Access control system, communication system, access control method, and program

Abstract

Provided is an access control system for providing access information to first and second communication devices that perform mutual authentication using ID-based encryption, the access control system being configured to: create an access secret key by generating a hash value of the logical sum of a master secret key and a character string based on the access information; create first authentication data by generating a hash value of a first authentication ID for the first communication device using a first hash function, and create second authentication data by generating a hash value of a second authentication ID for the second communication device using a second hash function; create access confirmation data constructed by a product of the access secret key and a generator of a subgroup of a group on a first elliptic curve and a product of the access secret key and a generator of a subgroup of a group on a second elliptic curve; and transmit the first authentication data and the access confirmation data to the first communication device and transmit the second authentication data and the access confirmation data to the second communication device.

Description

[Technical Field]

[0001] The present disclosure relates to an access control system, a communication system, an access control method, and a program. [Background technology]

[0002] In recent years, research has been conducted into ID-Based Encryption technology, a cryptographic technology that allows the use of an ID (character string) as a public key (Non-Patent Document 1). Because it can be implemented with less computational and communication overhead than cryptographic technology that uses PKI (Public Key Infrastructure), it is expected to be applied to systems that include IoT (Internet of Things) devices. [Prior art documents] [Non-patent literature]

[0003] [Non-Patent Document 1] Atsushi Fujioka, Fumitaka Hoshino et al., "id-eCK Secure id-Based Authenticated Key Exchange on Symmetric and Asymmetric Pairing", IEICE TRANSACTIONS on Fundamentals of Electronics, Communications and Computer Sciences Vol.E96-A No.6 pp.1139-1155 Summary of the Invention [Problem to be solved by the invention]

[0004] However, with conventional ID-based encryption technology, the ID used is made public as a public key, so if the access information contains information that you do not want third parties to see, such as an individual's name, it will also be made public, which is a problem.

[0005] The present invention has been made in view of the above points, and has as its object to enable access targets to access each other while keeping access information secret in ID-based encryption technology. [Means for solving the problem]

[0006] In order to achieve the above object, the invention of claim 1 is an access control system that provides access information of first and second communication devices that perform mutual authentication using ID-based encryption to the first and second communication devices, the system comprising: an access private key generation unit that generates an access private key by generating a hash value of a logical sum of a character string based on the access information and a master private key; and a first authentication data generation unit that generates a hash value of a first authentication ID for the first communication device using a first hash function, and a second authentication data generation unit that generates a hash value of a second authentication ID for the second communication device using a second hash function. an authentication data creation unit that creates second authentication data by generating a sh value; an access confirmation data creation unit that creates access confirmation data consisting of the product of the access private key and a generator of a subgroup in a group on a first elliptic curve and the product of the access private key and a generator of a subgroup in a group on a second elliptic curve; and a transmission unit that transmits the first authentication data and the access confirmation data to the first communication device and transmits the second authentication data and the access confirmation data to the second communication device. [Effects of the Invention]

[0007] As described above, according to the present invention, it is possible to provide an effect that the access targets, which are the first and second communication devices, can access each other while keeping the access information secret. [Brief explanation of the drawings]

[0008] [Figure 1] 1 is a schematic diagram of a communication system according to an embodiment. [Figure 2] 1 is a hardware configuration diagram of a communication data utilization system and an access control system according to an embodiment. [Figure 3] FIG. 2 is a hardware configuration diagram of a communication device according to an embodiment. [Figure 4] FIG. 2 is a functional configuration diagram of each system and each device of the communication system according to the embodiment. [Figure 5] 10 is a sequence diagram showing a process of providing an authentication private key from the communication data utilization system 3 to each of the communication devices 7a and 7b. FIG. [Figure 6] 10 is a flowchart showing a process for creating an authentication private key. [Figure 7] 10 is a sequence diagram showing a process in which the communication devices 7a and 7b perform mutual authentication and access permission confirmation by the access control system 5 providing the communication devices 7a and 7b with authentication data and access confirmation data. [Figure 8] FIG. 10 is a sequence diagram showing a process for creating authentication data and access confirmation data. [Figure 9] FIG. 1 is a diagram illustrating the protocol of an FSU. [Figure 10] FIG. 10 is a diagram for explaining each character in FIG. 9. [Figure 11] FIG. 10 is a diagram showing some modifications to the FSU protocol of FIG. 9. DETAILED DESCRIPTION OF THE INVENTION

