Nippon Telegraph and Telephone Corporation

Takao Yamashita

Yoshihiko Omori

Hideo Nishimura

Yasuhiko Yoshimura

Satoru Furukawa

Yurika Suga

In a user credential control system, an access control server includes a token issuing unit that issues, to a service provider server, a token in which a user credential that can be acquired by the service provider server is described according to the company name and the type of a service of the service provider server described in an electronic certificate, a policy registration unit that registers a policy of an access authority of the service provider server to the user credential based on the company name or the type of the service of the service provider server, and a notification reception unit that, when the user credential of the user terminal has been changed, acquires the service provider server with the access authority to the user credential from a token according to the registered policy to notify the service provider server of the change of the user credential.

User credential control system and user credential control method

A user agent stores a private key and a public key of a user, and user information (registered user information). The user agent receives from a user terminal a service document including identification information of a service provider server and a user information classification requested by the service provider server, and adds a signature to the service document by using the private key of the user. The user terminal receives the signed service document and transmits the signed service document to the service provider server. The user agent receives the signed service document from the service provider server, and verifies the signature and transmits back to the service provider server the user information of the user corresponding to the included user information classification.

User information management system, user information management method, user agent and program

The owner sameness confirmation system determines whether or not the owners of two terminals (A,B) are the same. Authentication station servers (A,B) store electronic certificates issued to the terminals and identity confirmation information of the owners of the terminals in association with each other. The terminal (B) transmits information obtained by encrypting the identity confirmation information of the owner of the terminal (B) through homomorphic encryption and the electronic certificate of the partner terminal (A) to the authentication station server (A). The authentication station server (A) transmits response encrypted information including information obtained by encrypting the identity confirmation information of the owner of the terminal (A) as a response. The terminal (B) decrypts the response encrypted information and determines the sameness of the owners based on whether or not the decryption result matches a predetermined value.

Owner identity confirmation system and owner identity confirmation method

The owner sameness confirmation system determines whether or not the owners of two terminals (A,B) are the same. Authentication station servers (A,B) store electronic certificates issued to the terminals and identity confirmation information of the owners of the terminals in association with each other. The authentication station server (A) transmits information obtained by encrypting the identity confirmation information of the owner of the terminal (A) through homomorphic encryption and the electronic certificate of the partner terminal (B) to the authentication station server (B). The authentication station serverB transmits response encrypted information including information obtained by encrypting the identity confirmation information of the owner of the terminal (B) as a response. The authentication station server (A) decrypts the response encrypted information and determines the sameness of the owners based on whether or not the decryption result matches a predetermined value.

Owner identity confirmation system, certificate authority server and owner identity confirmation method

The owner sameness confirmation system determines whether or not the owners of two terminals (A,B) are the same. The terminals (A,B) store identity confirmation information stored in association with electronic certificates issued to the terminals by authentication station servers (A,B). The terminal (A) transmits information obtained by encrypting the identity confirmation information of the owner through homomorphic encryption to the terminal (B). The terminal (B) transmits response encrypted information including information obtained by encrypting the identity confirmation information of the owner of the terminal (B), as a response to the terminal (A). The terminal (A) decrypts the response encrypted information and determines the sameness of the owners based on whether or not the decryption result matches a predetermined value.

Owner identity confirmation system, terminal and owner identity confirmation method

To provide a terminal registration system and a terminal registration method for improving user convenience in registration of a new terminal to a plurality of service sites. The registered terminalincludes an Authenticatorincluding service site list informationthat associates private keys and URLs for access to service sites with each other. A Registration Manageracquires the service site list informationfrom the Authenticatorof the registered terminal. Then, the Registration Managerperforms FIDO authentication for a registration target service site using a private key of the registered terminal, on the basis of the acquired service site list information, and performs Registration of a newly generated cryptographic key at the new terminal

Terminal registration system and terminal registration method

[Problem] Provided is an authorization system capable of reducing a load on a host regarding an invitation procedure in a case where there is a large number of guests or guests are frequently invited, and preventing identity theft or invitation of an unwanted third party. [Solution] In an authorization systemX, a representative guest terminalA acquires information about non-representative guest terminalsB andC from the non-representative guest terminalB andC, a host terminalH acquires and verifies signed information about the terminalsA,B, andC from the representative guest terminalA, and a management serveracquires and verifies the information about the host terminalH and the signed information about the terminalsA,B, andC from the host terminalH, performs authentication based on information about the host terminalH registered in advance, registers the information about the terminalsA,B, andC, when the authentication is successful, acquires and performs authentication on information about the terminalsA,B, andC from a smart lock, and unlocks the smart lockbased on a result of the authentication.

Authorization system and authorization method

[Problem] To provide a terminal registration system and a terminal registration method for improving user convenience in registration of a new terminal to a plurality of service sites. [Solution] The registered terminalincludes an Authenticatorincluding service site list informationthat associates private keys and URLs for access to service sites with each other. A Registration Manageracquires the service site list informationfrom the Authenticatorof the registered terminalThen, the Registration Managerperforms FIDO authentication for a registration target service site using a private key of the registered terminalon the basis of the acquired service site list informationand performs Registration of a newly generated cryptographic key at the new terminal

[Problem] In guest invitation for a smart lock, a burden on an owner on invitation is reduced and impersonation or invitation of an unintended third party is prevented. [Solution] A representative guest terminalrequesting unlocking of a smart lockgenerates authentication information referred to at the time of a request for unlocking, imparts a signature to the authentication information, and transmits the authentication information to an owner terminal. The owner terminalverifies a signature of the representative guest terminal, imparts a signature to the authentication information, and transmits the authentication information to a management server. The management serververifies the signatures of the representative guest terminaland the owner terminal, stores the owner terminaland the representative guest terminalin association with each other, and stores the authentication information and the representative guest terminalin association with each other. When the management serverreceives an unlocking request from the smart lockand successfully authenticates the unlocking request by referring to the stored authentication information, the smart lockis unlocked.

Authorization system, management server and authorization method

A terminal A transmits an owner identity confirmation start request to a terminal B including owner server association information capable of identifying an owner of the terminal and a terminal management server A of the terminal. The terminal B transmits an owner identity confirmation request to the terminal management server B of the terminal, the owner identity confirmation request including the owner server association information received and the owner server association information including information of the terminal B. The terminal management server B transmits, to the terminal management server A, an inter-server owner identity confirmation request including the identity confirmation information of the owner of the terminal B and the owner server association information of the terminal A. The terminal management server A compares the identity confirmation information of the owner of the terminal A with the identity confirmation information received, and confirms the owner identity of the two terminals.

Proprietor's identity confirmation system, terminal management server, and proprietor's identity confirmation method

[Problem] A terminal registration system and a terminal registration method that enable the number of communication operations between terminals to be reduced are provided. [Solution] The terminal registration systemincludes an existing terminal Aincluding, in a secure area including a TEE, a certificate issuing unitconfigured to issue an owner certificate indicating the owner of the terminal, an existing terminal-side coordination unitconfigured to coordinate terminals having an owner certificate identical to the issued owner certificate and generate a cryptographic key, an authentication key management unitconfigured to manage an authentication private key, and including, in a terminal environment including an REE, an inter-terminal coordination appconfigured to perform inter-terminal communication, a new terminal Bmakes a request for starting encrypted communication using a cryptographic key to the existing terminal Afrom an inter-terminal coordination appon the new terminal Bside, and the existing terminal-side coordination unitof the existing terminal Asends coordination data with the authentication private key encrypted with the cryptographic key to the new terminal Bhaving the identical owner certificate.

Growing community of inventors

Tokyo, Japan

Takao Yamashita