System, verification method, and program

Abstract

This invention provides an information processing device, system, verification method, and program that improve digital certificate verification technology. [Solution] In a system in which an information processing device and a terminal device are connected to a network including a mobile communication network and the Internet, the information processing device 10 includes a control unit 11 that acquires attribute information associated with a digital certificate and identification information related to the digital certificate, verifies the digital certificate based on the attribute information and identification information, and outputs the verification result of the digital certificate.

Description

Technical Field

[0001] The present disclosure relates to an information processing apparatus, a system, a verification method, and a program.

Background Art

[0002] Conventionally, a verifiable credential system is known that generates a digital certificate corresponding to a university diploma or the like and ensures that the digital certificate is genuine and has not been tampered with (for example, Patent Document 1, etc.).

Prior Art Documents

Patent Documents

[0003]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0004] When verifying a digital certificate, it was necessary to identify the target digital certificate and upload it to a server for verification, which was a cumbersome task. Also, since digital certificates contain personal information, sufficient care was required in upload processing, handling of digital certificates, submission of digital certificates, etc. Thus, there was room for improvement in digital certificate verification technology.

[0005] In view of such circumstances, an object of the present disclosure is to improve digital certificate verification technology.

Means for Solving the Problems

[0006] (1) An information processing apparatus according to an embodiment of the present disclosure is an information processing apparatus including a control unit, wherein the control unit is Obtain attribute information associated with the digital certificate and identification information related to the said digital certificate, Based on the attribute information and the identification information, the digital certificate is verified. Output the verification result of the aforementioned digital certificate.

[0007] (2) An information processing apparatus according to one embodiment of the present disclosure is the information processing apparatus described in (1), The control unit identifies the digital certificate based on the attribute information and the identification information, and performs verification of whether the digital certificate has been tampered with and whether it is in an expired state.

[0008] (3) An information processing apparatus according to one embodiment of the present disclosure is an information processing apparatus described in (1) or (2), The aforementioned digital certificate is a certificate that proves the results of a qualification examination.

[0009] (4) An information processing apparatus according to one embodiment of the present disclosure is the information processing apparatus described in (3), The control unit further outputs a portion of the contents of the digital certificate.

[0010] (5) An information processing apparatus according to one embodiment of the present disclosure is the information processing apparatus described in (4), The contents of the aforementioned digital certificate include, in part, the results information of the aforementioned qualification examination.

[0011] (6) An information processing apparatus according to one embodiment of the present disclosure is the information processing apparatus described in (5), The results information of the aforementioned qualification examination includes at least one of the following: information on passing the prescribed level of the examination, score information, and proficiency level information.

[0012] (7) An information processing apparatus according to one embodiment of the present disclosure is an information processing apparatus according to any one of paragraphs (1) to (6), The aforementioned digital certificate is a certificate that proves the results of multiple qualification examinations, The control unit further acquires verification range information and outputs, among the digital certificates, the verification result related to the verification range information.

[0013] (8) The information processing apparatus according to an embodiment of the present disclosure is the information processing apparatus according to any one of (1) to (7), The control unit acquires the attribute information and the identification information from a server related to the application website through an API.

[0014] (9) The system according to an embodiment of the present disclosure is a system including the information processing apparatus according to (8) and the server, The server, receives the content of the digital certificate from the information processing apparatus, executes matching between the content of the digital certificate and the application content of the user on the application website, If there is no defect in the application content as a result of the matching, the application process is accepted.

[0015] (10) The verification method according to an embodiment of the present disclosure is a verification method executed by an information processing apparatus, acquiring attribute information associated with a digital certificate and identification information related to the digital certificate; verifying whether the digital certificate has been tampered with based on the attribute information and the identification information; and outputting a verification result related to the digital certificate. and includes.

[0016] (11) The program according to an embodiment of the present disclosure is for a computer to acquire attribute information associated with a digital certificate and identification information related to the digital certificate; verify whether the digital certificate has been tampered with based on the attribute information and the identification information; and output a verification result related to the digital certificate. Execute it.

