensor for acquiring biometric information. In this case, the sensor may be an image sensor (camera) if the biometric information is a face, iris, or the like; if the biometric information is a fingerprint, a fingerprint sensor, or finger veins, the sensor may be, for example, a light-emitting diode (LED) that emits near-infrared light and a near-infrared camera that captures the light transmitted through the finger. The sensor may be a removable sensor, such as a universal serial bus (USB) device. The communication interface 204 may include a network interface card, a transceiver, or the like, and may be configured to communicate with each other via a local area network (LAN), a wide area network (WAN) such as the Internet, a wireless LAN, a mobile communication network, or the like. The communication interface 204 may also be configured to communicate with an external sensor (for example, a Bluetooth (registered trademark)-connected sensor) and include an interface that receives biometric information acquired by the external sensor.

[0163] FIG. 9B is a diagram illustrating an example in which the devices 10, 20, etc. of the system 1 described above are implemented as virtual machines using server virtualization technology. A plurality of virtual machines (VM303) run on a virtualization platform 302, such as a hypervisor, implemented on a physical machine 301 of the server. One or more of the devices (10, 20, 30, 40, 50, 60) of the system 1 may be implemented as the virtual machine (VM303). Although there is a single physical server, a virtual server environment in which multiple servers run is provided. Each virtual machine (VM) is preferably configured to operate in an isolated environment in memory space. In this case, a program that realizes the processing of one of the devices (10, 20, 30, 40, 50, 60) runs on the virtual OS (Operating System) of the virtual machine (VM). A virtual machine VM303 that virtually realizes any of the devices may be configured to communicate with other virtual machines via a virtual network, or may be configured to communicate with other devices (10, 20, 30, 40, 50, 60) via a LAN, a WAN such as the Internet, or the like via a physical interface (communication interface) of the physical machine 301. In this case, the multiple virtual machines VM303 do not need to be executed on the same physical machine, and may be configured to communicate with virtual machines VM executed on other physical machines.

[0164] [Reference 1] JP 2021-087167 A [Reference 2] David Derler1, et al., "Key-Homomorphic Signatures: Definitions and Applications to Multiparty Signatures and Non-Interactive Zero-Knowledge," Designs, Codes and Cryptography 87, 1372-1413, 2019 [Reference 3] Yevgeniy Dodis, et al. "Fuzzy Extractors: How to Generate Strong Keys from Biometrics and Other Noisy Data," SIAM Journal on Computing, 38(1):97-139, 2008 [Reference 4] Japanese Patent Application Publication No. 2008-040569 [Reference 5]Verifiable Credentials Data Model v1.1 (w3.org):§1. Introduction~§3. Core Data Mode[May 10, 2024]インターネット <url>https: / / www.w3.org / TR / vc-data-model /

[0165] Some of the above-mentioned embodiments are further noted as follows (but are not limited to the following):

[0166] (Supplementary Note 1) The verification system comprises a first device that executes a process of acquiring biometric information, a second device that executes a process of performing biometric authentication using the biometric information and a process of determining whether an individual authenticated as the identity of the individual is qualified for a specified activity or operation, wherein the first device executes a process of creating a signature using the biometric information for the individual's signature for a document created in connection with the specified activity or operation of the individual determined by the second device to be qualified, a third device that executes a process of registering the document and the signature created by the first device in a first memory unit, and a fourth device that executes a process of verifying the correctness of the pair of the document and the signature registered in the first memory unit of the third device using a public key for verifying the signature.

[0167] (Appendix 2) The verification system described in Appendix 1 includes a first distributed processing unit that holds first auxiliary data created using the individual's first biometric information and a signature key, and a second distributed processing unit that acquires the individual's second biometric information as biometric information for the individual's signature and generates second auxiliary data from the second biometric information and a second distributed key, and the first distributed processing unit and the second distributed processing unit communicate with each other to generate a first distributed key using the first auxiliary data and the second auxiliary data, and to distributely execute a process of generating the signature for the document using at least the first distributed key, the second distributed key, and the document.