[0009] [Overall structure] Fig. 1 is a schematic diagram of a communication system according to an embodiment of the present invention. As shown in Fig. 1, the communication system 1 of this embodiment is constructed by a communication data utilization system 3, an access control system 5, and communication devices 7a and 7b. Although Fig. 1 shows two communication devices 7a and 7b, three or more communication devices may be used.

[0010] Furthermore, the communication data utilization system 3, the access control system 5, and the communication devices 7a and 7b can communicate via a communication network 100 such as the Internet. The connection form of the communication network 100 may be either wireless or wired.

[0011] The communication data utilization system 3 is configured by one or more computers. Note that the "communication data utilization system" may also be referred to as a "communication data utilization server."

[0012] The communication data utilization system 3 uses the secret master key z b holds this master key z b and the publicly available authentication ID (identification / identifier) ​​of the communication device, and b1 etc.

[0013] The access control system 5 is configured by one or more computers. Note that the "access control system" may also be referred to as an "access control server."

[0014] The access control system 5 uses a secret master key z a and uses the hash function H0 to obtain the master key z a and a string S indicating access information a By generating a hash value s from the above, access information including personal names etc. cannot be recognized by third parties.

[0015] The communication devices 7a and 7b are IoT (Internet of Things) devices that perform mutual authentication using ID-based encryption, such as webcams. When accessing the communication devices 7a and 7b from a PC of a certain user (e.g., TARO), the communication devices 7a and 7b can be accessed by using access information (e.g., TARO Webcamera), and further, mutual authentication and access permission can be confirmed between the communication devices 7a and 7b. Hereinafter, the communication devices 7a and 7b will be collectively referred to as "communication devices 7."

[0016] [Hardware configuration] <Hardware configuration of each system> First, the hardware configuration of the communication data utilization system 3 and the access control system will be described with reference to Fig. 2. Fig. 2 is a hardware configuration diagram of the communication data utilization system 3 and the access control system 5.

[0017] 2, the communication data utilization system 3 includes a processor 301, a memory 302, an auxiliary storage device 303, a connection device 304, a communication device 305, and a drive device 306. The hardware components constituting the communication data utilization system 3 are interconnected via a bus 307.

[0018] The processor 301 serves as a control unit that controls the entire communication data utilization system 3, and includes various computing devices such as a CPU (Central Processing Unit). The processor 301 reads and executes various programs on the memory 302. The processor 301 may also include a GPGPU (General-purpose computing on graphics processing units).

[0019] The memory 302 has a main storage device such as a ROM (Read Only Memory), a RAM (Random Access Memory), etc. The processor 301 and the memory 302 form a so-called computer, and the processor 301 executes various programs read onto the memory 302, thereby enabling the computer to realize various functions.

[0020] The auxiliary storage device 303 stores various programs and various information used when the processor 301 executes the various programs.

[0021] The connection device 304 is a connection device that connects an external device (for example, a display device 310, an operation device 311) and the communication data utilization system 3.

[0022] The communication device 305 is a communication device for transmitting and receiving various types of information to and from other devices (including equipment, servers, and systems).

[0023] The drive device 306 is a device for loading a recording medium 330. The recording medium 330 here includes media that record information optically, electrically, or magnetically, such as a CD-ROM (Compact Disc Read-Only Memory), a flexible disk, a magneto-optical disk, etc. The recording medium 330 may also include semiconductor memory that records information electrically, such as a ROM (Read Only Memory), a flash memory, etc.

[0024] The various programs to be installed in the auxiliary storage device 303 are installed, for example, by setting the distributed recording medium 330 in the drive device 306 and reading the various programs recorded on the recording medium 330 by the drive device 306. Alternatively, the various programs to be installed in the auxiliary storage device 303 may be installed by being downloaded from a network via the communication device 305.