Advantages of the Invention

[0017] According to one embodiment of the present disclosure, the digital certificate verification technology is improved.

Brief Description of the Drawings

[0018] [Figure 1] It is a block diagram showing a schematic configuration of a system according to an embodiment of the present disclosure. [Figure 2] It is a block diagram showing a schematic configuration of an information processing device. [Figure 3] It is a block diagram showing a schematic configuration of a terminal device. [Figure 4] It is a diagram showing an example of a database related to a digital certificate. [Figure 5] It is a diagram showing an example of a user interface. [Figure 6] It is a diagram showing an example of a user interface. [Figure 7] It is a diagram showing an example of a user interface. [Figure 8] It is a diagram showing an example of a user interface. [Figure 9] It is a flowchart showing the operation of an information processing device. [Figure 10] It is a diagram showing an example of a user interface. [Figure 11] It is a diagram showing an example of a user interface. [Figure 12] It is a diagram showing an example of a user interface.

Modes for Carrying Out the Invention

[0019] Hereinafter, embodiments of the present disclosure will be described.

[0020] (Overview of the Embodiment)

[0021] Referring to Figure 1, the overview and configuration of System 1 according to this embodiment will be described. In this embodiment, the digital certificate may be, for example, a certificate that proves the result of a qualification examination. Qualification examinations include, for example, qualifications related to language and education, medical and welfare, law and accounting, information technology, engineering, etc.

[0022] It should be noted that digital certificates are not limited to certificates proving the results of qualification examinations. For example, a digital certificate may be any document that certifies any matter, such as a certificate indicating graduation, degree, or credit recognition from a university or high school. Alternatively, a digital certificate may be something that certifies various activities rather than qualification examinations, such as a mountain climbing certificate. Furthermore, the certificate may be proof of affiliation or activity, such as club activities or committee activities. In the following description of this embodiment, we will explain using the case where the digital certificate is a certificate proving the results of a qualification examination such as the Practical English Proficiency Test as an example.

[0023] The system 1 according to this embodiment comprises an information processing device 10 and a terminal device 20. The information processing device 10 and the terminal device 20 are communicated with a network 30, which includes, for example, a mobile communication network and the Internet.

[0024] The information processing device 10 is, for example, a server device installed in a data center or the like. For example, the information processing device 10 is a server belonging to a cloud computing system or other computing system. The information processing device 10 can communicate with the terminal device 20 via the network 30. Although Figure 1 shows an example in which system 1 is equipped with one information processing device 10, it is not limited to this. System 1 may be equipped with two or more information processing devices 10.

[0025] The terminal device 20 is any device used by each user. Users include those who wish to obtain proof of qualification exam results, those who verify or view digital certificates, etc. For example, a general-purpose electronic device such as a smartphone or tablet, or a dedicated electronic device, can be used as the terminal device 20. Although Figure 1 shows an example where System 1 has one terminal device 20, it is not limited to this. System 1 may have two or more terminal devices 20.

[0026] First, an overview of this embodiment will be described, and details will be described later. The information processing device 10 acquires name information associated with the digital certificate and identification information related to the digital certificate. The identification information related to the digital certificate is information that can uniquely identify the digital certificate (hereinafter also referred to as a shared key). The information processing device 10 also verifies the digital certificate based on the name information and identification information. The information processing device 10 then outputs the verification result of the digital certificate.

[0027] Thus, according to this embodiment, the information processing device 10 acquires name information and identification information associated with the digital certificate, and performs verification of the digital certificate using the name information and shared key. Therefore, the user does not need to identify the digital certificate itself, and verification can be performed without the user needing to upload anything, thus improving convenience from the standpoint of handling and submitting digital certificates, and thus improving the digital certificate verification technology.

[0028] Next, we will describe each component of System 1 in detail.

[0029] (Configuration of information processing device) As shown in Figure 2, the information processing device 10 comprises a control unit 11, a storage unit 12, an input unit 13, an output unit 14, and a communication unit 15.

