Authentication system and authentication method

Abstract

An authentication system is characterized by being provided with: a signature device that associates and holds an electronic certificate issued in advance with a personal signature key corresponding to the electronic certificate; a registration terminal that generates registration authentication information on the basis of registration biological information of a registered person, and that generates a person signature with respect to the registration authentication information using the signature device; and an issuing server which verifies the registration authentication information and the personal signature by using the electronic certificate to confirm that the registrant and the personal of the electronic certificate are the same person, whereby it is possible to provide a highly convenient authentication system and authentication method.

Description

Technical Field

[0001] The present invention relates to an authentication system and an authentication method for performing personal authentication and certification processing of personal attribute information. Background Art

[0002] Online identity verification using electronic ID cards such as My Number Cards has begun to be used. In addition, biometric authentication technology that authenticates individuals based on biometric information such as fingerprints, veins, faces, and irises is becoming widely used.

[0003] Usually, when accepting services to create an account for some online services, online identity verification is performed in order to present and prove the attribute information related to the user. For example, if you open a bank account, you need to prove basic attributes such as name, address, date of birth, etc. When buying student tickets at a student discount price, you need to show your student ID card to prove that you are a student. At this time, the service provider needs to verify the authenticity of the attribute information presented and proved by the user, and authenticate that the user presented is really the person related to the attribute information.

[0004] For example, Patent Document 1 discloses an online identity verification method using an electronic identity certificate and facial authentication. In this document, if the registrant presents the electronic identity certificate and face to the system, the system will read out the electronic certificate and the registrant's facial image stored in the IC chip of the electronic identity certificate, take a photo of the registrant's face, and send this information to the authentication server. The authentication server compares the registrant's facial image with the registrant's photographed facial image, and verifies the electronic certificate (digital certificate). Once the facial comparison and electronic certificate verification are successful, the online identity verification is successful. In this way, in this document, attribute proof based on electronic certificates and identity authentication based on facial authentication are simultaneously implemented.

[0005] Prior art literature

[0006] Patent Literature

[0007] Patent document 1: WO2022 / 024281 Summary of the invention

[0008] Problems to be solved by the invention

[0009] The method described in Patent Document 1 has a problem with convenience during online identity verification. One of the convenience issues is that the user needs to present the electronic identity certificate to the system every time. Another convenience issue is that the means of identity verification is limited to facial verification using the facial image stored in the electronic identity certificate, which results in insufficient accuracy of verification, difficulty in responding to changes over time, problems with social acceptance, and insufficient privacy protection. In addition, another convenience issue is that more personal information than necessary is disclosed by sending personal information such as facial images and electronic certificates to the service provider server.

[0010] The main object of the present invention is to provide an authentication system with high convenience.

[0011] Means used to solve problems

[0012] In order to achieve the above-mentioned purpose, one of the representative authentication systems of the present invention is characterized in that it comprises: a signature device, which establishes a correspondence between an electronic certificate issued in advance to an individual and a personal signature key corresponding to the above-mentioned electronic certificate and stores it; a registration terminal, which generates registration authentication information based on the registration biometric information of the registrant, and uses the above-mentioned signature device to generate a personal signature for the above-mentioned registration authentication information; and an issuing server, which verifies the above-mentioned registration authentication information and the above-mentioned personal signature by using the above-mentioned electronic certificate, thereby confirming that the above-mentioned registrant and the person in the above-mentioned electronic certificate are the same person.

[0013] In addition, one of the representative authentication methods related to the present invention is characterized in that it includes: a step of a registration terminal generating registration authentication information based on the registration biometric information of the registrant; a step of generating a personal signature for the above-mentioned registration authentication information by a signature device that establishes a correspondence between an electronic certificate issued in advance to the individual and the personal signature key corresponding to the above-mentioned electronic certificate and maintains the signature key; and a step of an issuing server verifying the above-mentioned registration authentication information and the above-mentioned personal signature by using the above-mentioned electronic certificate to confirm that the above-mentioned registrant and the person in the above-mentioned electronic certificate are the same person.

[0014] According to the above technical solution, in online personal confirmation, it is not necessary to present the electronic identity certificate every time, and it is not limited to facial recognition but can use any biometric authentication method. Furthermore, personal authentication and attribute proof can be performed while disclosing the minimum attribute information required for service provision to the service provider server.

[0015] Effects of the Invention

[0016] According to the present invention, it is possible to provide an authentication system and an authentication method with high convenience. Other problems, structures, and effects than those described above will become apparent from the following description of the embodiments. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] Figure 1 It is a block diagram showing the functional structure of the first embodiment of the present invention.

[0018] Figure 2 This is a flowchart showing the registration process according to the first embodiment of the present invention.

[0019] Figure 3 This is a flowchart showing the authentication process according to the first embodiment of the present invention.

[0020] Figure 4 It is a block diagram showing the functional structure of the second embodiment of the present invention.

[0021] Figure 5 This is a flowchart showing the registration process according to the second embodiment of the present invention.

[0022] Figure 6 This is a flowchart showing the authentication process according to the second embodiment of the present invention.

[0023] Figure 7 This is a block diagram showing the hardware configuration of a registration terminal, a user terminal, an authentication server, an issuing server, a signature device, a service providing server, and a PDS according to the first and second embodiments of the present invention. DETAILED DESCRIPTION

[0024] In the following embodiments 1 and 2, it is assumed that the person has obtained an electronic certificate (digital certificate) from a trustworthy institution (national, autonomous, financial institution, private certification authority, etc.) in advance, and the signature device manages the person's signature key corresponding to the electronic certificate. Here, the electronic certificate is data obtained by giving an electronic signature generated by the signature key of the above-mentioned institution to data containing the person's public key and basic attributes (name, date of birth, gender, address, etc.), and the authenticity of which can be verified by the public key of the above-mentioned institution.

[0025] Embodiment 1 and Embodiment 2 relate to the following system: using the signature device, based on reliable self-confirmation, a certificate for the registrant's biometric authentication information and attribute information is generated and registered, thereby easily and securely implementing the self-authentication and proof of attribute information related to the user when using various online services through biometric authentication.

[0026] Example 1

[0027] Hereinafter, a first embodiment of the present invention will be described with reference to the drawings.

[0028] exist Figure 1The system configuration of the biometric authentication system of this embodiment is shown in . This system is configured to include a registration terminal 100 , a user terminal 110 , an authentication server 120 , a signature device 130 , a service providing server 140 , and a network 150 .

