Information processor, system, verification method and program

Abstract

To improve digital certificate verification technology.SOLUTION: An information processor 10 comprises a controller that acquires attribute information associated with a digital certificate and identification information about the digital certificate, verifies the digital certificate based on the attribute information and the identification information, and outputs a verification result of the digital certificate.SELECTED DRAWING: Figure 9

Description

[Technical Field]

[0001] The present disclosure relates to an information processing device, a system, a verification method, and a program. [Background technology]

[0002] Conventionally, there has been known a system for ensuring authenticity that generates a digital certificate (Verifiable Credential) corresponding to a university diploma or the like and ensures that the digital certificate is genuine and has not been tampered with (for example, Patent Document 1, etc.). [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Patent Publication No. 2021-090113 Summary of the Invention [Problem to be solved by the invention]

[0004] When verifying a digital certificate, it was necessary to identify the target digital certificate and then upload it to a server, which was a cumbersome process. Furthermore, because digital certificates contain personal information, great care was required in the upload process, handling of digital certificates, and submission of digital certificates. As such, there was room for improvement in digital certificate verification technology.

[0005] In view of the above circumstances, an object of the present disclosure is to improve digital certificate verification technology. [Means for solving the problem]

[0006] (1) An information processing device according to an embodiment of the present disclosure includes: An information processing device including a control unit, The control unit acquiring attribute information associated with a digital certificate and identification information related to the digital certificate; verifying the digital certificate based on the attribute information and the identification information; The verification result of the digital certificate is output.

[0007] (2) An information processing device according to an embodiment of the present disclosure is the information processing device according to (1), The control unit identifies the digital certificate based on the attribute information and the identification information, and verifies whether the digital certificate has been tampered with and whether it is in an expired state.

[0008] (3) An information processing device according to an embodiment of the present disclosure is the information processing device according to (1) or (2), The digital certificate is a certificate that certifies the results of a qualification test.

[0009] (4) An information processing device according to an embodiment of the present disclosure is the information processing device according to (3), The control unit further outputs a portion of the content of the digital certificate.

[0010] (5) An information processing device according to an embodiment of the present disclosure is the information processing device according to (4), Part of the content of the digital certificate includes the result information of the qualification test.

[0011] (6) An information processing device according to an embodiment of the present disclosure is the information processing device according to (5), The qualification test result information includes at least one of pass information for a predetermined level of the qualification test, score information, and proficiency level information.

[0012] (7) An information processing device according to an embodiment of the present disclosure is the information processing device according to any one of (1) to (6), The digital certificate is a certificate certifying the results of a plurality of qualification examinations; The control unit further acquires validation range information and outputs a validation result related to the validation range information in the digital certificate.

[0013] (8) An information processing device according to an embodiment of the present disclosure is the information processing device according to any one of (1) to (7), The control unit obtains the attribute information and the identification information from a server related to the application website via an API.

[0014] (9) A system according to an embodiment of the present disclosure includes the information processing device according to (8) and the server, The server receiving the contents of the digital certificate from the information processing device; Performing a match between the contents of the digital certificate and the user's application on the application website; If the result of the check shows that there are no defects in the application contents, the application is accepted.

[0015] (10) A verification method according to an embodiment of the present disclosure includes: A verification method executed by an information processing device, comprising: acquiring attribute information associated with a digital certificate and identification information related to the digital certificate; verifying whether the digital certificate has been tampered with based on the attribute information and the identification information; outputting a verification result related to the digital certificate; Includes.