[0030] The control unit 11 includes at least one processor, at least one dedicated circuit, or a combination thereof. The processor is a general-purpose processor such as a CPU (central processing unit) or GPU (graphics processing unit), or a dedicated processor specialized for a specific process. The dedicated circuit is, for example, an FPGA (field-programmable gate array) or an ASIC (application-specific integrated circuit). The control unit 11 controls each part of the information processing device 10 and executes processes related to the operation of the information processing device 10.

[0031] The storage unit 12 includes at least one semiconductor memory, at least one magnetic memory, at least one optical memory, or at least two combinations thereof. The semiconductor memory is, for example, RAM (random access memory) or ROM (read-only memory). The RAM is, for example, SRAM (static random access memory) or DRAM (dynamic random access memory). The ROM is, for example, EEPROM (electrically erasable programmable read-only memory). The storage unit 12 functions, for example, as a main memory, auxiliary memory, or cache memory. The storage unit 12 stores data used for the operation of the information processing device 10 and data obtained by the operation of the information processing device 10.

[0032] The input unit 13 includes at least one input interface. The input interface may be, for example, a physical key, a capacitive key, a pointing device, or a touchscreen integrated with a display. Alternatively, the input interface may be, for example, a sound sensor that accepts voice input, or a camera that accepts gesture input. The input unit 13 accepts operations to input data used for the operation of the information processing device 10. Instead of being integrated into the information processing device 10, the input unit 13 may be connected to the information processing device 10 as an external input device. Any connection method can be used, for example, USB (Universal Serial Bus), HDMI (registered trademark) (High-Definition Multimedia Interface), or Bluetooth (registered trademark).

[0033] The output unit 14 includes at least one output interface. The output interface is, for example, a display that outputs information as video, or a speaker that outputs information as sound. The display is, for example, an LCD (liquid crystal display) or an organic EL (electroluminescence) display. The output unit 14 displays and outputs data obtained by the operation of the information processing device 10. Instead of being provided in the information processing device 10, the output unit 14 may be connected to the information processing device 10 as an external output device. Any connection method can be used, for example, USB, HDMI (registered trademark), or Bluetooth (registered trademark).

[0034] The communication unit 15 includes at least one external communication interface. The communication interface may be either a wired or wireless communication interface. In the case of wired communication, the communication interface may be, for example, a LAN (Local Area Network) interface or a USB (Universal Serial Bus) interface. In the case of wireless communication, the communication interface may be, for example, an interface compatible with mobile communication standards such as LTE (Long Term Evolution), 4G (4th generation), or 5G (5th generation), or an interface compatible with short-range wireless communication such as Bluetooth (registered trademark). The communication unit 15 receives data used for the operation of the information processing device 10 and transmits data obtained by the operation of the information processing device 10.

[0035] The functions of the information processing device 10 are realized by executing a program according to this embodiment on a processor corresponding to the information processing device 10. In other words, the functions of the information processing device 10 are realized by software. The program causes the computer to perform the operations of the information processing device 10, thereby causing the computer to function as the information processing device 10. That is, the computer functions as the information processing device 10 by performing the operations of the information processing device 10 according to the program.

[0036] In this embodiment, the program can be recorded on a computer-readable recording medium. The computer-readable recording medium includes non-temporary computer-readable media, such as magnetic recording devices, optical discs, magneto-optical recording media, or semiconductor memory. The program can be distributed, for example, by selling, transferring, or lending portable recording media such as DVDs (digital versatile discs) or CD-ROMs (compact disc read-only memory) on which the program is recorded. Alternatively, the program may be distributed by storing it on the storage of an external server and transmitting it from the external server to other computers. The program may also be provided as a program product.

[0037] Some or all of the functions of the information processing device 10 may be implemented by a dedicated circuit corresponding to the control unit 11. In other words, some or all of the functions of the information processing device 10 may be implemented by hardware.

[0038] (Terminal device configuration) As shown in Figure 3, the terminal device 20 comprises a control unit 21, a storage unit 22, an input unit 23, an output unit 24, and a communication unit 25.

[0039] The control unit 21 includes at least one processor, at least one dedicated circuit, or a combination thereof. The processor is a general-purpose processor such as a CPU (central processing unit) or GPU (graphics processing unit), or a dedicated processor specialized for a specific process. The dedicated circuit is, for example, an FPGA (field-programmable gate array) or an ASIC (application-specific integrated circuit). The control unit 21 controls each part of the terminal device 20 and executes processes related to the operation of the terminal device 20.

[0040] The storage unit 22 includes at least one semiconductor memory, at least one magnetic memory, at least one optical memory, or at least two combinations thereof. The semiconductor memory is, for example, RAM (random access memory) or ROM (read-only memory). The RAM is, for example, SRAM (static random access memory) or DRAM (dynamic random access memory). The ROM is, for example, EEPROM (electrically erasable programmable read-only memory). The storage unit 22 functions, for example, as a main memory, auxiliary memory, or cache memory. The storage unit 22 stores data used for the operation of the terminal device 20 and data obtained by the operation of the terminal device 20.

[0041] The input unit 23 includes at least one input interface. The input interface may be, for example, a physical key, a capacitive key, a pointing device, or a touchscreen integrated with a display. Alternatively, the input interface may be, for example, a sound sensor that accepts voice input, or a camera that accepts gesture input. The input unit 23 accepts operations to input data used for the operation of the terminal device 20. Instead of being provided in the terminal device 20, the input unit 23 may be connected to the terminal device 20 as an external input device. Any connection method can be used, for example, USB (Universal Serial Bus), HDMI (registered trademark) (High-Definition Multimedia Interface), or Bluetooth (registered trademark).

[0042] The output unit 24 includes at least one output interface. The output interface is, for example, a display that outputs information as video, or a speaker that outputs information as sound. The display is, for example, an LCD (liquid crystal display) or an organic EL (electroluminescence) display. The output unit 24 displays and outputs data obtained by the operation of the terminal device 20. Instead of being provided in the terminal device 20, the output unit 24 may be connected to the terminal device 20 as an external output device. Any connection method can be used, for example, USB, HDMI (registered trademark), or Bluetooth (registered trademark).

[0043] The communication unit 25 includes at least one external communication interface. The communication interface may be either a wired or wireless communication interface. In the case of wired communication, the communication interface may be, for example, a LAN (Local Area Network) interface or a USB (Universal Serial Bus) interface. In the case of wireless communication, the communication interface may be, for example, an interface compatible with mobile communication standards such as LTE (Long Term Evolution), 4G (4th generation), or 5G (5th generation), or an interface compatible with short-range wireless communication such as Bluetooth (registered trademark). The communication unit 25 receives data used for the operation of the terminal device 20 and transmits data obtained by the operation of the terminal device 20.

[0044] The functions of the terminal device 20 are realized by executing the program according to this embodiment on a processor corresponding to the terminal device 20. In other words, the functions of the terminal device 20 are realized by software. The program causes the computer to perform the operations of the terminal device 20, thereby causing the computer to function as the terminal device 20. That is, the computer functions as the terminal device 20 by performing the operations of the terminal device 20 according to the program.

[0045] Some or all of the functions of the terminal device 20 may be implemented by a dedicated circuit corresponding to the control unit 21. In other words, some or all of the functions of the terminal device 20 may be implemented by hardware.

[0046] Referring to Figure 4, an example of a database related to digital certificates stored in the storage unit 12 of the information processing device 10 is shown. In the system 1 according to this embodiment, this database is referenced. In the database related to digital certificates in this embodiment, digital certificates, name information, and shared keys are associated with each other. Digital certificates may be in any file format. In this embodiment, the file format of the digital certificate will be described as being in JSON format. More specifically, the digital certificate is text data in JSON format signed with a private key. By using the public key corresponding to the private key and the data of the digital certificate, it is possible to verify whether or not it has been tampered with. The private key and public key pair may be issued at predetermined intervals (for example, every year). By updating the private key and public key pair in this way, the impact can be minimized even if the private key is leaked. The name information may be a name expressed in hiragana, a name expressed in katakana (hereinafter also referred to as kana name), or a name expressed in Roman letters. In this embodiment, the name information will be described as a kana name, but it is not limited to this. The shared key may be any string of characters, etc. In this embodiment, the shared key is described as a random alphanumeric string, but it is not limited to this.