[0025] FIG. 2 also shows the hardware configuration of the access control system 5, but the only difference is that the reference numerals have changed from the 300s to the 500s, and the configurations are the same, so a description of these will be omitted.

[0026] <Hardware configuration of communication equipment> Next, the hardware configuration of the communication device 7 will be described with reference to Fig. 3. Fig. 3 is a diagram showing the hardware configuration of the communication device 7.

[0027] 3, the communication device 7 includes a processor 701, a memory 702, an auxiliary storage device 703, a communication device 704, and a GPS (Global Positioning System) device 705. The communication device 7 also includes an audio input device 706, an audio output device 707, a display device 708, an imaging device 709, a connection device 710, a near-field wireless communication device 711, and a detection device 712. The hardware components constituting the communication device 7 are connected to each other via a bus 720.

[0028] The processor 701 serves as a control unit that controls the entire communication device 7, and includes various arithmetic devices such as a CPU (Central Processing Unit). The processor 701 reads various programs into a memory 702 and executes them. The processor 701 may include a GPGPU (General-purpose computing on graphics processing units).

[0029] The memory 702 has a main storage device such as a ROM (Read Only Memory), a RAM (Random Access Memory), etc. The processor 701 and the memory 702 form a so-called computer, and the processor 701 executes various programs read onto the memory 702, causing the computer to realize various functions.

[0030] The auxiliary storage device 703 stores various programs and various information used when the processor 701 executes the various programs.

[0031] The communication device 704 is a communication device for transmitting and receiving various information to and from other devices (including equipment, servers, and systems). The GPS device 705 detects the position information of the communication device 7.

[0032] The audio input device 706 detects audio information such as the user's voice, surrounding sounds, etc. The audio output device 707 is a device that outputs various types of information received from other devices as audio, for example.

[0033] The display device 708 is, for example, a device that displays images of various information received from other devices.

[0034] The imaging device 709 captures images of the user and the surroundings and generates image information.

[0035] The connection device 710 is a connection device used when connecting various sensors, external memories, etc. to the communication device 7.

[0036] The short-range wireless communication device 711 is a wireless device for performing short-range wireless communication with another device located near the communication device 7.

[0037] The detection device 721 is a temperature sensor, a humidity sensor, an illuminance sensor, or the like.

[0038] It should be noted that the communication device 7 does not necessarily have to have the configuration shown in Fig. 3. For example, the communication device 7 does not necessarily have to have the display device 206.

[0039] [Functional configuration of communication system] Next, the functional configuration of the communication system will be described with reference to Fig. 4. Fig. 4 is a functional configuration diagram of each system and each device of the communication system according to the embodiment.

[0040] <Functional configuration of communication data utilization system 3> The communication data utilization system 3 has a transmitting / receiving unit 31 and an authentication private key generating unit 33. Each of these units is a function that the processor 301 causes the communication data utilization system 3 to realize using one or more programs installed in the communication data utilization system 3. Furthermore, the communication data utilization system 3 has a storage unit 30. The storage unit 30 is realized by a memory 302 or an auxiliary storage device 303. The storage unit 30 stores a secret master private key z b is stored.

[0041] The transmitting / receiving unit 31 transmits and receives data to and from other devices via the communication network 100 .

[0042] The authentication private key generation unit 33 uses the hash function H1 (H2) to generate the publicly available authentication ID of the communication device 7a (7b). b1 (ID b2 ) hash value Q b1 (Q b2 ) is generated. The authentication private key generation unit 33 also generates the master private key z b and authentication ID b1 (ID b2 ) hash value Q b1 (Q b2 ) to obtain the first authentication secret key D b1 (Second authentication private key D b2 ) is created. Note that the hash function H1 is an example of a first hash function, and the hash function H2 is an example of a second hash function.