[0016] (11) A program according to an embodiment of the present disclosure includes: On the computer, acquiring attribute information associated with a digital certificate and identification information related to the digital certificate; verifying whether the digital certificate has been tampered with based on the attribute information and the identification information; outputting a verification result relating to the digital certificate; Execute the following. [Effects of the Invention]

[0017] According to one embodiment of the present disclosure, techniques for validating digital certificates are improved. [Brief explanation of the drawings]

[0018] [Figure 1] 1 is a block diagram illustrating a schematic configuration of a system according to an embodiment of the present disclosure. [Figure 2] FIG. 1 is a block diagram showing a schematic configuration of an information processing device. [Figure 3] FIG. 2 is a block diagram showing a schematic configuration of a terminal device. [Figure 4] FIG. 10 is a diagram illustrating an example of a database related to digital certificates. [Figure 5] FIG. 10 illustrates an example of a user interface. [Figure 6] FIG. 10 illustrates an example of a user interface. [Figure 7] FIG. 10 illustrates an example of a user interface. [Figure 8] FIG. 10 illustrates an example of a user interface. [Figure 9] 10 is a flowchart illustrating an operation of the information processing device. [Figure 10] FIG. 10 illustrates an example of a user interface. [Figure 11] FIG. 10 illustrates an example of a user interface. [Figure 12] FIG. 10 illustrates an example of a user interface. DETAILED DESCRIPTION OF THE INVENTION

[0019] Hereinafter, embodiments of the present disclosure will be described.

[0020] (Outline of the embodiment)

[0021] The outline and configuration of a system 1 according to this embodiment will be described with reference to Figure 1. In this embodiment, the digital certificate may be, for example, a certificate certifying the results of a qualification test. Qualification tests include, for example, qualifications related to language and education, medical and welfare, law and accounting, information technology, and engineering.

[0022] Note that digital certificates are not limited to certificates certifying the results of qualification exams. For example, digital certificates may be documents certifying any matter, such as certificates indicating graduation from a university or high school, a degree, or credit recognition. Alternatively, digital certificates may be certificates certifying various activities, such as mountain climbing, rather than qualification exams. Furthermore, certificates may be certificates of membership or activity, such as club activities or committee activities. In the following, this embodiment will be described taking as an example a case where the digital certificate is a certificate certifying the results of a qualification exam, such as the Test in Practical English Proficiency.

[0023] The system 1 according to this embodiment includes an information processing device 10 and a terminal device 20. The information processing device 10 and the terminal device 20 are communicably connected to a network 30 including, for example, a mobile communication network and the Internet.

[0024] The information processing device 10 is, for example, a server device installed in a data center or the like. For example, the information processing device 10 is a server belonging to a cloud computing system or other computing system. The information processing device 10 is capable of communicating with a terminal device 20 via a network 30. Note that while FIG. 1 shows an example in which the system 1 includes one information processing device 10, this is not limiting. The system 1 may include two or more information processing devices 10.

[0025] The terminal device 20 is any device used by each user. Users include those who wish to obtain proof of the results of a qualification test, etc., and those who verify or view a digital certificate. For example, a general-purpose electronic device such as a smartphone or tablet terminal, or a dedicated electronic device can be used as the terminal device 20. Note that while FIG. 1 shows an example in which the system 1 is equipped with one terminal device 20, this is not limiting. The system 1 may be equipped with two or more terminal devices 20.

[0026] First, an overview of this embodiment will be described, and details will be provided later. The information processing device 10 acquires name information associated with a digital certificate and identification information related to the digital certificate. The identification information related to the digital certificate is information that can uniquely identify the digital certificate (hereinafter also referred to as a shared key). The information processing device 10 also verifies the digital certificate based on the name information and the identification information. The information processing device 10 then outputs the verification result of the digital certificate.

[0027] As described above, according to this embodiment, the information processing device 10 acquires the name information and identification information associated with the digital certificate and verifies the digital certificate using the name information and shared key. Therefore, the user does not need to specify the digital certificate itself, and verification can be performed without the user needing to upload, etc., which improves convenience in terms of handling and submitting digital certificates, thereby improving the digital certificate verification technology.

[0028] Next, each component of the system 1 will be described in detail.

[0029] (Configuration of information processing device) As shown in FIG. 2, the information processing device 10 includes a control unit 11, a storage unit 12, an input unit 13, an output unit 14, and a communication unit 15.