[0168] (Appendix 3) In the verification system described in appendix 1 or 2, the first device, or the first device and the second device, are included in a first unit in a supply chain; the fourth device is included in a second unit on the supply chain; The third device is included in a supply chain infrastructure that manages the supply chain including at least the first unit and the second unit.

[0169] (Supplementary Note 4) The verification system according to Supplementary Note 1 or 3 includes a first distributed processing unit having a second memory unit that stores first auxiliary data created using a first signature key and the individual's first biometric information, and a second distributed processing unit that executes processes of acquiring the individual's second biometric information as the individual's biometric information for the signature, generating a second key share, generating second auxiliary data using the second biometric information and the second key share, and transmitting the document and the second auxiliary data to the first distributed processing unit. The first device includes the second distributed processing unit. The first distributed processing unit executes processes of generating a first key share using the first auxiliary data and the second auxiliary data, and the first distributed processing unit and the second distributed processing unit generate the signature for the document using the first signature key, using at least the first key share, the second key share, and the document.

[0170] (Appendix 5) In the verification system described in Appendix 4, the first auxiliary data is a combination of an encoded value of the first signature key and the first biometric information, the second auxiliary data is a combination of an encoded value of the second distributed key and the second biometric information using the same operation as the combination used for the first auxiliary data, and the first distributed processing unit generates the first distributed key by decrypting the difference between the first auxiliary data and the second auxiliary data.

[0171] (Appendix 6) In the verification system described in Appendix 5, the first shared key is obtained by subtracting the second shared key from the first signing key, and the second shared processing unit uses the second shared key to generate a signature for the document using the sum of the first shared key and the second shared key as the signing key for the first signature generated for the document by the first shared processing unit using the first shared key as the signing key.

[0172] (Appendix 7) The verification system described in any one of Appendices 1 to 6 further includes a device that executes a process of generating a pair of the first signature key and verification key, a process of registering the verification key in the memory unit, and a process of transmitting the first auxiliary data created using the first signature key and the first biometric information to the first distributed processing unit.

[0173] (Appendix 8) In the verification system described in any of Appendices 1 to 7, the second device and / or the fourth device verifies the qualifications of the individual from the digital signature of the individual who is the VC Issuer and / or Holder of the individual's VC (Verifiable Credentials) and / or VP (Verifiable Presentation) Proof(s).

[0174] (Appendix 9) Verification method: a first process of performing biometric authentication using biometric information and determining whether or not an authenticated individual is qualified to perform a predetermined activity or operation; a second process of creating a signature using the individual's signature biometric information on a document created in connection with the predetermined activity or operation of the individual determined to be eligible; a third process of registering the document and the signature in a storage device; and a fourth process of verifying the correctness of the pair of the document and the signature registered in the storage device using a public key for verifying the signature.

[0175] (Appendix 10) In the verification method described in Appendix 9, When creating a signature using the signature biometric information of the individual, storing first auxiliary data created using the individual's first biometric information and a signature key in a first distributed processing unit; a second distributed processing unit acquires second biometric information of the individual as the signature biometric information of the individual, and generates second auxiliary data from the second biometric information and a second key share; The first distributed processing unit and the second distributed processing unit communicate with each other to generate a first distributed key using the first auxiliary data and the second auxiliary data, and execute a process of generating the signature for the document in a distributed manner using at least the first distributed key, the second distributed key, and the document.

[0176] (Supplementary Note 11) In the verification method according to Supplementary Note 9 or 10, the second process or the first process and the second process are performed in a first unit in the supply chain; The fourth process is performed in a second unit on the supply chain, and the third process is performed in a supply chain infrastructure that manages the supply chain including at least the first unit and the second unit.

[0177] (Appendix 12) In the verification method described in Appendix 9 or 11, When creating a signature using the signature biometric information of the individual, the first distributed processing unit receives first auxiliary data created using the first signature key and the individual's first biometric information, and registers the first auxiliary data in the storage unit; a second distributed processing unit acquires second biometric information of the individual as the biometric information for the signature of the individual, generates a second distributed key, generates second auxiliary data from the second biometric information and the second distributed key, and transmits the document and the second auxiliary data to the first distributed signature generation process; the first distribution processing unit generates a first key share using the first auxiliary data and the second auxiliary data; The first distributed processing unit and the second distributed processing unit execute a signature generation process in a distributed manner using at least the first key share and the second key share, and generate a signature for the document.