[0029] The registration terminal 100 is configured to include a biometric sensor 101 , a template generation function 102 , a signature device authentication function 103 , and a storage unit 104 .

[0030] The user terminal 110 includes a service request function 111, a biometric sensor 112, an authentication template generation function 113, a public attribute selection consent confirmation function 114, and a storage unit 115. The registration terminal 100 and the user terminal 110 may be the same terminal having both functions.

[0031] The authentication server 120 is configured to include a certificate verification function 121 , a signature verification function 122 , an ID issuance function 123 , a person verification function 124 , an attribute certificate issuance function 125 , a user database (DB) 126 , and a server signature key management unit 127 .

[0032] The signature device 130 is configured to have a self-confirmation function 131, a signature generation function 132, and a storage unit 133. The storage unit 133 stores self-confirmation information, a self-signature key, and an electronic certificate. The signature device 130 can be a smart card such as a personal number card that can be connected to the registration terminal 100 via a contact or contactless communication path, or a mobile device such as a smart phone that can be connected to the registration terminal 100 via a wireless communication path that is the same as or close to the registration terminal 100, or a server that can communicate with the registration terminal 100 via a network 150. As described above, the electronic certificate includes the self's public key, basic attributes, and a signature performed by an organization. In addition, the electronic signature generated by the above-mentioned self-signature key can be verified by the above-mentioned self-signature key. The same is true for the signature device 430 of Example 2 described later.

[0033] The service providing server 140 is configured to include an attribute certificate request function 141 , an attribute certificate verification function 142 , and a service providing function 143 .

[0034] exist Figure 7 1 shows the hardware structure of the registration terminal 100, the user terminal 110, the authentication server 120, the signature device 130, and the service providing server 140 of this embodiment. They can be composed of a CPU 700, a memory 701, a storage device 702, an input device 703, an output device 704, and a communication device 705 as shown in the figure.

[0035] Next, use Figure 2The registration processing flow of this embodiment is described.

[0036] First, the registration terminal 100 receives an operation from a registrant or an operator to start a registration process and transmits a registration request to the authentication server 120 ( S201 ).

[0037] The authentication server 120 generates a challenge code and transmits it to the registration terminal 100 (S202). The challenge code may include one or more of a random number sequence, time information, and a session ID. In addition, the authentication server 120 stores the generated challenge code.

[0038] The biometric sensor 101 of the registration terminal 100 obtains the registration biometric information of the registrant (S203). Here, the biometric information may be an image or moving image obtained by photographing a part of the body such as the face, hands, fingers, eyes, veins, irises, retina, etc., using light of any specified wavelength such as visible light, infrared light, near-infrared light, X-rays, etc., or may be a sound signal when speaking or signal information obtained by the results of various body measurements. In addition, it may be data obtained by measuring a handwritten signature or gestures or actions. The same applies to the biometric information in the authentication process of this embodiment and the registration process and authentication process of the second embodiment described later.

[0039] The template generation function 102 extracts the registration feature from the above-mentioned registration biometric information, encodes it and generates a template (S204). Here, the registration feature can be expressed in the form of an image, a signal, a vector, a bit string or one or more numerical values. In addition, the encoding can be a data transformation including discretization, binarization, encryption, unidirectional transformation, etc. In addition, the template can be a protected template (Protected Template) generated by the so-called template protection technology (Biometric Template Protection, biometric template protection). The same is true for the authentication template in step S307 described later.

[0040] The registration terminal 100 accepts the operation of the registrant and accepts the input of the additional attribute information of the registrant (S205). Here, the additional attribute information is information related to the registrant that is not included in the above-mentioned electronic certificate. For example, it can include information such as email address, telephone number, medical history or health information, family structure, occupation type, interests, hobbies, etc.

[0041] The registration terminal 100 performs device authentication for confirming the authenticity of the signature device 130, and accepts input of personal confirmation information from the registrant, which is used by the signature device 130 to confirm the identity (authenticity) of the registrant (S206). Here, the personal confirmation information may include one or more of a password, a passcode, and biometric information.

[0042] The signature device 130 proves its authenticity to the registration terminal 100, receives the above-mentioned person confirmation information through the registration terminal 100, and compares it with the previously stored person confirmation information (S207). If the comparison is successful, the above-mentioned registrant can confirm that he is the same person as the person who received the issuance of the electronic certificate. In the case of failure of the comparison, the registration terminal 100 requests the input of the person confirmation information again, or terminates the process as if the person confirmation failed.

[0043] The registration terminal 100 sends the template, the additional attribute information, and the challenge code to the signature device 130 to request an electronic signature and an electronic certificate for these data ( S208 ).

[0044] The signature device 130 generates an electronic signature (hereinafter referred to as the personal signature) based on the personal signature key for the combination of the template, the additional attribute information, and the challenge code, and transmits it to the registration terminal 100 together with the electronic certificate (S209).

[0045] The registration terminal 100 sends the template, the additional attribute information, the signature of the user, and the electronic certificate to the authentication server 120 to make a registration request (S210).

[0046] The authentication server 120 verifies the authenticity and validity of the electronic certificate (S211). Here, the authenticity verification includes the process of verifying the electronic signature contained in the electronic certificate using the public key of the corresponding institution. In addition, the validity verification includes the process of confirming whether the electronic certificate is within the validity period, whether it is not included in the revocation list managed by the above-mentioned institution, etc. The registration terminal 100 can also implement part or all of these processes by inquiring an external system.

[0047] The authentication server 120 verifies the above-mentioned signature by means of the above-mentioned electronic certificate (S212). If the verification is successful, the authentication server 120 can clearly confirm that the registrant who inputs the biometric information as the source of the above-mentioned template and the above-mentioned additional attribute information is the same person as the person in the above-mentioned electronic certificate. In the case of verification failure, a reprocessing request or an error message is sent to the registration terminal 100 to terminate the processing. In addition, by comparing the challenge code to which the signature of the person is applied with the challenge code generated in S202, it can be confirmed that the signature of the person is generated after the challenge code.

[0048] The authentication server 120 issues an authentication ID for identifying the registrant ( S213 ).

[0049] The authentication server 120 registers the template, the additional attribute information, the signature of the user, and the electronic certificate in the user DB 126 using the authentication ID as a key ( S214 ). In addition, the authentication ID is transmitted to the registration terminal 100 .

