JP5612748B2 - Communication terminal device - Google Patents

Description

  The present invention relates to an electronic signature device that digitally signs content based on an electronic certificate and a communication terminal device that can download signed content.

  As an electronic signature device of this type, it accepts a request from a content provider that provides content such as a JAVA (registered trademark) application program, and digitally signs the content before it is made available for download on a mobile phone. An electronic signature device is known. For this electronic signature, an electronic certificate issued by the content provider or the certificate authority for the content is used. For mobile phones that have downloaded digitally signed content, determine whether the content is valid based on the digital certificate, or control the permission level of the function according to the digital certificate Can do.

Conventionally, an electronic certificate used for an electronic signature in the electronic signature device has been newly issued when a content provider who provides the content subject to the electronic signature applies directly to a certificate authority. . Therefore, in order to start providing content that requires an electronic signature using an electronic certificate, each content provider must perform a procedure for applying for new issuance of the electronic certificate. The work burden is large.
In addition, since the electronic certificate used for the electronic signature has a predetermined validity period (for example, 1 year or 3 years), if you continue to use it, apply to the certificate authority before the validity period expires. And renewal procedures are required. Conventionally, this update procedure has been performed directly from the content provider to the certificate authority. Therefore, each content provider must manage the validity period of the electronic certificate, and apply for renewal procedures with the certificate authority before the validity period expires. The administrative burden is large.
In addition, when content signed with an electronic certificate whose validity period has expired is downloaded, the content is controlled so as not to operate, which may cause a disadvantage to the user. Therefore, it is necessary to strictly manage the validity period of the electronic certificate.

  The present invention has been made in view of the above problems, and its purpose is to reduce the work burden when a new electronic certificate used for digital signature of contents is newly issued, and to newly create a plurality of electronic certificates. Issuing processing and unified management of newly issued digital certificates are possible, and electronic signature devices that can prevent the expiration of electronic certificates that are against their will, and applications digitally signed by electronic signature devices To provide a communication terminal device capable of downloading content from a server via a communication network.

  An electronic signature device according to the present invention is an electronic signature device that digitally signs content based on data of an electronic certificate, and includes a certificate information storage unit that stores information on the electronic certificate, and a new electronic certificate A certificate issuance request receiving means for receiving the definition information of the electronic certificate together with a certificate issuance request for requesting issuance of the new electronic certificate based on the certificate issuance request. Based on the certificate information registration means registered in the information storage means and the definition information of the electronic certificate, a period obtained by adding a grace period to a predetermined update management period of the new electronic certificate A certificate issuance processing means for transmitting a certificate issuance request requesting issuance of the electronic certificate as a valid period to the certificate authority and receiving data of a newly issued electronic certificate from the certificate authority; Receive Issued certificate information registration means for registering issued certificate information including the data of the newly issued electronic certificate and the data on the scheduled update date of the electronic certificate in the certificate information storage means; