JP7801951B2 - User authentication system, user authentication service system, user authentication method, and computer program - Google Patents

Description

The present invention relates to a user authentication system, a user authentication service system, a user authentication method, and a computer program.

Patent Document 1 describes an entrance/exit management system that uses My Number cards to authenticate users entering a facility. The entrance/exit management system described in Patent Document 1 requires users to enter a four-digit PIN for a user authentication electronic certificate when they present their My Number card, and then verifies the validity of the user authentication electronic certificate read from the My Number card using a server (public personal authentication service system) run by the Japan-LIS (Japan Agency for Local Authority Information Systems).

Japanese Patent Application Laid-Open No. 2021-144757

In recent years, the use of My Number cards to authenticate users has become widespread in a variety of service provision systems. However, with the technology described in Patent Document 1 above, each service provision system uses the public personal authentication service system itself to verify the validity of the user's electronic certificate, which poses an issue of placing a heavy load on the public personal authentication service system.

The present invention was made in consideration of these circumstances, and its purpose is to reduce the load on the public personal authentication service system when the systems providing multiple services each use My Number cards to authenticate users.

One aspect of the present invention is a system including: a communication unit provided for each provider system corresponding to at least two or more services selected from a two-factor authentication service, an authenticated printing service, an entry/exit management service, and a time attendance management service; a management database that stores, in association with each other, user identification information for at least two or more services selected from a two-factor authentication service, an authenticated printing service, an entry/exit management service, and a time attendance management service; a serial number of a user-certification electronic certificate read from an Individual Number Card; and validity information indicating whether the user-certification electronic certificate is valid or invalid; and a system that receives, from an Individual Number Card registration terminal, Individual Number Card registration application information including the user identification information for each service and the serial number of the user-certification electronic certificate read from the Individual Number Card, and uses a public personal authentication service system to confirm the validity or invalidity of the serial number of the user-certification electronic certificate included in the received Individual Number Card registration application information; and stores, in association with each other, validity information indicating the validity of the user-certification electronic certificate, the serial number of the user-certification electronic certificate in the management database. a user authentication electronic certificate revocation confirmation unit that uses a public personal authentication service system to confirm the validity or revocation of the serial number of the user authentication electronic certificate stored in the management database and changes the validity information stored in the management database in association with the serial number of the user authentication electronic certificate that is found to be revoked to validity information indicating revocation; and a user authentication unit that obtains from the management database the validity information associated with the serial number of the user authentication electronic certificate read from the My Number card when using one of the two-factor authentication service, authenticated printing service, entry/exit management service, and time attendance management service, and the user identification information for the service, which is included in user authentication application information received from the service providing system by the communication unit corresponding to the service providing system, and returns a user authentication result to the service providing system based on the obtained validity information and the user identification information for the service via the communication unit corresponding to the service providing system.

In one aspect of the present invention, in the above-mentioned user authentication system, the user-certificate electronic certificate revocation confirmation unit confirms the validity or revocation of the serial numbers of all user-certificates stored in the management database and updates the validity information daily and by the start time of all services, including the two-factor authentication service, authenticated printing service, entry/exit management service, and time attendance management service.

In one aspect of the present invention, in the above-mentioned user authentication system, the user-certificate electronic certificate revocation confirmation unit obtains a user-certificate electronic certificate revocation list from a public personal authentication service system on a daily basis, and confirms the validity or revocation of the serial numbers of the user-certificates stored in the management database based on the obtained user-certificate electronic certificate revocation list.

In one aspect of the present invention, in the above-mentioned user authentication system, the management database further associates and stores a revocation check completion flag that is reset daily, and the user-certificate electronic certificate revocation confirmation unit confirms the validity or revocation of the serial number of the user-certificate electronic certificate read from the My Number card when using the service included in the user authentication application information received from the service providing system of one of the two-factor authentication service, authenticated printing service, entry/exit management service, or time attendance management service by the communication unit corresponding to that service providing system, for the serial number of the user-certificate electronic certificate for which the revocation check completion flag has not been performed, and updates the validity information, and sets the revocation check completion flag associated with the serial number of the user-certificate electronic certificate to "confirmed."

In one aspect of the present invention, in the above-mentioned user authentication system, the user-certificate electronic certificate revocation confirmation unit transmits the serial number of the user-certificate electronic certificate to the public personal authentication service system and receives the result of an inquiry regarding the revocation status of the user-certificate electronic certificate from the public personal authentication service system.

One aspect of the present invention is a user authentication service system that includes any of the above user authentication systems and a provision system that supports at least two or more services from among a two-factor authentication service, an authenticated printing service, an entry/exit management service, and a time and attendance management service.

One aspect of the present invention is a user authentication method executed by a user authentication system that includes a communication unit provided for each provider system corresponding to at least two or more services selected from a two-factor authentication service, an authenticated printing service, an entry/exit management service, and a time attendance management service, and a management database that stores, in association with each other, user identification information for at least two or more services selected from a two-factor authentication service, an authenticated printing service, an entry/exit management service, and a time attendance management service, the serial number of a user-certification electronic certificate read from a My Number card, and validity information indicating the validity or revocation of the user-certification electronic certificate. The method includes receiving, from a My Number card registration terminal, My Number card registration application information including the user identification information for each service and the serial number of the user-certification electronic certificate read from the My Number card, using a public personal authentication service system to confirm the validity or revocation of the serial number of the user-certification electronic certificate included in the received My Number card registration application information, and registering the My Number card registration application information including the serial number of the user-certification electronic certificate that is found to be valid as a result of the confirmation, in association with the validity information indicating the validity. a user authentication electronic certificate revocation confirmation step of using a public personal authentication service system to confirm whether the serial number of the user authentication electronic certificate stored in the management database is valid or invalid, and changing the validity information stored in the management database in association with the serial number of the user authentication electronic certificate for which the confirmation result is invalid to validity information indicating invalidity; and a user authentication step of obtaining from the management database, from a system providing one of a two-factor authentication service, an authenticated printing service, an entry/exit management service, or a time attendance management service, validity information associated with the serial number of the user authentication electronic certificate read from the My Number card when using the service and user identification information for the service, which is included in user authentication application information received by the communication unit corresponding to the system providing the service, and returning a user authentication result to the system providing the service via the communication unit corresponding to the system providing the service, based on the obtained validity information and user identification information for the service.