[0030] The control unit 11 includes at least one processor, at least one dedicated circuit, or a combination thereof. The processor is a general-purpose processor such as a central processing unit (CPU) or a graphics processing unit (GPU), or a dedicated processor specialized for a specific process. The dedicated circuit is, for example, a field-programmable gate array (FPGA) or an application specific integrated circuit (ASIC). The control unit 11 executes processes related to the operation of the information processing device 10 while controlling each unit of the information processing device 10.

[0031] The storage unit 12 includes at least one semiconductor memory, at least one magnetic memory, at least one optical memory, or a combination of at least two of these. The semiconductor memory is, for example, a random access memory (RAM) or a read only memory (ROM). The RAM is, for example, a static random access memory (SRAM) or a dynamic random access memory (DRAM). The ROM is, for example, an electrically erasable programmable read only memory (EEPROM). The storage unit 12 functions as, for example, a main storage device, an auxiliary storage device, or a cache memory. The storage unit 12 stores data used in the operation of the information processing device 10 and data obtained by the operation of the information processing device 10.

[0032] The input unit 13 includes at least one input interface. The input interface is, for example, a physical key, a capacitance key, a pointing device, or a touch screen integrated with a display. The input interface may also be, for example, a sound sensor that accepts voice input, or a camera that accepts gesture input. The input unit 13 accepts an operation to input data used for the operation of the information processing device 10. The input unit 13 may be connected to the information processing device 10 as an external input device instead of being provided in the information processing device 10. Any connection method may be used, for example, a Universal Serial Bus (USB), a High-Definition Multimedia Interface (HDMI) (registered trademark), or Bluetooth (registered trademark).

[0033] The output unit 14 includes at least one output interface. The output interface is, for example, a display that outputs information as a video, or a speaker that outputs information as a sound. The display is, for example, an LCD (liquid crystal display) or an organic EL (electro luminescence) display. The output unit 14 displays and outputs data obtained by the operation of the information processing device 10. The output unit 14 may be connected to the information processing device 10 as an external output device instead of being provided in the information processing device 10. Any connection method can be used, for example, USB, HDMI (registered trademark), or Bluetooth (registered trademark).

[0034] The communication unit 15 includes at least one external communication interface. The communication interface may be either a wired communication interface or a wireless communication interface. In the case of wired communication, the communication interface is, for example, a LAN (Local Area Network) interface or a USB (Universal Serial Bus). In the case of wireless communication, the communication interface is, for example, an interface compatible with mobile communication standards such as LTE (Long Term Evolution), 4G (4th generation), or 5G (5th generation), or an interface compatible with short-range wireless communication such as Bluetooth (registered trademark). The communication unit 15 receives data used in the operation of the information processing device 10 and transmits data obtained by the operation of the information processing device 10.

[0035] The functions of the information processing device 10 are realized by executing a program according to this embodiment on a processor corresponding to the information processing device 10. That is, the functions of the information processing device 10 are realized by software. The program causes a computer to execute the operations of the information processing device 10, thereby causing the computer to function as the information processing device 10. That is, the computer functions as the information processing device 10 by executing the operations of the information processing device 10 in accordance with the program.

[0036] In this embodiment, the program can be recorded on a computer-readable recording medium. The computer-readable recording medium includes non-transitory computer-readable media, such as a magnetic recording device, an optical disc, a magneto-optical recording medium, or a semiconductor memory. The program can be distributed, for example, by selling, transferring, or lending a portable recording medium, such as a DVD (digital versatile disc) or a CD-ROM (compact disc read only memory), on which the program is recorded. The program can also be distributed by storing the program in the storage of an external server and transmitting the program from the external server to another computer. The program can also be provided as a program product.

[0037] Some or all of the functions of the information processing device 10 may be implemented by a dedicated circuit equivalent to the control unit 11. In other words, some or all of the functions of the information processing device 10 may be implemented by hardware.

[0038] (Terminal Device Configuration) As shown in FIG. 3, the terminal device 20 includes a control unit 21, a storage unit 22, an input unit 23, an output unit 24, and a communication unit 25.