[0050] The registration terminal 100 outputs or stores the authentication ID (S215). In the case of output, it can be displayed on the screen as a text or binary code, or sent to a specified email address, or printed and output on paper. In addition, if the registration terminal 100 and the user terminal 110 are the same terminal, it can also be stored in the storage unit 104 (the same as the storage unit 115).

[0051] Next, use Figure 3 The authentication process flow of this embodiment is described.

[0052] First, the user terminal 110 receives the user's operation and sends a service request to the service providing server 140 (S300). Here, the service request may be a request to open a new service account or various service requests for an already opened account.

[0053] The service provider server 140 determines the attributes (such as name, address, date of birth, etc.) that need to be publicly proved by the user based on the type and content of the service request, and requests an attribute certificate containing these attribute information from the user terminal 110 (S301).

[0054] The user terminal 110 selects public attributes including the requested attributes (S302). This process may be automatically performed by the user terminal 110, or the user may perform an operation for selection.

[0055] The user terminal 110 obtains the user's consent to provide the public attributes to the service provider (S303). Specifically, a button for selecting whether to agree is displayed on the screen and the user is prompted to press it. Once the consent is obtained, the authentication ID and the public attributes are sent to the authentication server 120 (S304). The authentication ID can be input by the user or read out when it is stored in the storage unit 115.

[0056] The authentication server 120 searches the user DB 126 with the authentication ID as a keyword, and reads out the template, the additional attribute information, and the electronic certificate (S305). Next, it is confirmed whether all the public attributes are included in the electronic certificate or the additional attribute information. In the case where there are public attributes that are not included, an error is sent to the user terminal 110. In the case where all the public attributes are included, an authentication template is requested from the user terminal 110 in order to start user authentication. In addition, when the template protection technology is used, the information required for this purpose (encryption key, transformation parameters, auxiliary information, random number, etc.) can also be sent to the user terminal 110.

[0057] The biometric sensor 112 of the user terminal 110 acquires the biometric information for authentication of the registrant ( S306 ).

[0058] The authentication template generation function 113 of the user terminal 110 extracts authentication feature quantities from the above-mentioned authentication biometric information, and encodes the extracted feature quantities to generate an authentication template (S307).

[0059] The user terminal 110 sends the authentication template to the authentication server 120 .

[0060] The authentication server 120 compares the authentication template with the template (S308). If the comparison is successful, it is confirmed that the user is the same person as the registrant, and thus the person in the electronic certificate is the same person. In particular, by using biometric information, the identity of the user and the registrant can be strongly guaranteed. In the case of a failure in the comparison, the user terminal 110 is requested to authenticate the template again, or the authentication is deemed to have failed and the process is terminated.

[0061] The authentication server 120 selects information related to the public attributes (hereinafter referred to as public attribute information) based on the electronic certificate and the additional attribute information (S309).

[0062] The authentication server 120 generates and assigns an electronic signature (hereinafter referred to as a server signature) to the information obtained by assigning supplementary information to the above-mentioned public attribute information as needed, using the server signature key managed by the server signature key management unit 127, and issues it as an attribute certificate, and sends the attribute certificate directly to the service provider server 140, or sends it to the service provider server 140 via the user terminal 110 (S310). The data format of the attribute certificate only needs to follow the format of any existing technology. In addition, the above-mentioned supplementary information may also include an attribute confirmation level or an authentication result. Here, the attribute confirmation level includes information such as the information on which institution the attribute information is recorded in the electronic certificate issued by, and how the authentication server 120 verified the authenticity of the attribute information during the registration process. In addition, the authentication result includes information such as the comparison result (success or failure, or comparison score, etc.) of step (S308), the authentication means (face authentication, vein authentication, etc.), etc.

[0063] The service providing server 140 verifies the attribute certificate (S311). Specifically, the server signature assigned to the attribute certificate is verified using the public key of the authentication server 120. The public key can be sent by requesting the authentication server 120, or can be referenced by a public key pre-registered in a public database (repository) or blockchain. Next, the attribute information, attribute confirmation level, and authentication result recorded in the certificate are referenced to confirm that the conditions required for service provision are met.

[0064] If the above conditions are met, the service providing server 140 provides services to the user terminal 110 (S312). If the conditions are not met, the service provision is rejected.

[0065] As described above, according to this embodiment, by using an electronic certificate issued by a trustworthy institution, a signature device that manages the signature key of the person and has the function of confirming the person, and biometric authentication technology, it is possible to ensure that the registrant of the biometric information and the person of the electronic certificate are the same person. More specifically, for the template generated by the registration terminal based on the biometric information of the registrant at the time of registration, and the challenge code received from the issuing server at the time of registration, a signature of the person that can only be generated when the confirmation process of the registrant performed by the signature device is successful is assigned. In this way, it is ensured that the person of the electronic certificate confirmed by the signature device and the registrant who provided the biometric information are operating the same registration terminal at the same time, and thus, the identity of the registrant and the person of the electronic certificate is ensured.

[0066] Biometric information is not limited to the face, and any biometric information such as veins and fingerprints can be used. In addition, by using an official electronic certificate, the official identity (authenticity) can be guaranteed. Furthermore, by using a personal number card as a signature device and a smart phone with a personal number card reading function as a registration terminal 100, the registrant can conveniently perform the registration process at home. In addition, during the authentication process, the authentication template generated based on the user's biometric information is compared with the above template, so that the identity of the user and the above registrant can be effectively guaranteed based on biometric authentication, and thus it can be effectively guaranteed that the user and the person in the above electronic certificate are the same person. At the same time, the minimum attributes required for service provision can be selected from the basic attributes recorded in the above electronic certificate and the attribute information added during registration, and disclosed to the service provider in a form that can be encrypted and verified for authenticity, and certified.

[0067] Example 2

[0068] Hereinafter, a second embodiment of the present invention will be described with reference to the drawings.

[0069] exist Figure 4 The system configuration of the biometric authentication system of this embodiment is shown in . This system is configured to include a registration terminal 400 , a user terminal 410 , an issuing server 420 , a signature device 430 , a service providing server 440 , a PDS 450 , and a network 460 .

[0070] The registration terminal 400 is configured to include a biometric sensor 401 , an authentication key pair generation function 402 , a protection template generation function 403 , a signature device authentication function 404 , a signature generation function 405 , and a storage unit 406 .