One aspect of the present invention is a user authentication system comprising a computer that receives, from a My Number card registration terminal, My Number card registration application information including the user identification information for each of the at least two or more services among the two-factor authentication service, the authenticated printing service, the entry/exit management service, and the time and attendance management service, the serial number of a user-certification electronic certificate read from a My Number card, and validity information indicating the validity or revocation of the user-certification electronic certificate, the computer comprising a communication unit provided for each provision system corresponding to at least two or more services among the two-factor authentication service, the authenticated printing service, the entry/exit management service, and the time and attendance management service, the serial number of a user-certification electronic certificate read from a My Number card, and validity information indicating the validity or revocation of the user-certification electronic certificate; a user-certification electronic certificate revocation confirmation step of using a public personal authentication service system to confirm whether the serial number of the user-certification electronic certificate stored in the management database is valid or invalid, and changing the validity information stored in the management database in association with the serial number of the user-certification electronic certificate that is invalid as validity information; and a user authentication step of obtaining from the management database, from a service providing system of one of a two-factor authentication service, an authenticated printing service, an entry/exit management service, or a time attendance management service, validity information associated with the serial number of the user-certification electronic certificate read from the My Number card when using the service and user identification information for the service, which are included in user authentication application information received by the communication unit corresponding to the service providing system, and returning a user authentication result to the service providing system via the communication unit corresponding to the service providing system based on the obtained validity information and user identification information for the service.

The present invention has the effect of reducing the load on the public personal authentication service system when each of the systems providing multiple services uses My Number cards to authenticate users.

1 is a block diagram showing an example of the configuration of a user authentication system according to a first embodiment; FIG. 2 is a diagram illustrating an example of the configuration of a management database according to the first embodiment. 4 is a flowchart illustrating an example of a procedure of a user authentication method according to the first embodiment. 4 is a flowchart illustrating an example of a procedure of a user authentication method according to the first embodiment. 4 is a flowchart illustrating an example of a procedure of a user authentication method according to the first embodiment. FIG. 10 is a block diagram showing an example of the configuration of a user authentication system according to a second embodiment. FIG. 11 is a diagram illustrating an example of the configuration of a management database according to the second embodiment. 10 is a flowchart illustrating an example of a procedure of a user authentication method according to the second embodiment.

Embodiments of the present invention will be described below with reference to the drawings.

[First embodiment]
Fig. 1 is a block diagram showing an example of the configuration of a user authentication system according to a first embodiment. The user authentication system 10 shown in Fig. 1 provides a user authentication service that authenticates users using My Number cards to provision systems 40 (40-1, 40-2, 40-3, 40-4, ...), each of which provides a variety of services. Fig. 1 shows, as examples of the provision systems 40, a two-factor authentication service provision system 40-1 that provides two-factor authentication services, an authentication printing service provision system 40-2 that provides authenticated printing services, an entry/exit management service provision system 40-3 that provides entry/exit management services, and a time attendance management service provision system 40-4 that provides time attendance management services.

A two-factor authentication service is a service that authenticates a user using two factors. For example, a two-factor authentication service authenticates a user using a first factor, which is a combination of user identification information and a password, and a second factor, which is an Individual Number card.

An authenticated printing service is a service that authenticates users when printing. For example, an authenticated printing service would use a My Number card to authenticate users when printing.

An entry/exit management service is a service that authenticates users when they enter and exit an office or other room. For example, an entry/exit management service could use a My Number card to authenticate users when they enter and exit an office or other room.

The attendance management service is a service that authenticates users when they clock in and out of the workplace. For example, an attendance management service could use a My Number card to authenticate users when they clock in and out of the workplace.

When no distinction is made between the service provision systems 40-1, 40-2, 40-3, 40-4, etc., they will simply be referred to as "provision systems 40."

The provision systems 40 to which the user authentication system 10 provides user authentication services can be added or removed.

The service users of the provision systems 40, such as the two-factor authentication service provision system 40-1, authenticated printing service provision system 40-2, entry/exit management service provision system 40-3, and attendance management service provision system 40-4 illustrated in FIG. 1, are, for example, local government employees. The user authentication system 10 may provide user authentication services to only one local government's provision system 40, or may provide user authentication services to multiple local government's provision systems 40.

The following describes an example in which one or more local government provision systems 40 are the target of user authentication services provided by the user authentication system 10. Also, the following describes an example in which the users of the provision system 40's services are local government employees.

The user authentication system 10 sends and receives data via a communication line to and from a My Number card registration terminal 30 installed at the local government. The My Number card registration terminal 30 is a terminal used by local government employees (hereinafter simply referred to as employees) to register their own My Number cards in the user authentication system 10. The My Number card registration terminal 30 is equipped with a card reader that can read information from My Number cards.

The user authentication system 10 sends and receives data between the provision systems 40 via the communication lines for each provision system 40.

The user authentication system 10 sends and receives data via communication lines with the public personal authentication service system 50. The public personal authentication service system 50 is a system operated by J-LIS (Japan Agency for Local Authority Information Systems).

[User authentication system details]
The user authentication system 10 comprises a communication unit 11 (11-1, 11-2, 11-3, 11-4, ...), a management database 12, a My Number card registration unit 13, a user authentication electronic certificate revocation confirmation unit 14, and a user authentication unit 15.

The functions of the user authentication system 10 are realized by the user authentication system 10 being equipped with computer hardware such as a CPU (Central Processing Unit) and memory, and the CPU executing computer programs stored in the memory. The user authentication system 10 may be configured using a general-purpose computer device, or may be configured as a dedicated hardware device. For example, the user authentication system 10 may be configured using a server computer connected to a communications network such as the Internet. The functions of the user authentication system 10 may also be realized by cloud computing. The user authentication system 10 may also be realized by a single computer, or by distributing the functions of the user authentication system 10 across multiple computers.

