| 摘要 |
<p>This long-term-signature system (1) makes it possible to generate long-term-signature data for each of a plurality of pieces of original data in cooperation with a long-term-signature server (2) without sending said original data and the secret keys used for the signatures to the outside, keeping said original data and secret keys on a client terminal (3). In this long-term-signature system (1), the long-term-signature scheme, either PAdES or XAdES, is specified for each piece of original data, and long-term-signature data can be generated in parallel even if PAdES is specified for some of the original data and XAdES for the rest. Also, in this long-term-signature system (1), for each piece of original data, the secret key of the certificate authority that issued the certificate for the public key paired with the secret key used to sign said original data is the same, and the secret key of the TSA that issued the certificate for the public key paired with the secret key used to timestamp said original data is also the same. As such, the validation information for each piece of original data is the same, and only one set of validation information needs to be processed. The above makes it possible to apply long-term signatures to a plurality of pieces of original data while keeping the confidential information on the user side.</p> |