[0071] The user terminal 410 is configured to include a service request function 411, a biometric sensor 412, an authentication key recovery function 413, a public attribute selection consent confirmation function 414, an authentication partial attribute certificate generation function 415, and a storage unit 416. The registration terminal 400 and the user terminal 410 may be the same terminal having both functions.

[0072] The issuing server 420 is configured to include a certificate verification function 421 , a signature verification function 422 , an authentication attribute certificate issuing function 423 , and a server signature key management unit 424 .

[0073] The signature device 430 is configured to include a user confirmation function 431, a signature generation function 432, and a storage unit 433. The storage unit 433 stores user confirmation information, a user signature key, and an electronic certificate.

[0074] The service providing server 440 is configured to include an authentication part attribute certification request function 441 , an authentication part attribute verification function 442 , and a service providing function 443 .

[0075] The PDS 450 is configured to include an authentication part attribute verification function 451 and a user DB 452. The PDS may be implemented as a storage server or cloud service on a network, or as an internal function of the registration terminal 400 or the user terminal 410.

[0076] exist Figure 7 4 shows the hardware structure of the registration terminal 400, user terminal 410, issuing server 420, signature device 430, service providing server 440, and PDS 450 of this embodiment. They can be composed of CPU 700, memory 701, storage device 702, input device 703, output device 704, and communication device 705 as shown in the figure.

[0077] Figure 1 and Figure 4 Each function described in the above can be realized by CPU 700 reading the program stored in storage device 702 into memory 701 and executing it. Here, part or all of the program can be stored in storage device 702 in advance, or the program stored in an external storage device can be stored in storage device 702 via a network or a removable storage medium. Each storage device and storage medium is preferably non-volatile (or non-temporary). In addition, Figure 1 and Figure 4 Each of the devices shown may be a structure in which two or more devices cooperate via communication or the like to achieve their functions.

[0078] Next, use Figure 5 The registration processing flow of this embodiment is described.

[0079] First, the registration terminal 400 receives an operation from a registrant or an operator to start a registration process, and transmits a registration request to the issuing server 420 ( S500 ).

[0080] The issuing server 420 generates a challenge code and transmits it to the registration terminal 400 (S501). The challenge code may include one or more of a random number sequence, time information, and a session ID.

[0081] The biometric sensor 401 of the registration terminal 400 acquires the biometric information for registration of the registrant and extracts a feature amount for registration (S502).

[0082] The registration terminal 400 generates a key pair for authentication (S503). The key pair for authentication includes a secret key S for authentication and a public key for authentication. As a specific process, the key pair generation function 402 for authentication generates a random number sequence, and uses the random number to execute the key generation function in the prescribed electronic signature algorithm. Here, as the prescribed electronic signature method, a general electronic certification algorithm (digital signature algorithm, RSA, ECDSA, etc.) can be used, or an electronic signature algorithm that implements zero-knowledge proof of the selected attribute (BBS+, etc.), a redesignature algorithm, an anonymous attribute authentication (Anonymous Credential) algorithm, and a group signature algorithm can be used.

[0083] The registration terminal 400 generates a protection template based on the biometric feature for registration (S504).

[0084] The protection template can be generated using any existing technology. Two methods are described below.

[0085] In the first method, the above-mentioned registration feature is used as the input of the generator function (Gen) of the fuzzy extractor, and a uniform random number (random string) R and auxiliary information (helper string) P are calculated as outputs. Then, in the above-mentioned step (S503), the above-mentioned uniform random number R is input into a pseudo-random function to generate a pseudo-random number sequence of a specified length, which is set as a secret key pair for authentication. In addition, the auxiliary information P is set as a protection template.

[0086] In the second method, the above-mentioned registration feature is used as the input of the generator function (Gen) of the fuzzy extractor, and a uniform random number (random string) R and auxiliary information (helper string) P are calculated as outputs. Then, the above-mentioned uniform random number R is input into a pseudo-random function to generate a pseudo-random number sequence of a specified length, which is set as the common key K of the common key encryption method (such as AES). And the group (C, P) of the ciphertext C encrypted with the above-mentioned authentication secret key S using the above-mentioned common key K and the above-mentioned auxiliary information P is set as a protection template.

[0087] Regardless of which method is used, it is difficult for anyone other than the person to recover the above-mentioned registration feature quantity or the above-mentioned authentication secret key S from the protection template. Therefore, a high level of security is ensured, and it is guaranteed that the user who can generate a legitimate signature that is successfully verified using the above-mentioned authentication public key is the registrant himself who has biometric information that is sufficiently close to the above-mentioned registration feature quantity.

[0088] The registration terminal 400 receives input of additional attributes from the user ( S505 ).

[0089] The registration terminal 400 performs device authentication for confirming the authenticity of the signature device 430, and receives input of identity confirmation information from the registrant for the signature device 130 to confirm the identity of the registrant (S506). Here, the identity confirmation information may include one or more of a password, a passcode, and biometric information.

[0090] The signature device 430 proves its authenticity to the registration terminal 400, and receives the above-mentioned person confirmation information through the registration terminal 400, and compares it with the previously stored person confirmation information (S507). If the comparison is successful, it can be confirmed that the above-mentioned registrant and the person who received the issuance of the electronic certificate are the same person. In the case of failure of the comparison, the registration terminal 400 requests the input of the person confirmation information again, or sets the person confirmation failure and ends the processing.

[0091] The registration terminal 400 transmits the authentication public key, the additional attribute information, and the challenge code to the signature device 430, and requests an electronic signature and an electronic certificate for these data (S508).

[0092] The signature device 430 generates an electronic signature (hereinafter referred to as the personal signature) based on the personal signature key for the combination of the authentication public key, the additional attribute information and the challenge code, and transmits it to the registration terminal 400 together with the electronic certificate (S509).

[0093] The registration terminal 400 generates an electronic signature (hereinafter referred to as a self-signature) based on the authentication secret key S for the set of the authentication public key, the additional attribute information, the challenge code, the self-signature, and the electronic certificate (S510).

[0094] The registration terminal 400 sends the authentication public key, the additional attribute information, the personal signature, the electronic certificate and the self-signature together with the authentication attribute certificate issuance request to the issuing server 420 (S511).