[0039] The control unit 21 includes at least one processor, at least one dedicated circuit, or a combination of these. The processor is a general-purpose processor such as a central processing unit (CPU) or a graphics processing unit (GPU), or a dedicated processor specialized for a specific process. The dedicated circuit is, for example, a field-programmable gate array (FPGA) or an application specific integrated circuit (ASIC). The control unit 21 executes processes related to the operation of the terminal device 20 while controlling each unit of the terminal device 20.

[0040] The storage unit 22 includes at least one semiconductor memory, at least one magnetic memory, at least one optical memory, or a combination of at least two of these. The semiconductor memory is, for example, a random access memory (RAM) or a read only memory (ROM). The RAM is, for example, a static random access memory (SRAM) or a dynamic random access memory (DRAM). The ROM is, for example, an electrically erasable programmable read only memory (EEPROM). The storage unit 22 functions as, for example, a main storage device, an auxiliary storage device, or a cache memory. The storage unit 22 stores data used in the operation of the terminal device 20 and data obtained by the operation of the terminal device 20.

[0041] The input unit 23 includes at least one input interface. The input interface is, for example, a physical key, a capacitance key, a pointing device, or a touch screen integrated with a display. The input interface may also be, for example, a sound sensor that accepts voice input, or a camera that accepts gesture input. The input unit 23 accepts an operation to input data used for the operation of the terminal device 20. The input unit 23 may be connected to the terminal device 20 as an external input device instead of being provided in the terminal device 20. As a connection method, any method such as USB (Universal Serial Bus), HDMI (registered trademark) (High-Definition Multimedia Interface), or Bluetooth (registered trademark) can be used.

[0042] The output unit 24 includes at least one output interface. The output interface is, for example, a display that outputs information as a video, or a speaker that outputs information as a sound. The display is, for example, an LCD (liquid crystal display) or an organic EL (electro luminescence) display. The output unit 24 displays and outputs data obtained by the operation of the terminal device 20. The output unit 24 may be connected to the terminal device 20 as an external output device instead of being provided in the terminal device 20. Any connection method may be used, for example, USB, HDMI (registered trademark), or Bluetooth (registered trademark).

[0043] The communication unit 25 includes at least one external communication interface. The communication interface may be either a wired communication interface or a wireless communication interface. In the case of wired communication, the communication interface is, for example, a LAN (Local Area Network) interface or a USB (Universal Serial Bus). In the case of wireless communication, the communication interface is, for example, an interface compatible with mobile communication standards such as LTE (Long Term Evolution), 4G (4th generation), or 5G (5th generation), or an interface compatible with short-range wireless communication such as Bluetooth (registered trademark). The communication unit 25 receives data used in the operation of the terminal device 20 and transmits data obtained by the operation of the terminal device 20.

[0044] The functions of the terminal device 20 are realized by executing a program according to this embodiment on a processor corresponding to the terminal device 20. That is, the functions of the terminal device 20 are realized by software. The program causes a computer to execute the operations of the terminal device 20, thereby causing the computer to function as the terminal device 20. That is, the computer functions as the terminal device 20 by executing the operations of the terminal device 20 in accordance with the program.

[0045] Some or all of the functions of the terminal device 20 may be realized by a dedicated circuit equivalent to the control unit 21. In other words, some or all of the functions of the terminal device 20 may be realized by hardware.

[0046] Referring to FIG. 4, an example of a database related to digital certificates stored in the storage unit 12 of the information processing device 10 is shown. This database is referenced in the system 1 according to this embodiment. In the database related to digital certificates according to this embodiment, digital certificates, name information, and shared keys are associated with each other. Digital certificates may be in any file format. In this embodiment, the file format of the digital certificate is described as JSON format. More specifically, a digital certificate is text data in JSON format signed with a private key. Using a public key corresponding to the private key and the digital certificate data, it is possible to verify whether or not the digital certificate has been tampered with. A private key / public key pair may be issued periodically (e.g., annually). By periodically updating the private key / public key pair in this manner, it is possible to minimize the impact even if the private key is leaked. The name information may be a name written in hiragana, a name written in katakana (hereinafter also referred to as a kana name), or a name written in Roman letters. In this embodiment, the name information is described as a kana name, but is not limited to this. The shared key may be any character string, etc. In this embodiment, the shared key is described as being random alphanumeric characters, but is not limited to this.