[0043] <Functional configuration of access control system 5> The access control system 5 has a transmitting / receiving unit 51, a character string creating unit 52, an access private key creating unit 53, an authentication data creating unit 54, and an access confirmation data creating unit 55. Each of these units is a function that the processor 501 causes the access control system 5 to realize using one or more programs installed in the access control system 5. Furthermore, the access control system 5 has a storage unit 50. The storage unit 50 is realized by a memory 502 or an auxiliary storage device 503. The storage unit 50 stores a secret master private key z a is stored.

[0044] The transmitting / receiving unit 51 transmits and receives data to and from other devices via the communication network 100 .

[0045] The character string generating unit 52 generates a character string S based on the access information that may include personal information, etc. a Create a.

[0046] The access private key generation unit 53 generates the character string S using a predetermined hash function H0. a and the master private key z stored in the storage unit 50 a The secret access key s is created by generating a hash value of the logical sum of the above.

[0047] The authentication data generation unit 54 uses the first hash function H1 to generate the first authentication ID publicly available for the communication device 7a. b1 The first hash value Q of b1 By generating the first authentication data (s Q b1 ) is created. (s Q b1 ) is the secret key s and the hash value Q b1 Similarly, the authentication data generation unit 54 uses the second hash function H2 to generate the publicly available second authentication ID of the communication device 7b. b2 The hash value Q of b2 By generating the second authentication data (s Q b2 ) is created. (s Q b2 ) is the secret key s and the hash value Qb2 is the product of

[0048] The access verification data creation unit 55 creates access verification data (s·G1, s·G2) consisting of the product of the access private key s and the generator G1 of a subgroup in a group on a first elliptic curve, and the product of the access private key s and the generator G2 of a subgroup in a group on a second elliptic curve.

[0049] <Functional configuration of communication device 7a> The communication device 7a has a transmitting / receiving unit 71a, a private key generating unit 73a, a mutual authentication unit 77a, and an access permission checking unit 78a. Each of these units is a function that the processor 701 causes the communication device 7a to realize using one or more programs installed in the communication device 7a. The communication device 7a also has a storage unit 70a. The storage unit 70a is realized by a memory 702 or an auxiliary storage device 703. The storage unit 70a stores a first authentication ID, which is the public key of the communication device itself, and a second authentication ID. b1 The storage unit 70a also stores the first authentication ID. b1 The first authentication private key D obtained from the communication data utilization system 3 is a private key that is paired with the b1 is stored.

[0050] The transmitting / receiving unit 71a transmits and receives data to and from other devices via the communication network 100.

[0051] The private key generation unit 73a generates a first authentication private key D b1 and the first authentication data (s·Q b1 ) based on the first authentication ID, which is a public key. b1 The first private key C that is paired with b1 Create a.

[0052] The mutual authentication unit 77a receives the first authentication ID b1 , the first private key C b1 , and the access verification data (s·G1, s·G2), mutual authentication is performed with the communication device 7b.

[0053] The access permission confirmation unit 78a receives the first authentication ID b1 , the first private key C b1 The access permission is confirmed with the communication device 7b using the access confirmation data (s·G1, s·G2). In this embodiment, unlike the case of Non-Patent Document 1, the mutual authentication unit 77a and the access permission confirmation unit 78a execute the processes at the same time.

[0054] <Functional configuration of communication device 7b> The communication device 7b has a transmitting / receiving unit 71b, a private key generating unit 73b, a mutual authentication unit 77b, and an access permission checking unit 78b. Each of these units is a function that the processor 701 causes the communication device 7b to realize using one or more programs installed in the communication device 7b. Furthermore, the communication device 7b has a storage unit 70b. The storage unit 70b is realized by a memory 702 or an auxiliary storage device 703. The storage unit 70b stores a second authentication ID, which is the public key of the communication device itself, and a second authentication ID. b2 The storage unit 70b also stores a second authentication ID. b2 The second authentication private key D is a private key paired with the second authentication private key D obtained from the communication data utilization system 3. b2 is stored.

[0055] The transmitting / receiving unit 71b transmits and receives data to and from other devices via the communication network 100.