The communication units 11 (11-1, 11-2, 11-3, 11-4, ...) are provided corresponding to each of the provision systems 40 (40-1, 40-2, 40-3, 40-4, ...). The communication units 11 send and receive data to and from their corresponding provision systems 40 via a communication line between them. The communication unit 11-1 sends and receives data to and from the two-factor authentication service providing system 40-1 via a communication line between them. The communication unit 11-2 sends and receives data to and from the authentication printing service providing system 40-2 via a communication line between them. The communication unit 11-3 sends and receives data to and from the entry/exit management service providing system 40-3 via a communication line between them. The communication unit 11-4 sends and receives data to and from the attendance management service providing system 40-4 via a communication line between the system and the attendance management service providing system 40-4.

The management database 12 stores the registration information of the My Number cards of employees registered by the My Number card registration terminal 30.

Figure 2 is a diagram showing an example of the configuration of the management database 12 according to this embodiment. In Figure 2, the management database 12 associates and stores, for each My Number card, the management number, the serial number of the user authentication electronic certificate, validity information, expiration date, and user identification information for each service of the provision system 40.

The management number is assigned when the My Number Card is registered. The serial number of the user-certified electronic certificate is read from the My Number Card when the My Number Card is registered. The validity information is information indicating whether the user-certified electronic certificate is valid or expired. The expiration date is the expiration date of the user-certified electronic certificate, and is read from the My Number Card when the My Number Card is registered.

Figure 2 shows examples of user identification information for each service provided by the provision system 40, such as the account name used in the two-factor authentication service, the staff number used in common in the entry/exit management service and the time attendance management service, and the extended identifier (extended ID) used in the authenticated printing service.

The My Number card registration unit 13 executes My Number card registration processing to register the My Number cards of employees in the management database 12. The My Number card registration unit 13 sends and receives data via a communication line with the My Number card registration terminal 30 installed in the local government. The My Number card registration unit 13 also sends and receives data via a communication line with the public personal authentication service system 50.

The My Number Card registration process according to this embodiment will now be described. The My Number Card registration unit 13 accepts My Number Card registration application information from the My Number Card registration terminal 30. The My Number Card registration application information is information for applying to register a My Number Card. The My Number Card registration application information includes user identification information for each service of the provision system 40 for the employee registering the My Number Card, and the serial number of the user authentication electronic certificate read by the My Number Card registration terminal 30 from the employee's My Number Card. The My Number Card registration application information may also include information including the expiration date of the user authentication electronic certificate.

User identification information for each service provided by the provision system 40 includes the account name used in the two-factor authentication service, the staff number used in common in the entry/exit management service and the time attendance management service, and the extended ID used in the authenticated printing service.

The user authentication electronic certificate attached to the My Number Card does not register the four basic pieces of information (name, address, gender, and date of birth), but does record the serial number, expiration date, etc. The serial number and expiration date of the user authentication electronic certificate are read from the My Number Card by the My Number Card registration terminal 30 when the employee holds their My Number Card over the card reader of the My Number Card registration terminal 30 and enters the PIN (4 digits) for the user authentication electronic certificate into the My Number Card registration terminal 30.

The My Number Card registration unit 13 uses the public personal authentication service system 50 to confirm the validity or revocation of the serial number of the user authentication electronic certificate included in the My Number Card registration application information received from the My Number Card registration terminal 30 (confirming the validity of the user authentication electronic certificate).

The My Number Card registration unit 13 uses the OCSP (Online Certificate Status Protocol) responder query method to confirm the validity of the user-certificate electronic certificate. In the OCSP responder query method, the My Number Card registration unit 13 sends the serial number of the user-certificate electronic certificate to the OCSP responder of the public personal authentication service system 50, and receives the query result regarding the revocation status of the user-certificate electronic certificate from the public personal authentication service system 50.

The My Number Card registration unit 13 registers My Number Card registration application information, including the serial number of a user-certificate electronic certificate for which the result of the validity check is valid, in the management database 12 in association with validity information indicating validity. My Number Card registration application information, including the serial number of a user-certificate electronic certificate for which the result of the validity check is invalid, is not registered in the management database 12.

The user-certificate electronic certificate revocation confirmation unit 14 executes a user-certificate electronic certificate revocation confirmation process to confirm the validity or revocation of the serial number of the user-certificate electronic certificate stored in the management database 12. The user-certificate electronic certificate revocation confirmation unit 14 sends and receives data to and from the public personal authentication service system 50 via a communication line.

The following describes the process for confirming the revocation of a user-certificate electronic certificate according to this embodiment. The user-certificate electronic certificate revocation confirmation unit 14 uses the public personal authentication service system 50 to confirm the validity or revocation of the serial number of the user-certificate electronic certificate stored in the management database 12 (confirming the validity of the user-certificate electronic certificate).

In this embodiment, the user-certificate electronic certificate revocation checking unit 14 uses a revocation record providing method to check the validity of the user-certificate electronic certificate. In this revocation record providing method, the user-certificate electronic certificate revocation checking unit 14 requests a user-certificate electronic certificate revocation list (CRL: Certificate Revocation List) from the public personal authentication service system 50 on a daily basis, and receives the user-certificate electronic certificate revocation list from the public personal authentication service system 50 on a daily basis. The user-certificate electronic certificate revocation list is created daily by the public personal authentication service system 50 based on the latest revocation information of the user-certificate electronic certificate.

The user-certificate electronic certificate revocation confirmation unit 14 references the user-certificate electronic certificate revocation list received from the public personal authentication service system 50 and confirms whether the serial numbers of all user-certificate electronic certificates stored in the management database 12 are valid or revoked. The user-certificate electronic certificate revocation confirmation unit 14 changes the validity information stored in the management database 12 in association with the serial number of a user-certificate electronic certificate that has been revoked as a result of the confirmation to validity information indicating revocation.

The user-certificate electronic certificate revocation confirmation unit 14 completes daily confirmation of the validity or revocation of the serial numbers of all user-certificate electronic certificates stored in the management database 12 and updates the validity information by the time all services in the provision system 40 begin to be provided. For example, batch processing may be used to complete the process from requesting and receiving the user-certificate electronic certificate revocation list using the revocation record provision method to confirming the validity or revocation of the serial numbers of all user-certificate electronic certificates stored in the management database 12 and updating the validity information by the time all services in the provision system 40 begin to be provided.