[0047] Any method may be employed to create the database. For example, the control unit 11 may receive user operations via the input unit 23 through a user interface displayed and output by the output unit 24 of the terminal device 20. In this case, the control unit 11 may create the database by receiving data received via the communication unit 15. The user interface may be presented by the terminal device 20 accessing the information processing device 10 or a web server via browser software. Alternatively, an application related to the system 1 may be installed in the terminal device 20, and the terminal device 20 may communicate with the information processing device 10 or an application server via the application, as appropriate, to present the user interface. In this case, user authentication processing, etc. may be performed between the terminal device 20 and the information processing device 10, or between the terminal device 20 and the web server, as appropriate.

[0048] An example of such a user interface is shown in Fig. 5. The user interface 100 shown in Fig. 5 is a web page related to the present system 1, and is displayed by the output unit 24 of the terminal device 20 that has accessed the information processing device 10. Via this web page, it is possible to apply for a certification exam, view information about candidates taking the certification exam, view pass / fail results, access information about digital certificates, and so on.

[0049] The user interface 100 includes menu tabs 101 to 104, a settings icon 105, and selection buttons 106 to 109. The menu tab 101 is a tab for displaying information for applying for a certification exam. The menu tab 102 is a tab for displaying a page (examinee's personal page) that consolidates various information to be provided to candidates for the certification exam. The menu tab 103 is a tab for displaying a digital certificate. The menu tab 104 is a tab for displaying information for making inquiries to the administrator. The settings icon 105 is an icon for setting or changing user information such as name, address, and email address. In FIG. 5, the menu tab 103 is selected, and information related to the digital certificate is displayed.

[0050] 5, four digital certificates are displayed as certificates of passing the certification exam. Selection buttons 106 to 109 are buttons for checking the contents of each digital certificate. When one of the selection buttons 106 to 109 is selected by a user operation, the contents of the digital certificate associated with that selection button 106 to 109 are displayed.

[0051] 6 shows a user interface 110 that is displayed when the selection button 107 is selected by a user operation. The user interface 110 includes preview information 111 of the digital certificate. The preview information 111 includes information related to the digital certificate, such as the passing grade, Eiken CSE scores for Reading, Listening, and Writing, five CEFR information for Reading, Listening, Writing, Speaking, and the overall CEFR, Eiken band information based on the results of the first exam and Eiken band information based on the results of the second exam, the overall score, and schedule information such as the certification date, as information on the passing certificate for the Eiken (traditional) Level 2 exam.

[0052] A user interface for issuing name information and a shared key to be associated with the digital certificate is displayed by scrolling the screen of Fig. 6. Fig. 7 shows an example of the user interface 120.

[0053] The user interface 120 includes a text field 121 , a copy button 122 , a shared key issue button 123 , a copy button 124 , a text field 125 , and a copy button 126 .

[0054] Text field 121 is a field where name information is displayed. Name information based on the contents of the digital certificate is pre-entered in text field 121 by default. Copy button 122 is a button for copying the name information displayed in text field 121. By using copy button 122, it is possible to reduce the effort and entry errors of the user when submitting application documents containing name information associated with a digital certificate to a predetermined institution such as a high school, university, or company (hereinafter also referred to as the predetermined institution).

[0055] The shared key issue button 123 is a button for generating a shared key related to a digital certificate. When the shared key issue button 123 is pressed by a user, a shared key associated with the digital certificate is generated. FIG. 8 shows the user interface 120 after the shared key has been generated. As shown in FIG. 8, in this case, "ABCDEFGH..." is issued as the shared key and displayed in the text field 125. When the shared key is generated, the shared key, name information, and digital certificate information are associated and stored in a database. The copy button 124 is a button for copying the information of the issued shared key. By using the copy button 124, it is possible to reduce the user's effort and the likelihood of errors when submitting application documents containing the shared key associated with the digital certificate to a designated institution. The copy button 126 is a button for copying the name information entered in the text field 121 and the shared key displayed in the text field 125 together. By using the copy button 126, it is possible to reduce the user's effort and the likelihood of mistakes when submitting application documents that include the name information and shared key associated with the digital certificate to a designated institution.

