MULTI-ATTRIBUTE AUTHENTICATION SYSTEM, MULTI-ATTRIBUTE AUTHENTICATION METHOD, LAPSE CONFIRMATION METHOD, AND PROGRAM

摘要

PROBLEM TO BE SOLVED: To authenticate possession of a plurality of attributes at the same time while allowing a user to optionally blind and perfectly anonymize attribute information.;SOLUTION: A U generates a plurality of user's secret keys and public keys forming pairs with them more than the number of attributes by one to transmit the public keys corresponding the number of attributes to a CA. The CA performs signing with a signature key to the public keys, and issues an attribute certificate to the U. The U transmits a service request to an SP. The SP generates the secret key and the public key of itself to transmit a challenge to the U. The U deforms the attribute certificate issued by the CA, deforms the secret key, and calculates a signature value for a value obtained by multiplying the public key of the SP received from the SP by a random number by using the deformed secret key. The U transmits the deformed attribute certificate and the calculated signature value to the SP. The SP verifies the attribute certificate and the signature value received from the U. The SP performs lapse confirmation. When the validity of the attribute certificate and the signature value is confirmed and the lapse confirmation is completed, the SP provides a service based on attribute information to the U.;COPYRIGHT: (C)2011,JPO&INPIT