[0047] Any method may be used to create the database. For example, the control unit 11 may receive user operations via the input unit 23 through a user interface displayed by the output unit 24 of the terminal device 20. In this case, the control unit 11 may create the database by receiving the data received via the communication unit 15. Such a user interface may be presented by the terminal device 20 accessing the information processing device 10 or web server via browser software. Alternatively, an application related to system 1 may be installed on the terminal device 20, and the user interface may be presented by the terminal device 20 communicating with the information processing device 10 or application server as appropriate via the application. In this case, authentication processing related to the user may be performed as appropriate between the terminal device 20 and the information processing device 10, or between the terminal device 20 and the web server.

[0048] Figure 5 shows an example of such a user interface. The user interface 100 shown in Figure 5 is a web page related to this system 1, and is displayed and output by the output unit 24 of a terminal device 20 that accesses the information processing device 10. Through this web page, it is possible to apply for the certification exam, view information on the certification exam takers, view pass / fail results, and access information on digital certificates, etc.

[0049] The user interface 100 includes menu tabs 101-104, a settings icon 105, and selection buttons 106-109. Menu tab 101 is for displaying information for exam application. Menu tab 102 is for displaying a page (examinee's personal page) that aggregates various information provided to exam takers. Menu tab 103 is for displaying digital certificates. Menu tab 104 is for displaying information for contacting the administrator. The settings icon 105 is for setting and changing user information such as name, address, and email address. In Figure 5, menu tab 103 is selected, and information related to digital certificates is displayed.

[0050] Figure 5 displays four digital certificates as proof of passing the certification exam. Selection buttons 106-109 are for viewing the contents of each digital certificate. When any of selection buttons 106-109 is selected by the user, the contents of the digital certificate associated with that selection button 106-109 are displayed.

[0051] Figure 6 shows the user interface 110 that is displayed when the selection button 107 is selected by the user. The user interface 110 includes preview information 111 of the digital certificate. The preview information 111 includes information related to the digital certificate, and in this case, as information for the Eiken (traditional) Grade 2 passing certificate, it includes the passing grade, Eiken CSE scores for Reading, Listening, and Writing, five CEFR information scores for Reading, Listening, Writing, Speaking, and Overall CEFR, Eiken band information based on the results of the first examination, Eiken band information based on the results of the second examination, overall score, and date information such as the certification date.

[0052] By scrolling the screen in Figure 6, the user interface for issuing the name information and shared key associated with the digital certificate will be displayed. Figure 7 shows an example of this user interface 120.

[0053] The user interface 120 includes a text field 121, a copy button 122, a share key issue button 123, a copy button 124, a text field 125, and a copy button 126.

[0054] Text field 121 is a field where name information is displayed. By default, name information based on the contents of the digital certificate is pre-filled in text field 121. Copy button 122 is a button that copies the name information displayed in text field 121. By using this copy button 122, the effort and errors of the user when submitting application documents containing name information associated with the digital certificate to designated institutions such as high schools, universities, and companies (hereinafter also referred to as designated institutions) can be reduced.

[0055] The Shared Key Issuance button 123 is a button for generating a shared key related to a digital certificate. When the Shared Key Issuance button 123 is pressed by the user, a shared key associated with the digital certificate is generated. Figure 8 shows the user interface 120 after the shared key has been generated. As shown in Figure 8, the shared key "ABCDEFGH····" is issued and displayed in the text field 125. When a shared key is generated, the shared key, name information, and digital certificate information are associated with each other and stored in the database. The Copy button 124 is a button for copying the information of the issued shared key. By using the Copy button 124, the user's effort and the possibility of errors in entering the information can be reduced when submitting application documents containing the shared key associated with the digital certificate to the designated institution. The Copy button 126 is a button that copies both the name information entered in the text field 121 and the shared key displayed in the text field 125 together. By using the copy button 126, the effort and potential errors for the user when submitting application documents containing name information and shared keys associated with digital certificates to the designated institution can be reduced.