[0056] (Operation of information processing device) The operation of the information processing device 10 according to this embodiment will be described with reference to FIG.

[0057] Step S1: The control unit 11 of the information processing device 10 acquires the name information and the shared key associated with the digital certificate.

[0058] Any method can be used to obtain the name information and shared key associated with the digital certificate. For example, the control unit 11 may obtain the name information and shared key from the terminal device 20 or the like via the communication unit 15 and the network 30.

[0059] For example, any user interface can be used for the input operation. FIG. 10 is a diagram showing an example of such a user interface 200. The user interface 200 is a web page for verifying a digital certificate related to the present system 1. The verification web page is a web page used by a predetermined institution to verify an associated digital certificate based on the name information and shared key written in the application documents from the applicant. In other words, an employee at the predetermined institution can enter the name information and shared key written in the application documents from the applicant on the web page and verify the associated digital certificate.

[0060] The user interface 200 includes a first tab 201 and a second tab 202. When the first tab 201 is selected, information for viewing and verifying the digital certificate based on the name information and the shared key is displayed. When the second tab 202 is selected, information for viewing and verifying the digital certificate based on the digital certificate is displayed. In FIG. 10, the first tab 201 is selected. In this case, a name information input field 203 and a shared key input field 204 are displayed. The name information and the shared key related to the digital certificate to be verified are input into the name information input field 203 and the shared key input field 204.

[0061] Step S2: The control unit 11 verifies the digital certificate based on the name information and shared key acquired in step S1.

[0062] Specifically, when the verify button 205 on the user interface 200 is pressed by a user operation, the control unit 11 verifies the associated digital certificate based on the name information and shared key entered in the name information input field 203 and the shared key input field 204. More specifically, the control unit 11 identifies the digital certificate based on the name information and the shared key. The control unit 11 verifies whether the digital certificate has been tampered with and whether it is in an expired state. In the digital certificate verification process, the control unit 11 performs the verification by using an external device (external VC verification system). That is, the control unit 11 performs the verification process by sending a digital certificate verification request to the external device via the communication unit 15 and receiving the verification result from the external device. Note that the specific method of the digital certificate verification process is not limited to this, and any method can be adopted.

[0063] Step S3: The control unit 11 outputs the verification result of the digital certificate. In other words, the control unit 11 presents information related to the verification result of the digital certificate.

[0064] Any method can be adopted for presenting the information. For example, the control unit 11 may present the information through a user interface via the output unit 24 of the terminal device 20. In this embodiment, an example in which information is visually presented through a user interface will be described.

[0065] 11 and 12 are examples of a user interface including information related to the verification result of the digital certificate. The user interface 300 shown in Fig. 11 is a screen that is displayed when the digital certificate is found to be valid as a result of the digital certificate verification in step S2. When button 301 is pressed or otherwise operated by the user, the contents of the digital certificate are displayed. In other words, the control unit 11 outputs the contents of the digital certificate.

[0066] User interface 400 shown in Fig. 12 is a screen that is displayed when the result of verifying the digital certificate in step S2 indicates that the digital certificate is invalid. As shown in Fig. 12, user interface 400 presents information indicating that the digital certificate is invalid and that the digital certificate may have expired or been tampered with. When close button 401 is pressed or the like by a user operation, the screen of user interface 400 closes and the screen returns to the screen of user interface 200 shown in Fig. 10.

[0067] As described above, the information processing device 10 according to this embodiment acquires name information and a shared key associated with a digital certificate. The information processing device 10 also verifies the digital certificate based on the name information and the shared key. The information processing device 10 then outputs the verification result of the digital certificate.