[0095] The issuing server 420 verifies the authenticity and validity of the electronic certificate (S512). Here, the authenticity verification includes the process of verifying the electronic signature contained in the electronic certificate using the public key of the corresponding institution. In addition, the validity verification includes the process of confirming whether the electronic certificate is within the validity period, whether it is not included in the revocation list managed by the above-mentioned institution, etc. The registration terminal 400 can also implement part or all of these processes by inquiring an external system.

[0096] The issuing server 420 verifies the above-mentioned signature based on the above-mentioned electronic certificate (S513). If the verification is successful, the issuing server 420 can clearly confirm that the registrant who generated the above-mentioned authentication public key and the person in the above-mentioned electronic certificate are the same person. In the case of verification failure, a reprocessing request or error information is sent to the registration terminal 400 to end the processing.

[0097] The issuing server 420 verifies the self-signed document using the public key for authentication (S514). If the verification is successful, the issuing server 420 can more clearly confirm that the registrant who generated the public key for authentication is the same person as the person in the electronic certificate. If the verification fails, a reprocessing request or an error message is sent to the registration terminal 400 to terminate the process.

[0098] The issuing server 420 generates an electronic signature based on the server signature key managed by the server signature key management unit 424 of the issuing server 420 for each attribute recorded in the electronic certificate, the additional attribute information, the authentication public key, the validity period, the issuing server information, the attribute confirmation level, and a group of information including all or part of the certificate ID, and issues the data obtained by assigning the electronic signature as an authentication attribute certificate and sends it to the registration terminal 400 (S515). In addition, the attribute confirmation level includes information on which organization issued the electronic certificate in which the attribute information is recorded, how the issuing server 420 verified the authenticity of the attribute information during the registration process, and the like. The certificate ID is an ID for uniquely identifying the authentication attribute certificate, and is generated by the issuing server 420. The data format of the attribute certificate can be any format in accordance with the existing technology. In addition, as an algorithm for generating attribute certificates, a general electronic certification algorithm (digital signature algorithm, RSA, ECDSA, etc.) can be used, or an algorithm that implements zero-knowledge proof of the selected attributes (BBS+, etc.), a redactable signature algorithm, an anonymous attribute authentication algorithm, or a group signature algorithm can be used.

[0099] The registration terminal 400 sends the authentication attribute certificate together with the protection template to the PDS 450 (S517).

[0100] PDS450 associates the above-mentioned authentication attribute certificate with the above-mentioned protection template, and registers it in the user DB452 using the above-mentioned certificate ID as a keyword.

[0101] The registration terminal 400 outputs or stores the certificate ID (S518). In the case of output, it can be displayed on the screen as a text or a two-dimensional code, or sent to a specified email address, or printed and output on paper. In addition, if the registration terminal 400 and the user terminal 410 are the same terminal, it can also be stored in the storage unit 406 (the same as the storage unit 416).

[0102] Next, use Figure 6 The authentication process flow of this embodiment is described.

[0103] First, the user terminal 410 receives the user's operation and sends a service request to the service providing server 440 (S600). Here, the service request may be a request to open a new service account or various service requests for an already opened account.

[0104] The service provider server 440 determines the attributes that need to be publicly proved by the user (such as name, address, date of birth, etc.) based on the type and content of the service request, and requests an attribute certificate containing these attribute information from the user terminal 410 (S601).

[0105] The user terminal 410 transmits the certificate ID to the PDS 450 and requests an authentication attribute certificate (S602). The authentication ID may be input by the user or read out if it is stored in the storage unit 416.

[0106] The PDS 450 searches the user DB 452 using the certificate ID as a keyword, reads out the authentication attribute certificate and the protection template, and sends the protection template to the user terminal 410 (S603).

[0107] The biometric sensor 412 of the user terminal 410 acquires the user's biometric information for authentication, and extracts an authentication feature quantity from the biometric information for authentication (S604).

[0108] The user terminal 410 restores the authentication secret key S′ based on the authentication feature and the protection template ( S605 ).

[0109] As a specific method, any conventional method may be used. Hereinafter, a method for recovering the authentication secret key S' corresponding to the two methods using the fuzzy extractor described in the above steps (S503) and (S504) will be described.

[0110] In the first method, the authentication feature and the auxiliary information P (i.e., the protection template) are used as inputs of the regeneration function (Rep) of the fuzzy extractor, and a random number R' is calculated as an output. Next, the random number R' is input into a pseudo-random function to generate a pseudo-random number sequence of a specified length, which is set as an authentication key pair, and the authentication secret key S' is taken out as one of the pairs. According to the characteristics of the fuzzy extractor, when the authentication feature is sufficiently close to the registration feature, that is, when it is determined that the user and the registrant are the same person, the random number R' is consistent with the uniform random number R, and thus the authentication secret key S' is consistent with the authentication secret key S.

[0111] In the second method, the authentication feature and the auxiliary information P included in the protection template (C, P) are used as inputs to the regeneration function (Rep) of the fuzzy extractor, and a random number R' is calculated as an output. Next, the random number R' is input into a pseudo-random function to generate a pseudo-random number sequence of a specified length, which is set as the shared key K' of a shared key encryption method (e.g., AES). Next, the data obtained by decrypting the ciphertext C included in the protection template (C, P) using the shared key K' is set as the authentication secret key S'. As described above, when it is determined that the user and the registrant are the same person, the random number R' is consistent with the uniform random number R, and thus the shared key K' is consistent with the shared key K, and the authentication secret key S' is also consistent with the authentication secret key S.

[0112] The user terminal 410 executes an authentication protocol with the PDS 450 using the authentication secret key S′ ( S606 ).

[0113] The PDS 450 uses the authentication public key included in the authentication attribute certificate to perform an authentication protocol with the user terminal 410 (S607). If the authentication is successful, the PDS 450 sends the authentication attribute certificate to the user terminal 410.

[0114] As a specific example of the authentication protocol, PDS450 may send an authentication challenge code to the user terminal 410, and the user terminal 410 generates an authentication signature based on the above-mentioned authentication secret key S' and sends it to PDS450. PDS450 uses the above-mentioned authentication public key to verify the above-mentioned authentication signature. If the verification is successful, the authentication is set to be successful, and if the verification fails, the authentication is set to be failed.