[0056] (Operation of information processing device) Referring to Figure 9, the operation of the information processing device 10 according to this embodiment will be described.

[0057] Step S1: The control unit 11 of the information processing device 10 obtains the name information and shared key associated with the digital certificate.

[0058] Any method can be used to obtain the name information and shared key associated with the digital certificate. For example, the control unit 11 may obtain the name information and shared key from the terminal device 20, etc., via the communication unit 15 and the network 30.

[0059] For example, any user interface can be used for the input operation. Figure 10 shows an example of such a user interface 200. The user interface 200 is a web page for verifying digital certificates related to this system 1. The verification web page is a web page for a designated institution to verify the associated digital certificate based on the name information and shared key described in the application documents from the applicant. In other words, an employee of the designated institution can input the name information and shared key described in the application documents from the applicant on the web page and verify the associated digital certificate.

[0060] The user interface 200 includes a first tab 201 and a second tab 202. When the first tab 201 is selected, information for viewing and verifying the digital certificate is displayed based on the name information and shared key. When the second tab 202 is selected, information for viewing and verifying the digital certificate is displayed based on the digital certificate itself. In Figure 10, the first tab 201 is selected. In this case, the name information input field 203 and the shared key input field 204 are displayed. The name information input field 203 and the shared key input field 204 are entered with the name information input field 203 and the shared key input field 204, respectively, with the name information and shared key related to the digital certificate to be verified.

[0061] Step S2: The control unit 11 verifies the digital certificate based on the name information and shared key obtained in step S1.

[0062] Specifically, when the verification button 205 on the user interface 200 is pressed by the user, the control unit 11 verifies the digital certificate associated with the name information and shared key entered in the name information input field 203 and the shared key input field 204. More specifically, the control unit 11 identifies the digital certificate based on the name information and shared key. The control unit 11 verifies whether the digital certificate has been tampered with and whether it is in an expired state. In the digital certificate verification process, the control unit 11 performs the verification by utilizing an external device (an external VC verification system). That is, the control unit 11 sends a digital certificate verification request to the external device via the communication unit 15 and performs the verification process by receiving the verification result from the external device. Note that the specific method of the digital certificate verification process is not limited to this, and any method can be adopted.

[0063] Step S3: The control unit 11 outputs the verification result of the digital certificate. In other words, the control unit 11 presents information related to the verification result of the digital certificate.

[0064] Any method can be used to present information. For example, the control unit 11 may present information through a user interface via the output unit 24 of the terminal device 20. In this embodiment, an example of presenting information visually through a user interface will be described.

[0065] Figures 11 and 12 show an example of a user interface that includes information related to the verification results of a digital certificate. The user interface 300 shown in Figure 11 is the screen displayed when the digital certificate is valid as a result of the verification in step S2. When button 301 is pressed by the user, the contents of the digital certificate are displayed. In other words, the control unit 11 outputs the contents of the digital certificate.

[0066] The user interface 400 shown in Figure 12 is the screen displayed when the digital certificate is found to be invalid as a result of the verification in step S2. As shown in Figure 12, the user interface 400 presents information indicating that the digital certificate is invalid and that it may have been revoked or tampered with. If the close button 401 is pressed by the user, the screen of the user interface 400 closes and the user returns to the screen of the user interface 200 shown in Figure 10.

[0067] As described above, the information processing device 10 according to this embodiment acquires name information and a shared key associated with the digital certificate. The information processing device 10 also verifies the digital certificate based on the name information and the shared key. The information processing device 10 then outputs the verification result of the digital certificate.

[0068] With this configuration, the information processing device 10 acquires name information and a shared key associated with the digital certificate, and performs verification of the digital certificate using the said name information and shared key. Therefore, there is no need to identify or upload the digital certificate itself, and the verification technology for digital certificates is improved in that it enhances user convenience.