[0056] The private key generation unit 73b generates a second authentication private key D b2 and second authentication data (s·Q b2 ) based on the second authentication ID, which is a public key. b2 A second private key C that is paired with b2 Create a.

[0057] The mutual authentication unit 77b receives the second authentication ID b2 , a second private key C b2 Then, mutual authentication is performed with the communication device 7a using the access verification data (s·G1, s·G2).

[0058] The access permission confirmation unit 78b receives the second authentication ID b2, a second private key C b2 , and the access confirmation data (s·G1, s·G2) are used to confirm access permission with the communication device 7a. In this embodiment, unlike the case of Non-Patent Document 1, the mutual authentication unit 77b and the access permission confirmation unit 78b execute processing at the same time.

[0059] [Processing or Operation of the Embodiment] Next, the processing or operation of the communication system 1 will be described with reference to FIGS.

[0060] <Providing the authentication private key> First, the process in which the communication data utilization system 3 provides each communication device 7a, 7b with an authentication private key will be described with reference to Figures 5 and 6. Figure 5 is a sequence diagram showing the process in which the communication data utilization system 3 provides each communication device 7a, 7b with an authentication private key. Figure 6 is a flowchart showing the process of creating an authentication private key.

[0061] First, as shown in Fig. 5, the communication data utilization system 3 creates a private authentication key for each communication device 7. Here, the process of creating a private authentication key will be described in detail with reference to Fig. 6.

[0062] 5, the communication data utilization system 3 creates an authentication private key for each communication device 7 (S11). Here, the process of creating the authentication private key will be described in detail with reference to FIG.

[0063] As shown in FIG. 6, the authentication private key generation unit 33 generates the first authentication ID of the communication device 7a by using the first hash function H1. b1 The first hash value Q of b1 Then, the authentication private key generation unit 33 generates the master private key z stored in the storage unit 30 (S111). b and the first hash value Q b1 The first authentication secret key D is obtained by multiplying b1 is created (S112).

[0064] Next, the authentication private key generation unit 33 uses the second hash function H2 to generate the publicly available second authentication ID of the communication device 7b. b2 The second hash value Q of b2 Then, the authentication private key generation unit 33 generates the master private key z stored in the storage unit 30 (S113). b and the second hash value Q b2 The second authentication secret key D is obtained by multiplying b2 is created (S114).

[0065] Next, returning to FIG. 5, the transmitting / receiving unit 31 transmits the first authentication private key D b1 (=z b Q b1 ) to the communication device 7b (S12). Similarly, the transmitting / receiving unit 31 transmits the second authentication private key D b1 (=z b Q b2 ) (S13). As a result, the transmitting / receiving unit 71a of the communication device 7a transmits the first authentication private key D b1 The transmitting / receiving unit 71b of the communication device 7b receives the second authentication private key D b2 is received and stored in the storage unit 70b (S15).

[0066] As a result of the above, each communication device 7 can obtain its own authentication private key.

[0067] <Mutual authentication and access permission confirmation> Next, a process in which the communication devices 7a and 7b perform mutual authentication and access permission confirmation as a result of the access control system 5 providing the communication devices 7a and 7b with authentication data and access confirmation data will be described with reference to Figures 7 to 11. Figure 7 is a sequence diagram showing a process in which the communication devices 7a and 7b perform mutual authentication and access permission confirmation as a result of the access control system 5 providing the communication devices 7a and 7b with authentication data and access confirmation data. Figure 8 is a sequence diagram showing a process for creating authentication data and access confirmation data.

[0068] First, the access control system 5 creates authentication data and access confirmation data (S21). Here, the process of creating authentication data and access confirmation data will be described in detail with reference to FIG.

[0069] As shown in FIG. 8, the character string generating unit 52 generates a character string S a (S211). If the access information is already expressed as a character string, such as "TARO Webcamera," the process (S211) may be omitted. In this state, personal names and the like can be recognized by third parties.

[0070] Next, the access private key generation unit 53 generates the character string S using a predetermined hash function H0. a and the master private key z stored in the storage unit 50 a The access secret key s is generated by generating a hash value of the logical sum of the above (S212).