[0115] The user terminal 410 selects public attributes (S608) including the attributes requested in the above step (S601). This process can be automatically implemented by the user terminal 410, or the user can perform an operation for selection. If there are attributes in the requested attributes that are not included in the above authentication attribute certificate, an error is output and the process ends.

[0116] The user terminal 410 obtains the user's consent to provide the public attributes to the service provider (S609). Specifically, a button for selecting whether to agree is displayed on the screen and the user is prompted to press it.

[0117] The user terminal 410 transforms the above-mentioned authentication attribute certificate, deletes or conceals the attribute information other than the above-mentioned public attributes, and assigns the user authentication information based on the above-mentioned authentication secret key S', thereby generating an authentication partial attribute certificate and sending it to the service provider server 440 (S610). The form of the above-mentioned authentication partial attribute certificate only needs to follow any form of the prior art. The deletion or concealment of attribute information is determined according to the generation algorithm of the authentication attribute certificate described in the above-mentioned step (S515). For example, in the case of using BBS+, the above-mentioned authentication secret key S' is used to generate a zero-knowledge proof that selectively discloses the information of the above-mentioned public attributes in the above-mentioned authentication attribute certificate and conceals the rest. Alternatively, in the case of using a re-signature, for the data obtained after re-signing the attribute information other than the above-mentioned public attributes in the above-mentioned authentication attribute certificate, a signature is generated using the above-mentioned authentication secret key S', and the data obtained after assigning the above-mentioned signature is used as the above-mentioned authentication partial attribute certificate.

[0118] The service providing server 440 verifies the authentication part attribute certificate (S611). Specifically, for the attribute information, user authentication information, authentication public key, etc. contained in the authentication part attribute certificate, it is confirmed that the attribute information is indeed a part of the authentication attribute certificate issued by the issuing server 420, or the user authentication information is successfully verified by the authentication public key, etc. At this time, the service providing server 440 may also use the public key of the issuing server 420 pre-registered in a public DB (repository) or blockchain.

[0119] The service providing server 440 refers to the attribute information and attribute confirmation level of the user certified by the authentication part attribute certification to confirm that the conditions required for service provision are met, and if the conditions are met, provides service to the user terminal 410 (S612). If not, the service is refused.

[0120] As described above, according to this embodiment, by making use of an electronic certificate issued by a trustworthy institution, a signature device that manages a signature key and has a function of confirming the person, biometric authentication technology, and template protection technology, the biometric information of the registrant is associated with a secret key for authentication during registration, a protection template is created and saved, and the signature of the person using the signature device is given to the public key for authentication, thereby being able to conceal the biometric information while effectively ensuring that the registrant of the biometric information and the person in the electronic certificate are the same person. The biometric information is not limited to the face, and any biometric information such as veins and fingerprints can be used. In addition, by using an official electronic certificate, the official identity (personality) can be guaranteed. Furthermore, by using a personal number card (My Number Card) as a signature device and a smart phone with a personal number card reading function as a registration terminal 400, the registrant can conveniently perform the registration process at home, etc. In addition, in the authentication process, by comparing the authentication template generated based on the user's biometric information with the above template, the identity of the user and the above registrant can be effectively guaranteed, so that it can be confirmed that the user and the person in the above electronic certificate are the same person. At the same time, it is possible to select the minimum attributes required for service provision from the basic attributes recorded in the above-mentioned electronic certificate and the attribute information added during registration, and disclose them to the service provider in a form that can be encrypted and verified for authenticity, and to provide proof.

[0121] As described above, the public authentication system comprises: a signature device 130, 430, which establishes a correspondence and maintains an electronic certificate issued in advance to an individual and a personal signature key corresponding to the above electronic certificate; a registration terminal 100, 400, which generates registration authentication information based on the registration biometric information of the registrant, and uses the above signature device to generate a personal signature for the above registration authentication information; and an authentication server 120 or an issuing server 420 as an issuing server, which verifies the above registration authentication information and the above personal signature by using the above electronic certificate, thereby confirming that the above registrant and the person in the above electronic certificate are the same person.

[0122] With such a structure, a highly convenient authentication system and authentication method can be provided. Specifically, the user only uses a signature device such as an electronic identity certificate once when registering, so that he can realize his own authentication and attribute certification every time by only presenting biometric information in the future. In addition, it is not limited to facial authentication, and any biometric authentication means such as vein authentication and fingerprint authentication can also be used. Furthermore, only the minimum attribute information required for service provision can be disclosed to the service providing server and certified.

[0123] In addition, for example, the above-mentioned registration terminal 100 includes: a biometric sensor 101 as a sensor, which obtains the registration biometric information of the registrant; a template generation function 102 as a registration authentication information generation unit, which generates the registration authentication information of the above-mentioned registrant; and a signature device authentication function 103 as a signature device authentication unit, which uses the above-mentioned signature device 130 to generate the person's signature for the above-mentioned registration authentication information.

[0124] Furthermore, the signature device 130 includes a person confirming function 131 as a person confirming unit, a signature generating function 132 as a signature generating unit, and a storage unit 133 as a signature device storage unit.

[0125] The above-mentioned signature device storage unit maintains the above-mentioned electronic certificate issued in advance to the individual, the above-mentioned personal signature key corresponding to the above-mentioned electronic certificate, and the information for personal confirmation; the above-mentioned personal confirmation unit includes a function of comparing the input information with the above-mentioned personal confirmation information to confirm that the user of the above-mentioned signature device is the person with the above-mentioned electronic certificate.

[0126] The authentication server 120 as the issuing server includes a certificate verification function 121 as a certificate verification unit, a signature verification function 122 as a signature verification unit, an attribute certificate issuing function 125 as an attribute certificate issuing unit, and a server signature key management unit 127 for managing a server signature key.

[0127] Furthermore, the certificate verification unit includes a function of verifying the validity and authenticity of the electronic certificate; the signature verification unit has a function of using the electronic certificate to verify the registration authentication information and the personal signature, thereby verifying that the registrant and the person in the electronic certificate are the same person; the attribute certificate issuing unit has the following functions: accepting the verification result of the certificate verification unit and the verification result of the signature verification unit, generating an electronic signature based on the server signature key for a set of attribute information related to the individual, and issuing the data with the electronic signature as an attribute certificate.

[0128] In this way, by providing the registration terminal, the signature device, and the issuing server with respective functions, it is possible to effectively provide a highly convenient authentication system and authentication method.