[0178] (Appendix 13) In the verification method described in Appendix 10 or 12, the first auxiliary data is a combination of an encoded value of the first signature key and the first biometric information, the second auxiliary data is obtained by combining an encoded value of the second key share and the second biometric information using the same operation as that used for the first auxiliary data, The first distribution processing unit generates the first key share by decrypting the difference between the first auxiliary data and the second auxiliary data.

[0179] (Appendix 14) In the verification method described in Appendix 13, The first shared key is obtained by subtracting the second shared key from the first signature key, and the second shared processing unit uses the second shared key to generate a signature for the document using the sum of the first shared key and the second shared key as the signature key from the first signature generated for the document by the first shared processing unit using the first shared key as the signature key.

[0180] (Appendix 15) In the verification method according to any one of Appendices 9 to 14, generating the first signature key and verification key pair; a process of registering the verification key in the storage device; A process of transmitting the first auxiliary data created using the first signature key and the first biometric information to the first distributed processing unit is executed.

[0181] (Appendix 16) In the verification method according to any one of Appendices 9 to 14, The first process determines whether or not the individual is eligible, and / or the fourth process verifies the individual's eligibility from the digital signature of the individual who is the VC Issuer and / or Holder of the individual's VC (Verifiable Credentials) and / or VP (Verifiable Presentation) Proof(s).

[0182] (Appendix 17) Recording medium (non-transitory computer readable medium) is: A process of performing biometric authentication using biometric information; A process for determining whether the principal and the authenticated individual are qualified to perform a predetermined activity or operation; a process of creating a signature using the individual's biometric signature information for a document created in connection with the predetermined activity or operation of the individual determined to be eligible; a process of registering the document and the signature in a storage device; A program is recorded that causes one or more processing devices to execute one or more processes, including a process of verifying the correctness of the pair of the document and the signature registered in the storage device using a public key for verifying the signature.

[0183] The disclosures of the above patent documents and references are incorporated herein by reference. Modifications, adjustments, and combinations of the embodiments and examples are possible within the scope of the disclosure of this application (including the scope of the claims), and further based on the basic technical ideas thereof. Furthermore, various combinations and selections of the various disclosed elements (including each element of each appendix, each element of each example, each element of each drawing, etc.) are possible within the scope of the claims of the present invention. In other words, this disclosure naturally includes various modifications and alterations that would be possible for a person skilled in the art based on the entire disclosure, including the scope of the claims, and the technical ideas thereof. [Explanation of symbols]