The user authentication unit 15 executes user authentication processing to authenticate users who use the services of the provision systems 40. The user authentication unit 15 sends and receives data to and from each provision system 40 via the communication units 11 (11-1, 11-2, 11-3, 11-4, ...) provided corresponding to each provision system 40 (40-1, 40-2, 40-3, 40-4, ...).

The user authentication process according to this embodiment will now be described. The user authentication unit 15 receives user authentication application information from each provision system 40 via the communication unit 11 corresponding to each provision system 40 during the period from the provision start time to the provision end time on the day on which the service of each provision system 40 is provided.

The user authentication unit 15 receives user authentication application information from the two-factor authentication service providing system 40-1 via the communication unit 11-1 during the period from the start time to the end time of the two-factor authentication service on the day the service is provided. The user authentication unit 15 receives user authentication application information from the authenticated printing service providing system 40-2 via the communication unit 11-2 during the period from the start time to the end time of the authenticated printing service on the day the service is provided. The user authentication unit 15 receives user authentication application information from the entry/exit management service providing system 40-3 via the communication unit 11-3 during the period from the start time to the end time of the access management service on the day the service is provided. The user authentication unit 15 receives user authentication application information from the entry/exit management service providing system 40-4 via the communication unit 11-4 during the period from the start time to the end time of the access management service on the day the service is provided.

The user authentication application information is information used to apply for authentication of users (staff members) of the services provided by the provision system 40. The user authentication application information includes the serial number of the user authentication electronic certificate read from the staff member's My Number card when the staff member uses the services provided by the provision system 40.

The user authentication application information of the two-factor authentication service providing system 40-1 is information that includes the serial number of the user authentication electronic certificate read from the employee's My Number card when the employee uses the two-factor authentication service. The terminal of the two-factor authentication service providing system 40-1 is equipped with a card reader that can read information from the My Number card. The two-factor authentication service providing system 40-1 obtains the serial number of the user authentication electronic certificate read by the card reader from the My Number card held over the card reader of the terminal.

The user authentication application information of the authentication printing service providing system 40-2 includes the serial number of the user authentication electronic certificate read from the employee's My Number card when the employee uses the authentication printing service. The printing machine of the authentication printing service providing system 40-2 is equipped with a card reader that can read information from My Number cards. The authentication printing service providing system 40-2 obtains the serial number of the user authentication electronic certificate read by the card reader from the My Number card held over the card reader of the printing machine.

The user authentication application information of the entry/exit management service providing system 40-3 includes the serial number of the user authentication electronic certificate read from the employee's My Number card when the employee uses the entry/exit management service. The terminal of the entry/exit management service providing system 40-3 is equipped with a card reader capable of reading information from My Number cards. The entry/exit management service providing system 40-3 obtains the serial number of the user authentication electronic certificate read by the card reader from the My Number card held over the card reader of the terminal.

The user authentication application information of the attendance management service providing system 40-4 includes the serial number of the user authentication electronic certificate read from the employee's My Number card when the employee uses the attendance management service. The terminal of the attendance management service providing system 40-4 is equipped with a card reader that can read information from My Number cards. The attendance management service providing system 40-4 obtains the serial number of the user authentication electronic certificate read by the card reader from the My Number card held over the card reader of the terminal.

The user authentication unit 15 obtains from the management database 12 the validation information associated with the serial number of the user authentication electronic certificate included in the user authentication application information received from the provision system 40 via the communication unit 11 corresponding to that provision system 40, and the user identification information for the service of that provision system 40.

The serial number of the user authentication electronic certificate included in the user authentication application information is the serial number of the user authentication electronic certificate read from the My Number card when using the services of the provider system 40 that sent the user authentication application information.

If the service provided by the providing system 40 that sent the user authentication application information is a two-factor authentication service, the user identification information obtained from the management database 12 is the account name used in the two-factor authentication service. If the service provided by the providing system 40 that sent the user authentication application information is an authenticated printing service, the user identification information obtained from the management database 12 is the extended ID used in the authenticated printing service. If the service provided by the providing system 40 that sent the user authentication application information is an entry/exit management service, the user identification information obtained from the management database 12 is the employee number used in the entry/exit management service. If the service provided by the providing system 40 that sent the user authentication application information is a time attendance management service, the user identification information obtained from the management database 12 is the employee number used in the time attendance management service.

The validity information obtained from the management database 12 is checked daily by the user-certificate electronic certificate revocation checking unit 14 to see if the serial number of the user-certificate electronic certificate is valid or revoked, and the validity information is updated by the time the service provision of the provision system 40 that sent the user authentication application information begins. Therefore, the validity information obtained by the user authentication unit 15 from the management database 12 is the latest information.

The user authentication unit 15 responds to the provision system 40 that sent the user authentication application information with the user authentication result based on the validity information and user identification information obtained from the management database 12, via the communication unit 11 corresponding to that provision system 40. If the validity information indicates validity, the user authentication unit 15 responds as the user authentication result with the user identification information and authentication pass information indicating that the user authentication has passed. On the other hand, if the validity information indicates expiration, the user authentication unit 15 responds as the user authentication result with the user identification information and authentication fail information indicating that the user authentication has failed.

Next, the user authentication method according to this embodiment will be described with reference to Figures 3 to 5. Figures 3 to 5 are flowcharts showing an example of the steps of the user authentication method according to this embodiment.

[My Number Card registration stage]
The My Number card registration stage of the user authentication method according to this embodiment will be described with reference to FIG.

(Step S101) The staff member performs user authentication by, for example, entering a login user identifier and password into the My Number card registration terminal 30.

(Step S102) If the user authentication in step S101 is successful, proceed to step S103. On the other hand, if the user authentication in step S101 is unsuccessful, end the processing in Figure 3.

(Step S103) The staff member authenticates their My Number card by holding their My Number card over the card reader of the My Number card registration terminal 30 and entering the PIN (4 digits) for the user authentication electronic certificate into the My Number card registration terminal 30.

(Step S104) If the My Number card authentication in step S103 is successful, proceed to step S105. On the other hand, if the My Number card authentication in step S103 is unsuccessful, end the processing in Figure 3.

