Fuji Xerox Co., Ltd.

Kenichiro Kigo

Kazuo Saito

Koji Takeda

Masaki Kyojima

Kil-ho Shin

Hisashi Nakatsuyama

Shunichi Kojima

Kohji Suzuki

An information processing system, which includes: an information distribution server; a client apparatus; and a plurality of service providing servers that provide service to a user of the client apparatus, and the information distribution server including: a user authentication information memory that stores user authentication information; a receiving section that receives authentication information from the plurality of service providing servers; and an authentication proxy information distributing section that distributes authentication proxy information prepared based on the user authentication information and the authentication information, and the client apparatus including: a user authentication section that carries out authentication of the user, and an authentication proxy section that, if the authentication is carried out by the user authentication section, executes a proxy authentication when the user accesses at least one of the plurality of service providing servers on the basis of the distributed authentication proxy information.

Information processing system, recording medium storing control program, and computer data signal embodied in a carrier wave

In carrying out various authentication with use of a proof support information, it is intended to impose a limitation on utilization and make high-speed processing possible. Proof data generation control information is provided to a proof data generation device from a proof data generation control information generating device or from a proof data verification device. At the time of authentication, authentication data is provided from the proof data verification device to the proof data generation device, in which a proof data generation unit generates proof data on the basis of the authentication data, user unique identifying information, proof data generation control information, and proof support information (access ticket). However, in the event utilization does not meet conditions included in the proof data generation control information, generation of the proof data is rejected. The proof data is sent to the proof data verification device and is verified thereby. As authentication characteristic information there is used a decryption key in an asymmetric cryptosysytem which utilizes a discrete logarithm problem on a finite group G.

Device and method for conditional authentication

A data capsule comprises an encrypted data hold means which holds an encrypted version of data which is provided for use, a verification means which communicates with an external proving device to get proof data generated by it and verifies the legitimacy of the proof data, a usage control means which enables the use of the data based on the verification result provided by the verification means, and a decryption means which decrypts the data held by the data hold means. The data is decrypted for use in response to the successful verification of the proof data from the proving device.

Apparatus and method for data capsule generation

Both of a user side and a protect side such as a programmer of an application programmer need not handle a large number of inherent information such as authentication keys. An access ticket generation device generates an access ticket from user unique identifying information and access rights authentication feature information. As unique security characteristic information, there is used a secret key of an elliptic curve encryption or an ElGamal encryption. A proof data generation device receives the access ticket, converts authentication data received from a proof data verification device into proof data by use of the access ticket and the user unique identifying information, and returns the resultant proof data to the proof data verification device. The proof data generation device or the proof data verification device decrypts the above-mentioned encryption. The proof data verification device verifies the access rights as correct access only when a combination of an access ticket and user unique identifying information used in the proof data generation device is correct.

Growing community of inventors

Nakai-machi, Japan

Kenichiro Kigo