[0184] 1,1' System (Verification System) 10 First device (processing device) 11 Biometric information acquisition unit 12 Biometric information transmission unit 13. Judgment result receiving unit 14 Document Acquisition Department 15 Signature generator 15A Second distributed key generation unit 15B Second auxiliary data generation unit 15C Second auxiliary data and document transmission unit 15D Second shared signature generation processing unit 16 Document and Signature Transmission Department 20 Second device (processing device) 21 Biometric information receiving unit 22 Biometric authentication department 23 Memory unit (biometric information memory unit) 24 Qualification Determination Department 25 Memory unit (qualification information memory unit) 26 Judgment result transmission unit 30 Third device (processing device) 31 Document and Signature Receiving Department 32 Memory unit (document and signature memory unit) 33 Verification key acquisition unit 34 Memory unit (verification key memory unit) 35 Verification Key, Document, and Signature Management Unit 36 Verification key, document, and signature transmission unit 40 Fourth device (processing device) 41 Verification key, document, and signature acquisition unit 42 Signature Verification Unit 50 Fifth device (processing device) 51 Biometric information acquisition unit 52 Signature key and verification key generation unit 53 First auxiliary data generation unit 54 Verification key transmission unit 55 First auxiliary data transmission unit 60 6th device (processing device) 61 First auxiliary data receiving unit 62 storage unit (first auxiliary data storage unit) 63 Distributed signature generation unit 63A Second auxiliary data and document receiving unit 63B First distributed key generation unit 63C First shared signature generation processing unit 101 First Operator (Site) 102 Secondary Operator (Site) 103 Workers 110 Work terminal 111 Biometric information acquisition unit 112 Biometric information transmission unit 113 Judgment result receiving unit 114 Work Record Acquisition Unit 115 Signature generation section 116 Work Record and Signature Transmission Department 120 Biometric authentication and qualification determination device 121 Biometric information receiving unit 122 Biometric Authentication Department 123 Memory unit (biometric information memory unit) 124 Qualification Determination Department 125 Memory unit (qualification information memory unit) 126 Judgment result transmission unit 130 Global Work Record Management Device 131 Work Record and Signature Receiving Department 132 Memory unit (work record / signature memory unit) 133 Verification key acquisition unit 134 Memory unit (verification key memory unit) 135 Verification Key, Work Record, and Signature Management Unit 136 Verification key, work record, and signature transmission section 140 Verification Device 141 Verification key, work record, and signature acquisition section 142 Signature Verification Unit 150 Local Work Record Management Device 151 Work Record and Signature Receiving Department 152 Storage section 153 Work Record and Signature Transmission Department 200 computers 201 processor 202 Storage device 203 Input / Output Devices 204 Communication Interface 300 servers 301 Physical Machine 302 Virtualization Platform 303 Virtual Machines< / url>

Claims

1. a first device that executes a process for acquiring biometric information; a second device that performs a process of performing biometric authentication using the biometric information and a process of determining whether or not the authenticated individual is qualified to perform a predetermined activity or operation; Equipped with The first device further performs a process of creating a signature using the biometric information for the individual's signature on a document created in connection with the predetermined activity or operation of the individual determined to be eligible by the second device; a third device that executes a process of registering the document and the signature created by the first device in a first storage unit; a fourth device that executes a process of verifying the authenticity of a pair of the document and the signature registered in the first storage unit of the third device by using a public key for verifying the signature; A verification system further equipped with:

2. a first shared signature generation processing unit that holds first auxiliary data created using the individual's first biometric information and a signature key; a second shared signature generation processing unit that acquires second biometric information of the individual as the signature biometric information of the individual, and generates second auxiliary data from the second biometric information and a second shared key; Including, 2. The verification system according to claim 1, wherein the first distributed signature generation processing unit and the second distributed signature generation processing unit communicate with each other to generate a first distributed key using the first auxiliary data and the second auxiliary data, and execute a process of generating the signature for the document using at least the first distributed key, the second distributed key, and the document in a distributed manner.

3. the first device, or the first device and the second device, are included in a first unit in a supply chain; the fourth device is included in a second unit on the supply chain; The verification system of claim 1 , wherein the third device is included in a supply chain infrastructure that manages the supply chain including at least the first unit and the second unit.

4. a first shared signature generation processing unit including a second storage unit for storing first auxiliary data created using a first signature key and first biometric information of the individual; obtaining second biometric information of the individual as the signature biometric information of the individual; a process of generating a second key share; generating second auxiliary data using the second biometric information and the second key share; a second shared signature generation processing unit that executes a process of transmitting the document and the second auxiliary data to the first shared signature generation processing unit; Including, the first device includes the second shared signature generation processing unit; The first shared signature generation processing unit performing a process of generating a first key share using the first auxiliary data and the second auxiliary data; The first shared signature generation processing unit and the second shared signature generation processing unit The verification system according to claim 1 , further comprising: generating the signature for the document using the first signature key, using at least the first shared key, the second shared key, and the document.

5. the first auxiliary data is a combination of an encoded value of the first signature key and the first biometric information, the second auxiliary data is obtained by combining a value obtained by encoding the second key share and the second biometric information using the same operation as that used for the first auxiliary data, The verification system according to claim 4 , wherein the first shared signature generation processing unit generates the first shared key by decrypting a difference between the first auxiliary data and the second auxiliary data.

