ELECTRONIC AUTHENTICATION DEVICE, ELECTRONIC AUTHENTICATION SYSTEM, ELECTRONIC AUTHENTICATION METHOD AND PROGRAM OF THE METHOD

摘要

PROBLEM TO BE SOLVED: To provide an electronic authentication capable of enhancing security for mutual authentication while its system construction is simplified.

SOLUTION: An IC card 20 stores a secret key and a client certificate. An authentication device 10 receives a request in the form of HTTP from a user terminal device 30, reads in the client certificate from the IC card, and executes mutual authentication in the form of HTTPS for a server 40 through SSL communication. The client certificate and encrypted authentication data are directly transmitted to the server without a detour through the user terminal device. A secret number is directly inputted to the authentication device. Communication using a name other than domain names (URL) described in a permission list of the authentication device is blocked. The authentication device does not have its own IP address. The justification of a server certificate is made to be automatically confirmable at the authentication device side.

COPYRIGHT: (C)2009,JPO&INPIT