[0071] Next, the authentication data generation unit 54 uses the first hash function H1 to generate the first authentication ID of the communication device 7a that is publicly available. b1 The first hash value Q of b1 By generating the first authentication data (s Q b1 Similarly, the authentication data creation unit 54 uses the second hash function H2 to create the second authentication ID 7b that is publicly available for the communication device 7b (S213). b2 The hash value Q of b2 By generating the second authentication data (s Q b2 ) is created (S214).

[0072] Next, the access verification data creation unit 55 creates access verification data (s·G1, s·G2) consisting of the product of the access private key s and the generator G1 of the subgroup in the group on the first elliptic curve, and the product of the access private key s and the generator G2 of the subgroup in the group on the second elliptic curve (S215).

[0073] Next, returning to FIG. 7, the transmitting / receiving unit 51 transmits the first authentication data (s·Q b1 ), and the access confirmation data (s·G1, s·G2) (S22). As a result, the transmitting / receiving unit 71a of the communication device 7a transmits the first authentication data (s·Q b1 ), and access confirmation data (s·G1, s·G2). Similarly, the transmitting / receiving unit 51 transmits the second authentication data (s·Q b2 ), and the access confirmation data (s·G1, s·G2) (S23). As a result, the transceiver 71b of the communication device 7b transmits the second authentication data (s·Q b2 ), and access confirmation data (s·G1, s·G2).

[0074] Next, in the communication device 7a, the private key generation unit 73a generates the first authentication private key D b1 and the first authentication data (s·Q b1 ) based on the first authentication ID, which is a public key. b1 The first private key C that is paired with b1 On the other hand, in the communication device 7b, the private key generation unit 73b generates a second authentication private key D b2 and second authentication data (s·Q b2 ) based on the second authentication ID, which is a public key. b2 A second private key C that is paired with b2 (S25).

[0075] Then, the mutual authentication unit 77a of the communication device 7a receives the first authentication ID1, the first secret key C, and the b1 , and the access confirmation data (s·G1, s·G2), the mutual authentication unit 77b of the communication device 7b obtains the second authentication ID2, the second secret key C b2 , and access verification data (s·G1, s·G2), a process is performed in which a part of the protocol of mutual authentication (FSU) using an existing ID-based encryption technique is modified (S26-1, 2). Furthermore, in accordance with the modification of the part of the FSU protocol, the access permission verification unit 78a modifies the first authentication ID1, the first secret key C, and the access verification data (s·G1, s·G2) at the same time as the mutual authentication. b1, the access permission confirmation unit 78b uses the first access confirmation data (s·G1, s·G2) to obtain the second authentication ID2, the second secret key C b2 Then, the second access confirmation data (s·G1, s·G2) is used to confirm whether the access is permitted.

[0076] Mutual authentication (FSU) using ID-based encryption technology is disclosed in Non-Patent Document 1. Fig. 9 is a diagram showing the FSU protocol disclosed in Non-Patent Document 1. Fig. 10 is a diagram explaining each character in Fig. 9. In Fig. 9, ID A is the first authentication ID of the communication device 7a b1 Equivalent to ID B is the second authentication ID of the communication device 7b b2 is equivalent to

[0077] FIG. 11 is a diagram showing a partial change to the FSU protocol in FIG. 9. The left side shows the mutual authentication (FSU) protocol using ID-based encryption technology shown in Non-Patent Document 1, and the right side shows a partial change to the FSU protocol. In this way, in the modified protocol, the string S a It contains the secret access key s that has been made secret.

[0078] As described above, the access control system 5 uses the character string S of the access information a To conceal the string S a A private access key s is created in which the above is embedded (see S212), and later, the communication devices 7a and 7b perform processing by modifying part of the FSU protocol shown in FIG. 11, thereby simultaneously confirming access permission during mutual authentication.

[0079] [Major Effects of the Embodiments] As described above, according to this embodiment, it is possible to achieve the effect that the access targets (communication devices 7a, 7b) can access each other while keeping the access information secret. 〔supplement〕 The present invention is not limited to the above-described embodiment, and may have the following configurations or processes (operations).