6. the first key share is the first signature key minus the second key share, 6. The verification system according to claim 5, wherein the second distributed signature generation processing unit uses the second distributed key to generate a signature for the document using a signature key obtained by combining the first distributed key and the second distributed key from a first signature generated for the document by the first distributed signature generation processing unit using the first distributed key as a signing key.

7. generating the first signature key and verification key pair; a process of transmitting the verification key to the third device and registering it in the first storage unit; a process of generating the first auxiliary data using the first signature key and the first biometric information; a process of transmitting the first auxiliary data to the first distributed signature generation processing unit; 5. The verification system of claim 4, further comprising a device for performing:

8. The verification system of claim 1, wherein the second device and / or the fourth device verifies the individual's qualifications from the individual's digital signature, which is the VC Issuer and / or Holder of the individual's VC (Verifiable Credentials) and / or VP (Verifiable Presentation) Proof(s).

9. a first process of performing biometric authentication using biometric information and determining whether or not an individual authenticated as the person is qualified to perform a predetermined activity or operation; a second process of creating a signature using the individual's signature biometric information for a document created in connection with the predetermined activity or operation of the individual determined to be eligible; a third process of registering the document and the signature in a storage device; a fourth process of verifying the authenticity of the pair of the document and the signature registered in the storage device by using a public key for verifying the signature; a verification method, including:

10. When creating the signature using the signature biometric information of the individual, storing first auxiliary data created using the individual's first biometric information and a signature key in a first distributed signature generation processing unit; a second shared signature generation processing unit acquires second biometric information of the individual as the biometric information for the signature of the individual, and generates second auxiliary data from the second biometric information and a second shared key; 10. The verification method according to claim 9, wherein the first distributed signature generation processing unit and the second distributed signature generation processing unit communicate with each other to generate a first distributed key using the first auxiliary data and the second auxiliary data, and execute a process of generating the signature for the document in a distributed manner using at least the first distributed key, the second distributed key, and the document.

11. the second process, or the first process and the second process, are performed in a first unit in a supply chain; the fourth process is performed at a second unit in the supply chain; The verification method according to claim 9 , wherein the third process is performed by a supply chain infrastructure that manages the supply chain including at least the first unit and the second unit.

12. When creating the signature using the individual's biometric information for signature, In the first shared signature generation process, first auxiliary data created using a first signature key and the individual's first biometric information is received and registered in a storage unit; In the second distributed signature generation process, second biometric information of the individual is acquired to generate a second distributed key, second auxiliary data is generated from the second biometric information and the second distributed key, and the document and the second auxiliary data are transmitted to the first distributed signature generation process; the first shared signature generation process generates a first shared key using the first auxiliary data and the second auxiliary data; 10. The verification method according to claim 9, wherein the first shared signature generation process and the second shared signature generation process execute a signature generation process in a distributed manner using at least the first shared key and the second shared key to generate the signature for the document.

13. the first auxiliary data is a combination of an encoded value of the first signature key and the first biometric information, the second auxiliary data is obtained by combining a value obtained by encoding the second key share and the second biometric information using the same operation as that used for the first auxiliary data, the first shared signature generation process generates the first shared key by decrypting a difference between the first auxiliary data and the second auxiliary data; 13. The verification method according to claim 12, wherein the second distributed signature generation process uses the second distributed key to generate a signature for the document using the sum of the first distributed key and the second distributed key as a signing key from a first signature generated for the document in the first distributed signature generation process using the first distributed key as a signing key.

14. generating the first signature key and verification key pair; a process of registering the verification key in the storage device; a process of generating the first auxiliary data using the first signature key and the first biometric information; a process of transmitting the first auxiliary data to the first distributed signature generation process; The method of claim 12 further comprising:

15. A process of performing biometric authentication using biometric information; A process for determining whether the principal and the authenticated individual are qualified to perform a predetermined activity or operation; a process of creating a signature using the individual's signature biometric information for a document created in connection with the predetermined activity or operation of the individual determined to be eligible; a process of registering the document and the signature in a storage device; A recording medium having a program recorded thereon that causes one or more processing devices to execute one or more processes, including a process of verifying the correctness of the pair of the document and the signature registered in the storage device using a public key for verifying the signature.

Images