(Step S105) The My Number card registration terminal 30 transmits the My Number card registration application information, including the serial number and expiration date of the user authentication electronic certificate read from the My Number card by the card reader, to the My Number card registration unit 13 of the user authentication system 10 via a communication line. The My Number card registration unit 13 accepts the My Number card registration application information received from the My Number card registration terminal 30 via the communication line.

(Step S106) The My Number card registration unit 13 uses the public personal authentication service system 50 to confirm the validity or revocation of the serial number of the user-certificate electronic certificate included in the My Number card registration application information received from the My Number card registration terminal 30 (confirming the validity of the user-certificate electronic certificate). Specifically, the My Number card registration unit 13 sends the serial number of the user-certificate electronic certificate to the OCSP responder of the public personal authentication service system 50, and receives the inquiry result regarding the revocation status of the user-certificate electronic certificate from the public personal authentication service system 50.

(Step S107) If the result of the inquiry about the revocation status of the user-certificate electronic certificate received by the My Number card registration unit 13 from the public personal authentication service system 50 is "valid," proceed to step S108. On the other hand, if the result of the inquiry about the revocation status of the user-certificate electronic certificate received by the My Number card registration unit 13 from the public personal authentication service system 50 is "revoked," terminate the processing of Figure 3.

(Step S108) The My Number Card registration unit 13 registers the My Number Card registration application information, including the serial number of the user-certificate electronic certificate for which the result of the validity check of the user-certificate electronic certificate is valid, in the management database 12 in association with validity information indicating validity. A management number is assigned during this registration. As a result, the serial number and expiration date of the user-certificate electronic certificate for which the result of the validity check of the user-certificate electronic certificate is valid are stored in the management database 12 in association with the management number and validity information indicating validity.

[User authentication digital certificate revocation check stage]
The step of checking the revocation of the digital certificate for user authentication in the user authentication method according to this embodiment will be described with reference to FIG.

(Step S201) The user-certificate electronic certificate revocation checking unit 14 determines the timing for checking the revocation of the user-certificate electronic certificate. The timing for checking the revocation of the user-certificate electronic certificate is preset to a specific time each day. The timing for checking the revocation of the user-certificate electronic certificate is also preset so that the confirmation of validity or revocation of the serial numbers of all user-certificate electronic certificates stored in the management database 12 and the update of validity information are completed by the time when all services of the provision system 40 start to be provided.

(Step S202) If the result of the determination in step S201 is that it is time to check the revocation of the user-authentication electronic certificate, proceed to step S203; if not, return to step S201.

(Step S203) The user-certificate electronic certificate revocation checking unit 14 requests a user-certificate electronic certificate revocation list (CRL) from the public personal authentication service system 50 and receives the user-certificate electronic certificate revocation list from the public personal authentication service system 50.

(Step S204) The user-certificate electronic certificate revocation confirmation unit 14 refers to the user-certificate electronic certificate revocation list received from the public personal authentication service system 50 and confirms whether the serial numbers of all user-certificate electronic certificates stored in the management database 12 are valid or revoked. The user-certificate electronic certificate revocation confirmation unit 14 changes the validity information stored in the management database 12 in association with the serial number of the user-certificate electronic certificate whose confirmation result indicates revocation to validity information indicating revocation.

[User authentication stage]
The user authentication stage of the user authentication method according to this embodiment will be described with reference to Fig. 5. For ease of explanation, the authentication printing service will be described as an example of a service provided by the provider system 40. However, the same applies to services other than the authentication printing service, such as a two-factor authentication service, an entry/exit management service, or a time and attendance management service.

(Step S301) When using the authentication printing service, an employee holds their My Number card over the card reader installed on the printing machine. The authentication printing service providing system 40-2 obtains the serial number of the user authentication electronic certificate read from the My Number card by the printing machine's card reader. The authentication printing service providing system 40-2 transmits user authentication application information, including the obtained serial number of the user authentication electronic certificate, to the communication unit 11-2 of the user authentication system 10 via a communication line between them. The communication unit 11-2 of the user authentication system 10 receives the user authentication application information from the authentication printing service providing system 40-2 via the communication line between them. The user authentication unit 15 obtains the user authentication application information received by the communication unit 11-2 from the authentication printing service providing system 40-2 from the communication unit 11-2.

(Step S302) The user authentication unit 15 obtains from the management database 12 the validity information associated with the serial number of the user certificate included in the user authentication application information for the authenticated printing service providing system 40-2 obtained from the communication unit 11-2, and an extended ID, which is user identification information for the authenticated printing service. The user authentication unit 15 confirms whether the validity information obtained from the management database 12 indicates "valid" or "invalidated."

(Step S303) If the result of the check in step S302 indicates that the validity information is "valid," proceed to step S304. On the other hand, if the validity information indicates "invalid," proceed to step S305.

(Step S304) If the validity information obtained from the management database 12 indicates "valid," the user authentication unit 15 responds to the authenticated printing service providing system 40-2 via the communication unit 11-2 with the extended ID obtained from the management database 12 as the user authentication result, and authentication pass information indicating that the employee user has passed authentication.

(Step S305) If the validity information obtained from the management database 12 indicates "invalidated," the user authentication unit 15 responds to the authenticated printing service providing system 40-2 via the communication unit 11-2 with the extended ID obtained from the management database 12 as the user authentication result and authentication failure information indicating that the employee user authentication has failed.

When the authenticated printing service providing system 40-2 receives authentication success information as a user authentication result, which is a response from the user authentication unit 15 of the user authentication system 10, it authorizes printing for the extended ID included in the user authentication result. The print job for the extended ID that has been authorized for printing is executed on the printer, and the print job is printed by the printer.

On the other hand, when the authenticated printing service providing system 40-2 receives authentication failure information as the user authentication result, which is a response from the user authentication unit 15 of the user authentication system 10, it does not permit printing for the extended ID included in the user authentication result. A print job for an extended ID that is not permitted to print will not be executed on the printing press. Therefore, the print job will not be printed by the printing press. The authenticated printing service providing system 40-2 displays a message on the printing press indicating that user authentication for the extended ID has failed. The staff member recognizes from this message that their user authentication has failed.

