Certificate generation method, certificate generation apparatus, information processing apparatus, and communication device

摘要

A certificate generation method executed by a computer, includes receiving specific information and configuration information of a communication device collected by an information processing apparatus, the specific information and the configuration information being transmitted from the communication device provided with the information processing apparatus having tamper resistance; determining a communication address of the communication device based on the specific information if a combination of the received specific information and the received configuration information of the communication device is equivalent to information stored beforehand in a storage unit; generating an electronic certificate including a part of or all of the specific information and the configuration information, and the determined communication address; and transmitting the electronic certificate to the communication device.

主权项

1. A certificate generation method executed by a computer, the certificate generation method comprising:
verifying, when a certificate issuance request including an electronic signature is received from a communication device, the electronic signature by comparing a first value corresponding to the certificate issuance request with a second value obtained by decoding the electronic signature; receiving a specific information item and a configuration information item of the communication device from the communication device, the specific information item and the configuration information item being collected by a tamper-resistant information processing apparatus provided in the communication device; obtaining a communication address of the communication device from a first storage unit of the computer, the first storage unit storing communication addresses associated with specific information items beforehand, based on the received specific information item, when a combination of the received specific information item and the received configuration information item of the communication device is equivalent to a combination of a specific information item and a configuration information item of the communication device stored beforehand in a second storage unit of the computer; generating an electronic certificate including a part or all of the received specific information item and the received configuration information item, and the obtained communication address; and transmitting the electronic certificate to the communication device, wherein the electronic certificate transmitted to the communication device includes the communication address which is not received from the communication device.