[0069] While this disclosure has been described based on the drawings and embodiments, it should be noted that those skilled in the art may make various modifications and alterations based on this disclosure. Therefore, it should be noted that these modifications and alterations are within the scope of this disclosure. For example, the functions, etc., included in each component or step can be rearranged in a logically consistent manner, and multiple components or steps can be combined into one or divided into two.

[0070] For example, when a button 301 on the user interface 300 is pressed by a user, the contents of the digital certificate are displayed. However, the scope of the digital certificate contents displayed at this time may be limited to only a portion of the digital certificate contents. In other words, the control unit 11 may output only a portion of the digital certificate contents. This portion of the digital certificate contents may be qualification examination result information. Furthermore, the qualification examination result information may include at least one of the following: information on passing a prescribed level of the examination, score information, and proficiency information. By limiting the information output in this way, the contents of the digital certificate can be limited to only the information necessary for those who wish to verify the digital certificate. In this way, privacy-related information contained in the digital certificate may not be output unnecessarily.

[0071] For example, a digital certificate may be a certificate that proves the results of multiple qualification exams. In this case, the control unit 11 may acquire verification scope information. The control unit 11 may then output the verification results related to the verification scope information of the digital certificate. In such cases, when a digital certificate is a certificate that proves the results of multiple qualification exams, the verification may be limited to only the verification scope required by the person requesting the verification of the digital certificate. Similarly, a digital certificate may be a collection of multiple certificates held by an individual. In this case, the control unit 11 may verify the multiple certificates held by the individual all at once, like a digital resume.

[0072] Furthermore, in this embodiment, for example, the control unit 11 verifies the digital certificate based on name information and identification information (shared key), but it is not limited to this. For example, the control unit 11 may verify the digital certificate using only the identification information. Alternatively, the control unit 11 may verify the digital certificate by combining the identification information with attribute information that can identify an individual (name information, date of birth, etc.). In addition, the identification information for verifying the digital certificate may be coded into a two-dimensional code such as a QR code (registered trademark). In other words, a two-dimensional code corresponding to the identification information may be used. Alternatively, a two-dimensional code corresponding to the identification information and name information may be used. Alternatively, a two-dimensional code corresponding to the identification information and attribute information may be used. In this case, the control unit 11 verifies the digital certificate based on the two-dimensional code. Furthermore, the identification information for verifying the digital certificate (identification information alone, identification information and name information, and identification information and attribute information) may be embedded as metadata in digital information (image information, video information, document data such as Word, Excel, PDF, crypto assets, NFTs, etc.). In this case, the control unit 11 verifies the digital certificate based on the metadata of the digital information.

[0073] Furthermore, in the above embodiment, the digital certificate is verified based on the name information and shared key described in the application documents for the designated institution, but this is not limited to this. For example, the applicant may be required to input the name information and shared key on the application website of the designated institution. In this case, the API (Application Programming Interface) related to this system 1 may be made public. The server of the application website may use the API to transmit the name information and shared key entered by the applicant on the application website to the information processing device 10, and receive the results verified by the information processing device 10. In this way, the man-hours required for verifying the digital certificate can be reduced. Also in this case, in addition to verification based on the two pieces of information, name information and shared key, as described above, the digital certificate may be verified using only the identification information. Furthermore, for example, the digital certificate may be verified by combining the identification information with attribute information that can identify an individual. In such a configuration, for example, the applicant may be required to input personal information and a shared key on the application website of the designated institution.