[0068] With this configuration, the information processing device 10 acquires the name information and shared key associated with the digital certificate and verifies the digital certificate using the name information and shared key. This eliminates the need to identify or upload the digital certificate itself, improving user convenience and thereby improving the digital certificate verification technology.

[0069] Although the present disclosure has been described based on the drawings and examples, it should be noted that those skilled in the art may make various modifications and alterations based on the present disclosure. Therefore, it should be noted that these modifications and alterations are included in the scope of the present disclosure. For example, the functions included in each component or step can be rearranged so as not to be logically inconsistent, and multiple components or steps can be combined or divided into one.

[0070] For example, when button 301 on user interface 300 is pressed by a user operation, the contents of the digital certificate are displayed. However, the range of the contents of the digital certificate displayed at this time may be only a portion of the contents of the digital certificate. In other words, control unit 11 may output only a portion of the contents of the digital certificate. This portion of the contents of the digital certificate may be information on the results of a qualification test. Furthermore, the result information on the qualification test may include at least one of information on passing a specified level of the certification test, score information, and proficiency level information. By limiting the information to be output in this way, it is possible to limit the contents of the digital certificate to only the information required by the person wishing to verify the digital certificate. In this way, it is possible to avoid unnecessary output of privacy-related information included in the digital certificate.

[0071] Furthermore, for example, the digital certificate may be a certificate attesting to the results of multiple qualification exams. In this case, the control unit 11 may acquire verification range information. The control unit 11 may then output the verification results related to the verification range information of the digital certificate. In this case, when the digital certificate is a certificate attesting to the results of multiple qualification exams, verification may be performed by limiting the verification range required by the person wishing to verify the digital certificate. Similarly, the digital certificate may be a collection of multiple certificates held by an individual. In this case, the control unit 11 may be able to verify the multiple certificates held by an individual all at once, like a digital resume.

[0072] In the present embodiment, the control unit 11 verifies the digital certificate based on the name information and the identification information (shared key), but this is not limited thereto. For example, the control unit 11 may verify the digital certificate based on the identification information alone. Furthermore, the control unit 11 may verify the digital certificate by combining the identification information with attribute information (such as the name information and the date of birth) that can identify an individual. Furthermore, the identification information, etc., used to verify the digital certificate may be coded as a two-dimensional code such as a QR code (registered trademark). That is, a two-dimensional code corresponding to the identification information may be used. Alternatively, a two-dimensional code corresponding to the identification information and the name information may be used. Alternatively, a two-dimensional code corresponding to the identification information and the attribute information may be used. In this case, the control unit 11 verifies the digital certificate based on the two-dimensional code. Furthermore, the identification information, etc. (identification information alone, identification information and the name information, or identification information and the attribute information) used to verify the digital certificate may be embedded as metadata of digital information (image information, video information, document data such as Word, Excel, or PDF, crypto assets, NFT, etc.). In this case, the control unit 11 verifies the digital certificate based on the metadata of the digital information.

[0073] For example, in the above embodiment, the digital certificate is verified based on the name information and shared key included in the application documents submitted to the designated institution. However, this is not limited to this. For example, the applicant may be required to enter the name information and shared key on the application website of the designated institution. In this case, an API (Application Programming Interface) related to the present system 1 may be made public. The server of the application website may use the API to transmit the name information and shared key entered by the applicant on the application website to the information processing device 10 and receive the verification results from the information processing device 10. This reduces the amount of work required to verify the digital certificate. In this case, in addition to verification based on the two pieces of information, the name information and the shared key, as described above, the digital certificate may be verified based on the identification information alone. For example, the digital certificate may be verified by combining the identification information with attribute information that can identify an individual. In such a configuration, the applicant may be required to enter personal information and a shared key on the application website of the designated institution.