According to this embodiment, a common management database 12 is provided for each of the provision systems 40 of multiple services, and the validity of the My Number Card's user-certificate electronic certificate can be confirmed daily for the serial numbers of all My Number Card's user-certificate electronic certificates registered in the management database 12 using the public personal authentication service system 50, common to each of the provision systems 40 of multiple services. Therefore, in this embodiment, each of the provision systems 40 of multiple services does not need to individually use the public personal authentication service system 50 to confirm the validity of the My Number Card's user-certificate electronic certificate. This has the effect of reducing the load on the public personal authentication service system 50 when each of the provision systems 40 of multiple services uses My Number cards to authenticate users.

In FIG. 1, a user authentication service system may be configured that includes a user authentication system 10 and multiple service provision systems 40. Also, a user authentication service system may be configured that includes a user authentication system 10 and at least two or more provision systems 40 selected from a two-factor authentication service provision system 40-1, an authenticated printing service provision system 40-2, an entry/exit management service provision system 40-3, and a time attendance management service provision system 40-4.

Second Embodiment
Fig. 6 is a block diagram showing an example of the configuration of a user authentication system 10a according to the second embodiment. In Fig. 6, parts corresponding to those in Fig. 1 are given the same reference numerals, and their description will be omitted.

The second embodiment differs from the first embodiment in the process of checking the revocation of user-certificate electronic certificates. In the first embodiment, the serial numbers of all user-certificate electronic certificates stored in the management database are checked for validity or revocation and their validity information is updated daily in a lump sum. In contrast, in the second embodiment, the serial numbers of all user-certificate electronic certificates stored in the management database are checked for validity or revocation and their validity information is updated daily for each individual serial number of the user-certificate electronic certificate.

Figure 7 is a diagram showing an example of the configuration of the management database 12a according to the second embodiment. In Figure 2, the management database 12a stores, for each My Number card, the management number, the serial number of the user-certification electronic certificate, validity information, expiration date, and user identification information for each service of the provision system 40, as well as a revocation check completion flag in association with the card.

The revocation check completion flag is information indicating whether the validity or revocation check and validity information update for the serial number of the user authentication electronic certificate has been performed (ON) or not (OFF). The management database 12a resets all revocation check completion flags (sets them to not performed (OFF)) at a specified time each day. The time at which the revocation check completion flag is reset is preset to the period from the time when provision of all services by the provision system 40 ends to the time when provision of all services by the provision system 40 begins the following day.

The user authentication unit 15a transmits the user authentication application information received from each provision system 40 via the communication unit 11 corresponding to each provision system 40 to the user-certificate electronic certificate revocation confirmation unit 14a.

The user authentication process performed by the user authentication unit 15a is the same as that performed by the user authentication unit 15 in the first embodiment described above. However, the user authentication unit 15a references the revocation check completion flag in the management database 12a and uses validity information where the revocation check completion flag is "Completed: ON", but does not use validity information where the revocation check completion flag is "Not yet performed: OFF".

The user-certificate electronic certificate revocation confirmation unit 14a executes a user-certificate electronic certificate revocation confirmation process to confirm the validity or revocation of the serial number of the user-certificate electronic certificate stored in the management database 12a. The user-certificate electronic certificate revocation confirmation unit 14a sends and receives data to and from the public personal authentication service system 50 via a communication line.

The following describes the user-certificate electronic certificate revocation confirmation process according to the second embodiment. The user-certificate electronic certificate revocation confirmation unit 14a uses the public personal authentication service system 50 to confirm whether the serial number of the user-certificate electronic certificate stored in the management database 12a is valid or revoked (confirming the validity of the user-certificate electronic certificate).

In the second embodiment, the user-certification electronic certificate revocation checking unit 14a uses the OCSP responder query method to check the validity of the user-certification electronic certificate. In the OCSP responder query method, the user-certification electronic certificate revocation checking unit 14a transmits the serial number of the user-certification electronic certificate to the OCSP responder of the public personal authentication service system 50 and receives the query result on the revocation status of the user-certification electronic certificate from the public personal authentication service system 50. The target for which the user-certification electronic certificate revocation checking unit 14a queries the public personal authentication service system 50 about the revocation status of the user-certification electronic certificate is the serial number of the user-certification electronic certificate for which the revocation check execution flag in the management database 12a is "not executed: OFF."

The user-certificate electronic certificate revocation checking unit 14a checks the revocation check completion flag associated in the management database 12a with the serial number of the user-certificate electronic certificate included in the user authentication application information received from the user authentication unit 15a. As a result of this check, the user-certificate electronic certificate revocation checking unit 14a sends the serial number of the user-certificate electronic certificate for which the revocation check completion flag is "Not performed: OFF" to the OCSP responder of the public personal authentication service system 50, and receives the inquiry result regarding the revocation status of the user-certificate electronic certificate from the public personal authentication service system 50.

On the other hand, the user-certificate electronic certificate revocation checking unit 14a does not send the serial number of a user-certificate electronic certificate whose revocation check completion flag is "Completed: ON" to the OCSP responder of the public personal authentication service system 50. Therefore, for the serial number of a user-certificate electronic certificate whose revocation check completion flag is "Completed: ON", the validity of the user-certificate electronic certificate is not checked by the public personal authentication service system 50.

The user-certificate electronic certificate revocation confirmation unit 14a uses the inquiry result ("valid or revoked") regarding the revocation status of the user-certificate electronic certificate received from the public personal authentication service system 50 to update the validity information associated with the serial number of the user-certificate electronic certificate in the management database 12a.

The user-certification electronic certificate revocation confirmation unit 14 confirms whether the serial number of the user-certification electronic certificate is valid or revoked, updates the validity information, and sets the revocation confirmation completion flag associated with the serial number of the user-certification electronic certificate in the management database 12a to "Completed: ON."

For user-certificate electronic certificate serial numbers for which the revocation check completion flag has been set to "Completed: ON," the validity or revocation check and validity information update for the user-certificate electronic certificate serial number will no longer be performed on that day. Therefore, for the same user-certificate electronic certificate serial number, the validity or revocation check and validity information update for the user-certificate electronic certificate serial number will be performed at most once a day.

The step of checking the revocation of an electronic certificate for user authentication in the user authentication method according to the second embodiment will be described with reference to Figure 8. Figure 8 is a flowchart showing an example of the procedure for checking the revocation of an electronic certificate for user authentication in the user authentication method according to the second embodiment. For ease of explanation, an authenticated printing service will be used as an example of a service provided by the provision system 40, but the same applies to services other than authenticated printing, such as two-factor authentication services, entry/exit management services, and time and attendance management services.