[0129] Furthermore, the electronic certificate may include one or more pieces of attribute information related to the individual; and the set of attribute information may include one or more pieces of attribute information included in the electronic certificate.

[0130] Furthermore, the set of attribute information may include the registration authentication information.

[0131] Furthermore, the following configuration may be adopted: the registration authentication information generating unit has a function of generating a template based on the registration biometric information; and the registration authentication information includes the template.

[0132] In this way, it is possible to manage personal information and registration authentication information, and perform efficient authentication using biometric information.

[0133] In addition, it can also be the following structure: the above-mentioned registration authentication information generation unit includes: a function of generating a pseudo-random number sequence and auxiliary information based on the above-mentioned registration biometric information; a function of generating a secret key for authentication and a public key for authentication based on the above-mentioned pseudo-random number sequence; and a function of generating a protection template including the above-mentioned auxiliary information; the above-mentioned registration authentication information includes the above-mentioned public key for authentication.

[0134] According to this configuration, highly secure authentication using biometric information can be achieved.

[0135] In addition, it can also be the following structure: the above-mentioned registration authentication information generation unit includes: a function of generating a pseudo-random number sequence and auxiliary information based on the above-mentioned registration biometric information; a function of generating a shared key based on the above-mentioned pseudo-random number sequence; a function of generating a secret key for authentication and a public key for authentication; a function of encrypting the above-mentioned authentication secret key using the above-mentioned shared key to generate an encrypted secret key; and a function of generating a protection template including the above-mentioned encrypted secret key and the above-mentioned auxiliary information; the above-mentioned registration authentication information includes the above-mentioned public key for authentication.

[0136] According to this configuration, authentication using biometric information and other authentication can be used together.

[0137] In addition, the following structure disclosed in Example 1 may also be included: it also includes a user terminal; the user terminal includes a sensor for obtaining the user's authentication biometric information, and an authentication template generating unit that generates an authentication template based on the authentication biometric information; the issuing server includes a user database and an identity comparison unit; the user database includes a function of registering and retrieving the electronic certificate and the registration authentication information related to the registrant; the identity comparison unit includes a function of comparing the registration authentication information with the authentication template to calculate the identity comparison result; the attribute certificate issuing unit includes a function of generating the attribute certificate based on the identity comparison result.

[0138] At this time, the structure may also be as follows: the user terminal includes a consent confirmation unit, which confirms whether the user agrees or disagrees with the disclosure of the attribute information contained in the attribute certificate; the attribute certificate issuing unit issues the attribute certificate on the condition that the consent confirmation unit can confirm the user's consent.

[0139] In addition, the following structure may be adopted at this time: the user terminal includes a function of accepting user operations and selecting one or more attributes permitted to be disclosed as public attributes; and the attribute certificate issuing unit excludes attributes other than the public attributes and issues the attribute certificate.

[0140] In this configuration, an authentication system that improves convenience and discloses necessary attribute information can be realized with a relatively simple configuration.

[0141] In addition, as disclosed in Example 2, it can also be a structure with the following characteristics: including a user terminal; the above-mentioned user terminal includes a sensor for obtaining the user's authentication biometric information, an authentication key recovery unit, and an authentication partial attribute certificate generation unit; the above-mentioned authentication key recovery unit includes a function of restoring the above-mentioned authentication secret key based on the above-mentioned protection template and the above-mentioned authentication biometric information; the above-mentioned authentication partial attribute certificate generation unit includes a function of generating an authentication partial attribute certificate based on the above-mentioned attribute certificate and the above-mentioned authentication secret key; the above-mentioned authentication partial attribute certificate is the following information: it can prove the authenticity of part or all of the attribute information of the above-mentioned attribute certificate, and can also prove to a third party that the user who has proved the attribute information is the registrant himself.

[0142] At this time, it can also be the following structure: the above-mentioned user terminal includes a consent confirmation unit, which confirms whether the user agrees or disagrees with the disclosure of the attribute information contained in the above-mentioned authentication part attribute certificate; the above-mentioned authentication part attribute certificate generation unit generates the above-mentioned authentication part attribute certificate on the condition that the above-mentioned consent confirmation unit can confirm the user's consent.

[0143] In addition, the following structure may be adopted at this time: the user terminal includes a function of accepting user operations and selecting one or more attributes permitted to be disclosed as public attributes; and the authentication partial attribute certificate generation unit generates the authentication partial attribute certificate by excluding attributes other than the public attributes.

[0144] In this structure, it is not necessary to place personal information on a server and the service can be implemented at a low load and low cost. In addition, users can further place personal information under their own management.

[0145] In addition, the present invention is not limited to the above-mentioned embodiments, but includes various modified examples. For example, the above-mentioned embodiments are described in detail to explain the present invention in an easy-to-understand manner, and are not necessarily limited to all the structures described. In addition, not only can the relevant structures be removed, but also the structures can be replaced or added.

[0146] For example, the authentication server 120 of the first embodiment described above may be divided into a registration server and an authentication server.

[0147] Description of symbols

[0148] 100 registration terminal; 101 biometric sensor; 102 template generation function; 103 signature device authentication function; 104 storage unit 104; 110 user terminal; 111 service request function; 112 biometric sensor; 113 authentication template generation function; 114 public attribute selection consent confirmation function; 115 storage unit; 120 authentication server; 121 certificate verification function; 122 signature verification function; 123 ID issuance function; 124 person comparison function; 125 attribute certificate issuance function; 126 user DB; 127 server signature key management unit; 130 signature device; 131 person confirmation function; 132 signature generation function; 133 storage unit 133; 140 service provision server; 141 attribute certificate request function; 142 attribute certificate verification function; 143 service provision function; 150 network; 400 registration terminal; 401 biometric sensor; 402 authentication key pair generation function; 403 protection template generation function; 404 4 signature device authentication function; 405 signature generation function; 406 storage unit; 410 user terminal; 411 service request function; 412 biometric sensor; 413 authentication key recovery function; 414 public attribute selection consent confirmation function; 415 authentication part attribute certificate generation function; 416 storage unit; 420 issuing server; 421 certificate verification function; 422 signature verification function; 423 authentication attribute certificate issuance function; 424 server signature key management unit; 430 signature device; 431 self confirmation function; 432 signature generation function; 433 storage unit; 440 service providing server; 441 authentication part attribute certificate request function; 442 authentication part attribute verification function; 443 service providing function; 450 PDS; 451 authentication part attribute verification function; 452 user DB; 460 network; 700 CPU; 701 memory; 702 storage device; 703 input device; 704 output device; 705 communication device.