[0074] Furthermore, when using the above-described API, the verification results of the verified digital certificate and the contents of the digital certificate may be automatically compared with the user's application details on the application website of a designated institution. For example, if the user's application details on the application website include information on the applicant's name, date of birth, and required level on the Test in Practical English Proficiency Test, the server associated with the application website may receive from the information processing device 10 a notification that the digital certificate is valid and the contents of the digital certificate. The server then automatically compares the application details with the information contained in the digital certificate, including the applicant's name, date of birth, and required level on the Test in Practical English Proficiency Test. The server may also accept the application if the comparison reveals no errors in the application details. This can automate at least part of the processes related to digital certificate verification, matching, and application processing, improving processing efficiency, reducing human error, and reducing labor costs. For example, if a university or other institution imposes application requirements, such as Eiken Grade 2 or higher or a CSE score of 2000 or higher, the matched information may be used to automatically determine whether the application requirements are met. In this way, the man-hours required for application requirements can be reduced. Note that, although the server related to the application website performs the matching work here, this is not limited to this. For example, the information processing device 10 may perform the matching work. In this case, the information processing device 10 receives the application content of the user on the application website via the API. The information processing device 10 may perform the matching work related to the application content based on the received application content and the content of the digital certificate.

[0075] Alternatively, the user may perform verification by uploading the digital certificate itself. In this case, the user selects the second tab 202 in the user interface 200. The user then selects the digital certificate to upload and can verify and view the digital certificate. According to this embodiment, the user can select and perform verification of the digital certificate based on the name information and shared key, or verification using the digital certificate, thus flexibly meeting the needs of the user. [Explanation of symbols]

[0076] 1 System 10. Information processing equipment 11 Control section 12 Storage section 13 Input section 14 Output section 15 Communications Department 20 Information processing equipment 21 Control section 22 Memory section 23 Input section 24 Output section 25 Communications Department 30 Network 100, 110, 120, 200, 300, 400 User Interface 101, 102, 103, 104 Menu tabs 105 Settings icon 106, 107, 108, 109 selection buttons 111 Preview Information 121 Text Fields 122 Copy button 123 Shared key issue button 124 Copy button 125 Text Fields 126 Copy button 201 Tab 1 202 Second Tab 203 Name information input field 204 Shared Key Input Field 205 Validation Button 301 Button 401 Close button

Claims

1. An information processing device including a control unit, The control unit acquiring attribute information associated with a digital certificate and identification information related to the digital certificate; verifying the digital certificate based on the attribute information and the identification information; An information processing device that outputs the verification result of the digital certificate.

2. 2. The information processing device according to claim 1, The control unit identifies the digital certificate based on the attribute information and the identification information, and verifies whether the digital certificate has been tampered with and whether it is in an expired state.

3. 2. The information processing device according to claim 1, The digital certificate is a certificate certifying the result of a qualification examination.

4. 4. The information processing device according to claim 3, The control unit further outputs a part of the content of the digital certificate.

5. 5. The information processing device according to claim 4, An information processing device, wherein part of the contents of the digital certificate includes result information of the qualification examination.

6. 6. The information processing device according to claim 5, The information processing device, wherein the qualification test result information includes at least one of pass information for a predetermined level of the certification test, score information, and proficiency level information.

7. 2. The information processing device according to claim 1, The digital certificate is a certificate certifying the results of a plurality of qualification examinations; The control unit further acquires verification range information, and outputs a verification result related to the verification range information of the digital certificate.

8. 2. The information processing device according to claim 1, The control unit is an information processing device that acquires the attribute information and the identification information from a server related to an application website via an API.

9. A system including the information processing device according to claim 8 and the server, The server receiving the contents of the digital certificate from the information processing device; Performing a match between the contents of the digital certificate and the user's application on the application website; If the result of the comparison shows that there are no defects in the application content, the system accepts the application processing.

10. A verification method executed by an information processing device, comprising: acquiring attribute information associated with a digital certificate and identification information related to the digital certificate; verifying whether the digital certificate has been tampered with based on the attribute information and the identification information; outputting a verification result related to the digital certificate; Validation methods, including:

11. On the computer, acquiring attribute information associated with a digital certificate and identification information related to the digital certificate; verifying whether the digital certificate has been tampered with based on the attribute information and the identification information; outputting a verification result relating to the digital certificate; A program that executes.

Images