(Step S401) When using the authentication printing service, an employee holds their My Number card over the card reader installed on the printing machine. The authentication printing service providing system 40-2 obtains the serial number of the user authentication electronic certificate read from the My Number card by the printing machine's card reader. The authentication printing service providing system 40-2 transmits user authentication application information, including the obtained serial number of the user authentication electronic certificate, to the communication unit 11-2 of the user authentication system 10a via the communication line between them. The communication unit 11-2 of the user authentication system 10a receives the user authentication application information from the authentication printing service providing system 40-2 via the communication line between them. The user authentication unit 15a obtains the user authentication application information received by the communication unit 11-2 from the authentication printing service providing system 40-2 from the communication unit 11-2.

The user authentication unit 15a sends the user authentication application information for the authenticated printing service providing system 40-2 obtained from the communication unit 11-2 to the user authentication electronic certificate revocation confirmation unit 14a.

(Step S402) The user-certificate electronic certificate revocation checking unit 14a checks the revocation check completion flag associated in the management database 12a with the serial number of the user-certificate electronic certificate included in the user authentication application information for the authenticated printing service providing system 40-2 received from the user authentication unit 15a.

(Step S403) If the result of checking in Step S402 is that the revocation check completion flag is "Not performed: OFF" (Step S403, NO), proceed to Step S404. On the other hand, if the revocation check completion flag is "Performed: ON" (Step S403, YES), end the processing in Figure 8.

(Step S404) The user-certificate electronic certificate revocation confirmation unit 14a sends the serial number of the user-certificate electronic certificate included in the user authentication application information for the authenticated printing service providing system 40-2 received from the user authentication unit 15a to the OCSP responder of the public personal authentication service system 50, and receives the inquiry result regarding the revocation status of the user-certificate electronic certificate from the public personal authentication service system 50.

(Step S405) The user-certificate electronic certificate revocation checking unit 14a uses the inquiry result for the revocation status of the user-certificate electronic certificate received from the public personal authentication service system 50, "valid or revoked," to update the validity information associated with the serial number of the user-certificate electronic certificate in the management database 12a. The user-certificate electronic certificate revocation checking unit 14 sets the revocation check completion flag associated with the serial number of the user-certificate electronic certificate in the management database 12a to "Completed: ON."

According to this embodiment, a common management database 12a is provided for each of the provision systems 40 of multiple services, and the validity of the My Number Card's user-certification electronic certificate can be confirmed daily for each serial number of the My Number Card's user-certification electronic certificate registered in the management database 12a, using the public personal authentication service system 50, common to each of the provision systems 40 of multiple services. Therefore, in this embodiment, each of the provision systems 40 of multiple services does not need to individually use the public personal authentication service system 50 to confirm the validity of the My Number Card's user-certification electronic certificate. This has the effect of reducing the load on the public personal authentication service system 50 when each of the provision systems 40 of multiple services uses My Number cards to authenticate users.

In FIG. 6, a user authentication service system may be configured that includes a user authentication system 10a and multiple service provision systems 40. Also, a user authentication service system may be configured that includes a user authentication system 10a and at least two or more provision systems 40 selected from a two-factor authentication service provision system 40-1, an authenticated printing service provision system 40-2, an entry/exit management service provision system 40-3, and a time attendance management service provision system 40-4.

Himeji City was involved in the development of the user authentication system and user authentication service system according to each of the above-mentioned embodiments.

The above describes in detail an embodiment of the present invention with reference to the drawings, but the specific configuration is not limited to this embodiment and includes design modifications and the like that do not deviate from the gist of the present invention.

Furthermore, a computer program for implementing the functions of each of the above-described devices may be recorded on a computer-readable recording medium, and the program recorded on the recording medium may be loaded into a computer system and executed. Note that the term "computer system" here may also include hardware such as an OS and peripheral devices. Furthermore, if a WWW system is used, the term "computer system" also includes the homepage provision environment (or display environment).
In addition, "computer-readable recording medium" refers to writable non-volatile memory such as a flexible disk, optical magnetic disk, ROM, or flash memory, portable media such as a DVD (Digital Versatile Disc), or storage devices such as a hard disk built into a computer system.

Furthermore, "computer-readable recording medium" also includes a device that stores a program for a certain period of time, such as volatile memory (e.g., DRAM (Dynamic Random Access Memory)) within a computer system that serves as a server or client when a program is transmitted via a network such as the Internet or a communication line such as a telephone line.
The program may be transmitted from a computer system storing the program in a storage device or the like to another computer system via a transmission medium or by transmission waves in the transmission medium. Here, the "transmission medium" that transmits the program refers to a medium that has the function of transmitting information, such as a network (communication network) such as the Internet or a communication line (communication line) such as a telephone line.
The program may also be a program for implementing some of the functions described above, or may be a so-called differential file (differential program) that can implement the functions described above in combination with a program already stored in the computer system.

10, 10a... User authentication system, 11... Communication unit, 12, 12a... Management database, 13... My Number card registration unit, 14, 14a... User authentication electronic certificate revocation verification unit, 15, 15a... User authentication unit, 30... My Number card registration terminal, 40... Provision system, 50... Public personal authentication service system