[0080] The communication data utilization system 3, the access control system 5, and the communication device 7 can also be realized using a computer and a program, but this program can also be recorded on a (non-temporary) recording medium or provided via a network such as the Internet. [Explanation of symbols]

[0081] 1. Communication Systems 3. Communication data utilization system 5. Access control systems 7a Communication device (an example of the first communication device) 7b Communication equipment (an example of a second communication equipment) 51 Transmitting and receiving unit (an example of a transmitting unit) 52 String Creation Section 53 Access private key creation unit 54 Authentication Data Creation Department 55 Access Verification Data Creation Department 71a Transmitter / Receiver 71b Transmitter / Receiver 73a Private key generation unit (an example of a first private key generation unit) 73b Private key generation unit (an example of a second private key generation unit) 77a Mutual authentication unit (an example of a first mutual authentication unit) 77b Mutual authentication unit (an example of a second mutual authentication unit) 78a Access permission confirmation unit (an example of a first access permission confirmation unit) 78b Access permission confirmation unit (an example of a second access permission confirmation unit) 100 Communication Network

Claims

1. 1. An access control system that provides access information of a first and a second communication device to a first and a second communication device that perform mutual authentication using ID-based encryption, the system comprising: an access private key generation unit that generates an access private key by generating a hash value of the logical sum of a character string based on the access information and a master private key; an authentication data generating unit that generates first authentication data by generating a hash value of a first authentication ID for the first communication device using a first hash function, and that generates second authentication data by generating a hash value of a second authentication ID for the second communication device using a second hash function; an access verification data creation unit that creates access verification data consisting of a product of the access private key and a generator of a subgroup in a group on a first elliptic curve, and a product of the access private key and a generator of a subgroup in a group on a second elliptic curve; a transmitting unit that transmits the first authentication data and the access confirmation data to the first communication device and transmits the second authentication data and the access confirmation data to the second communication device; An access control system having:

2. 2. The access control system according to claim 1, An access control system having a character string creation unit that creates the character string based on the access information.

3. The access control system according to claim 1 or 2; the first communication device; the second communication device; A communication system having:

4. The first communication device a first private key generation unit that generates a first private key paired with a first authentication ID, which is a public key, based on a first authentication private key for the first communication device and the first authentication data; a first mutual authentication unit that performs mutual authentication with the second communication device using the first authentication ID, the first private key, and the access confirmation data; a first access permission confirmation unit that confirms access permission with the second communication device using the first authentication ID, the first private key, and the access confirmation data, The second communication device includes: a second private key generation unit that generates a second private key paired with a second authentication ID that is a public key, based on a second authentication private key for the second communication device and the second authentication data; a second mutual authentication unit that performs mutual authentication with the first communication device using the second authentication ID, the second private key, and the access confirmation data; a second access permission confirmation unit that confirms access permission with the first communication device by using the second authentication ID, the second private key, and the access confirmation data; The communication system according to claim 3 .

5. 5. The communication system according to claim 4, wherein the first mutual authentication unit and the first access permission confirmation unit execute processes at the same timing, and the second mutual authentication unit and the second access permission confirmation unit execute processes at the same timing.

6. 1. An access control method executed by an access control system that provides access information of first and second communication devices that perform mutual authentication using ID-based encryption, the method comprising: The access control system comprises: A private key for access is created by generating a hash value of the logical sum of the string of access information and the master private key. generating a hash value of a first authentication ID for the first communication device using a first hash function to create first authentication data, and generating a hash value of a second authentication ID for the second communication device using a second hash function to create second authentication data; creating access verification data consisting of a product of the access private key and a generator of a subgroup in a group on a first elliptic curve and a product of the access private key and a generator of a subgroup in a group on a second elliptic curve; transmitting the first authentication data and the access confirmation data to the first communication device, and transmitting the second authentication data and the access confirmation data to the second communication device; Access control methods.

7. A program causing a computer to execute the method according to claim 6.

Images