[0074] Furthermore, when using the API described above, the verification results of the verified digital certificate and the contents of the digital certificate may be automatically matched with the user's application content on the designated institution's application website. For example, if the user's application content on the application website includes information on the applicant's name, date of birth, and the level of the Practical English Proficiency Test passed, the server on the application website receives from the information processing device 10 that the digital certificate is valid and the contents of the digital certificate. The server then automatically matches the information on the name, date of birth, and level of the Practical English Proficiency Test passed in the contents of the digital certificate with the application content. The server may also accept the application if the matching reveals no deficiencies in the application content. In this way, at least a part of the processing related to the verification, matching, and application processing of the digital certificate can be automated, improving processing efficiency, reducing human error, and reducing man-hours. For example, if a university or other institution imposes application requirements such as Eiken Level 2 or higher, or a CSE score of 2000 or higher, the system may automatically determine whether the application requirements are met based on the matched information. This reduces the man-hours required for meeting application requirements. While it is assumed here that the server on the application website performs the matching process, this is not the only option. For example, the information processing device 10 may perform the matching process. In this case, the information processing device 10 receives the user's application details from the application website via the API described above. The information processing device 10 may then perform a matching process based on the received application details and the contents of the digital certificate.

[0075] Alternatively, the user may verify the digital certificate by uploading the certificate itself. In this case, the user selects the second tab 202 in the user interface 200 described above. The user can then select the digital certificate to upload and verify and view the digital certificate. According to this embodiment, the user can choose to perform either verification of the digital certificate based on name information and shared key, or verification using the digital certificate, thus flexibly responding to the user's needs. [Explanation of symbols]

[0076] 1 System 10 Information Processing Devices 11 Control Unit 12 Storage section 13 Input section 14 Output section 15 Communications Department 20 Information Processing Devices 21 Control Unit 22 Memory section 23 Input section 24 Output section 25 Communications Department 30 Networks 100, 110, 120, 200, 300, 400 User Interfaces 101, 102, 103, 104 Menu Tabs 105 Settings icon 106, 107, 108, 109 Select button 111 Preview Information 121 Text Fields 122 Copy button 123 Shared Key Issuance Button 124 Copy button 125 Text fields 126 Copy button 201 Tab 1 202 Second Tab 203 Name Information Input Field 204 Shared Key Input Field 205 Verification button 301 button 401 Close button

Claims

1. An information processing device comprising a control unit, The control unit, Obtain attribute information associated with the digital certificate and identification information related to the said digital certificate, Based on the attribute information and the identification information, the digital certificate is verified. An information processing device that outputs the verification result of the aforementioned digital certificate.

2. An information processing apparatus according to claim 1, The control unit identifies the digital certificate based on the attribute information and the identification information, and performs verification of whether the digital certificate has been tampered with and whether it is in an expired state.

3. An information processing apparatus according to claim 1, The aforementioned digital certificate is an information processing device that is a certificate proving the results of a qualification examination.

4. An information processing apparatus according to claim 3, The control unit further provides an information processing device that outputs a portion of the contents of the digital certificate.

5. An information processing apparatus according to claim 4, An information processing device in which a portion of the contents of the aforementioned digital certificate includes the results information of the aforementioned qualification examination.

6. An information processing device according to claim 5, Information processing device that includes, for the results of the aforementioned qualification examination, at least one of the following: information on passing the prescribed level of the examination, score information, and proficiency information.

7. An information processing apparatus according to claim 1, The aforementioned digital certificate is a certificate that proves the results of multiple qualification examinations, The control unit further includes an information processing device that acquires verification range information and outputs the verification result related to the verification range information from the digital certificate.

8. An information processing apparatus according to claim 1, The control unit is an information processing device that obtains the attribute information and the identification information from a server related to the application website via API.

9. A system comprising the information processing device described in claim 8 and the server, The aforementioned server, The contents of the digital certificate are received from the information processing device. The contents of the aforementioned digital certificate are compared with the user's application details on the aforementioned application website. A system that accepts an application if, after cross-referencing, there are no deficiencies in the application details.

10. A verification method executed by an information processing device, A step of obtaining attribute information associated with a digital certificate and identification information related to the said digital certificate, A step of verifying whether the digital certificate has been tampered with based on the attribute information and the identification information, A step of outputting the verification result related to the digital certificate. Verification methods, including those mentioned above.

11. On the computer, Obtaining attribute information associated with a digital certificate and identification information related to the said digital certificate, Based on the attribute information and the identification information, verify whether the digital certificate has been tampered with, Output the verification results related to the aforementioned digital certificate. A program that executes something.

Images