Claims (8)

a communication unit provided for each provision system corresponding to at least two or more services among the two-factor authentication service, the authenticated printing service, the entry/exit management service, and the time attendance management service;
a management database that stores user identification information for at least two or more services among the two-factor authentication service, the authenticated printing service, the entry/exit management service, and the attendance management service, the serial number of the user authentication electronic certificate read from the My Number card, and validity information indicating whether the user authentication electronic certificate is valid or invalid, in association with each other;
a My Number Card registration unit that receives My Number Card registration application information from a My Number Card registration terminal, the My Number Card registration application information including the user identification information for each service and the serial number of the user authentication electronic certificate read from the My Number Card, confirms the validity or invalidity of the serial number of the user authentication electronic certificate included in the received My Number Card registration application information using a public personal authentication service system, and registers My Number Card registration application information including the serial number of the user authentication electronic certificate that is found to be valid as a result of the confirmation in the management database in association with validity information indicating the validity;
a user-certification electronic certificate revocation confirmation unit that confirms the validity or revocation of the serial number of the user-certification electronic certificate stored in the management database by using a public personal authentication service system, and changes the validity information stored in the management database in association with the serial number of the user-certification electronic certificate that is found to be revoked as a result of the confirmation to validity information indicating revocation;
a user authentication unit that acquires from the management database validity information associated with the serial number of the user authentication electronic certificate read from the Individual Number Card when using the service, and user identification information for the service, which are included in user authentication application information received from a system providing one of a two-factor authentication service, an authenticated printing service, an entry/exit management service, and a time attendance management service by the communication unit corresponding to the system providing the service, and that responds to the system providing the service with a user authentication result based on the acquired validity information and the user identification information for the service by the communication unit corresponding to the system providing the service;
A user authentication system comprising: The user-certificate electronic certificate revocation confirmation unit confirms the validity or revocation of the serial numbers of all user-certificates stored in the management database and updates the validity information daily and by the start time of all services, namely, the two-factor authentication service, the authenticated printing service, the entry/exit management service, and the time attendance management service.
2. The user authentication system according to claim 1. the user-certification electronic certificate revocation confirmation unit daily acquires a user-certification electronic certificate revocation list from a public personal authentication service system, and confirms the validity or revocation of the serial number of the user-certification electronic certificate stored in the management database based on the acquired user-certification electronic certificate revocation list;
3. The user authentication system according to claim 2. The management database further associates and stores a revocation check execution flag that is reset daily,
The user-certification electronic certificate revocation confirmation unit confirms whether the serial number of the user-certification electronic certificate for which the revocation confirmation completion flag has not been performed is valid or revoked, and updates the validity information regarding the serial number of the user-certification electronic certificate read from the My Number card when using the service, which is included in the user authentication application information received from the service providing system of one of the two-factor authentication service, the authenticated printing service, the entry/exit management service, and the time and attendance management service by the communication unit corresponding to the service providing system, and sets the revocation confirmation completion flag associated with the serial number of the user-certification electronic certificate to performed.
2. The user authentication system according to claim 1. the user-certification electronic certificate revocation confirmation unit transmits the serial number of the user-certification electronic certificate to the public personal authentication service system, and receives a query result on the revocation status of the user-certification electronic certificate from the public personal authentication service system;
5. The user authentication system according to claim 4. A user authentication system according to any one of claims 1 to 5;
a provision system corresponding to at least two or more services among a two-factor authentication service, an authenticated printing service, an entry/exit management service, and a time attendance management service;
A user authentication service system comprising: a communication unit provided for each provision system corresponding to at least two or more services among the two-factor authentication service, the authenticated printing service, the entry/exit management service, and the time attendance management service;
a management database that stores user identification information for at least two or more services among the two-factor authentication service, the authenticated printing service, the entry/exit management service, and the attendance management service, the serial number of the user authentication electronic certificate read from the My Number card, and validity information indicating whether the user authentication electronic certificate is valid or invalid, in association with each other;
A user authentication method executed by a user authentication system comprising:
a My Number Card registration step of receiving My Number Card registration application information from a My Number Card registration terminal, the My Number Card registration application information including the user identification information for each service and the serial number of the user authentication electronic certificate read from the My Number Card, confirming the validity or invalidity of the serial number of the user authentication electronic certificate included in the received My Number Card registration application information using a public personal authentication service system, and registering the My Number Card registration application information including the serial number of the user authentication electronic certificate that is found to be valid as a result of the confirmation in the management database in association with validity information indicating the validity;
a user-certification electronic certificate revocation confirmation step of confirming whether the serial number of the user-certification electronic certificate stored in the management database is valid or invalid using a public personal authentication service system, and changing the validity information stored in the management database in association with the serial number of the user-certification electronic certificate that is invalid as a result of the confirmation to validity information indicating invalidity;
a user authentication step of acquiring from the management database, from a system providing one of a two-factor authentication service, an authenticated printing service, an entry/exit management service, and a time attendance management service, validity information associated with the serial number of the user authentication electronic certificate read from the Individual Number Card when using the service, and user identification information for the service, which are included in user authentication application information received from the system providing the service by the communication unit corresponding to the system providing the service, and returning a user authentication result to the system providing the service by the communication unit corresponding to the system providing the service, based on the acquired validity information and user identification information for the service;
User authentication methods, including: a communication unit provided for each provision system corresponding to at least two or more services among the two-factor authentication service, the authenticated printing service, the entry/exit management service, and the time attendance management service;
a management database that stores user identification information for at least two or more services among the two-factor authentication service, the authenticated printing service, the entry/exit management service, and the attendance management service, the serial number of the user authentication electronic certificate read from the My Number card, and validity information indicating whether the user authentication electronic certificate is valid or invalid, in association with each other;
A computer of a user authentication system comprising:
a My Number Card registration step of receiving My Number Card registration application information from a My Number Card registration terminal, the My Number Card registration application information including the user identification information for each service and the serial number of the user authentication electronic certificate read from the My Number Card, confirming the validity or invalidity of the serial number of the user authentication electronic certificate included in the received My Number Card registration application information using a public personal authentication service system, and registering the My Number Card registration application information including the serial number of the user authentication electronic certificate that is found to be valid as a result of the confirmation in the management database in association with validity information indicating the validity;
a user-certification electronic certificate revocation confirmation step of confirming whether the serial number of the user-certification electronic certificate stored in the management database is valid or invalid using a public personal authentication service system, and changing the validity information stored in the management database in association with the serial number of the user-certification electronic certificate that is invalid as a result of the confirmation to validity information indicating invalidity;
a user authentication step of acquiring from the management database, from a system providing one of a two-factor authentication service, an authenticated printing service, an entry/exit management service, and a time attendance management service, validity information associated with the serial number of the user authentication electronic certificate read from the Individual Number Card when using the service, and user identification information for the service, which are included in user authentication application information received from the system providing the service by the communication unit corresponding to the system providing the service, and returning a user authentication result to the system providing the service by the communication unit corresponding to the system providing the service, based on the acquired validity information and user identification information for the service;
A computer program for executing