Claims

1. An authentication system, characterized in that: have: The signature device establishes a correspondence between an electronic certificate issued in advance to an individual and a signature key corresponding to the electronic certificate and maintains the correspondence; The registration terminal generates registration authentication information based on the registration biometric information of the registrant, and uses the signature device to generate the person's signature for the registration authentication information; as well as The issuing server verifies the registration authentication information and the signature of the person using the electronic certificate, thereby confirming that the registrant and the person in the electronic certificate are the same person.

2. The authentication system according to claim 1, characterized in that: The registration terminal includes a sensor for acquiring the registration biometric information of the registrant, a registration authentication information generating unit for generating the registration authentication information of the registrant, and a signature device authentication unit for generating the registrant's signature for the registration authentication information using the signature device. The above-mentioned signature device includes a person confirmation unit, a signature generation unit and a signature device storage unit. The signature device storage unit stores the electronic certificate issued in advance to the individual, the personal signature key corresponding to the electronic certificate, and personal confirmation information. The identity verification unit includes a function of verifying that the user of the signature device is the person who issued the electronic certificate by comparing the input information with the identity verification information. The issuing server includes a certificate verification unit, a signature verification unit, an attribute certificate issuing unit, and a server signature key management unit for managing the server signature key. The certificate verification unit includes the following functions: verifying the validity and authenticity of the electronic certificate, The signature verification unit has the following functions: by using the electronic certificate to verify the registration authentication information and the signature of the person, thereby confirming that the registrant and the person in the electronic certificate are the same person, The above-mentioned attribute certificate issuing unit has the following functions: accepting the verification results of the above-mentioned certificate verification unit and the verification results of the above-mentioned signature verification unit, generating an electronic signature based on the above-mentioned server signature key for the set of attribute information related to the above-mentioned individual, and issuing the data obtained after assigning the electronic signature as an attribute certificate.

3. The authentication system according to claim 2, characterized in that: The electronic certificate contains one or more attribute information related to the individual. The set of attribute information includes one or more attribute information included in the electronic certificate.

4. The authentication system according to claim 2, characterized in that: The set of attribute information includes the registration authentication information.

5. The authentication system according to claim 2, characterized in that: The registration authentication information generating unit has the following functions: generating a template based on the registration biometric information, The registration authentication information includes the template.

6. The authentication system according to claim 2, characterized in that: The above-mentioned registration authentication information generation unit includes the following functions: generating a pseudo-random number sequence and auxiliary information based on the above-mentioned registration biometric information; generating a secret key for authentication and a public key for authentication based on the above-mentioned pseudo-random number sequence; and generating a protection template including the above-mentioned auxiliary information. The registration authentication information includes the authentication public key.

7. The authentication system according to claim 2, characterized in that: The registration authentication information generation unit includes the following functions: generating a pseudo-random number sequence and auxiliary information based on the registration biometric information; generating a shared key based on the pseudo-random number sequence; generating a secret key for authentication and a public key for authentication; encrypting the secret key for authentication using the shared key to generate an encrypted secret key; and generating a protection template including the encrypted secret key and the auxiliary information. The registration authentication information includes the authentication public key.

8. The authentication system according to claim 2, characterized in that: Also includes a user terminal, The user terminal includes a sensor for acquiring biometric information for authentication of a user, and an authentication template generating unit for generating an authentication template based on the biometric information for authentication. The issuing server includes a user database and a user comparison unit. The user database includes the following functions: registering the electronic certificate and the registration authentication information related to the registrant, searching the electronic certificate and the registration authentication information related to the registrant, The above-mentioned person checking unit includes the following functions: checking the above-mentioned registration authentication information with the above-mentioned authentication template, calculating the person checking result, The above-mentioned attribute certificate issuing unit includes the following functions: generating the above-mentioned attribute certificate based on the above-mentioned personal comparison results.

9. The authentication system according to claim 8, characterized in that: The user terminal includes a consent confirmation unit, which confirms whether the user agrees or disagrees with the disclosure of the attribute information included in the attribute certificate. The attribute certificate issuing unit issues the attribute certificate on the condition that the consent confirmation unit can confirm the user's consent.

10. The authentication system according to claim 8, characterized in that: The user terminal includes the following functions: accepting user operations, selecting one or more attributes permitted to be disclosed as public attributes, The attribute certificate issuing unit excludes attributes other than the public attributes and issues the attribute certificate.

11. The authentication system according to claim 6, characterized in that: Including user terminals, The user terminal includes a sensor for acquiring the user's biometric information for authentication, an authentication key recovery unit, and an authentication part attribute certificate generation unit. The authentication key recovery unit includes the following functions: recovering the authentication secret key based on the protection template and the authentication biometric information; The authentication part attribute certificate generation unit includes the following functions: generating an authentication part attribute certificate based on the attribute certificate and the authentication secret key, The above-mentioned authentication partial attribute certificate is the following information: it can prove the authenticity of part or all of the attribute information of the above-mentioned attribute certificate, and can also prove to a third party that the user who has certified the attribute information is the registrant himself.

12. The authentication system according to claim 11, characterized in that: The user terminal includes a consent confirmation unit, which confirms whether the user agrees or disagrees with the disclosure of the attribute information included in the authentication part attribute certificate. The authentication part attribute certificate generating unit generates the authentication part attribute certificate on the condition that the consent confirming unit can confirm the user's consent.

13. The authentication system according to claim 11, characterized in that: The user terminal includes the following functions: accepting user operations, selecting one or more attributes permitted to be disclosed as public attributes, The authentication partial attribute certificate generating unit generates the authentication partial attribute certificate by excluding attributes other than the public attributes.

14. An authentication method, characterized in that: The following steps are involved: The registration terminal generates registration authentication information based on the registration biometric information of the registrant; The signature device generates a signature of the person for the above-mentioned registration authentication information, and the above-mentioned signature device establishes a correspondence between an electronic certificate issued in advance to the individual and a signature key corresponding to the above-mentioned electronic certificate and maintains the same; and The issuing server verifies the registration authentication information and the signature of the person using the electronic certificate, thereby confirming that the registrant and the person in the electronic certificate are the same person.

Images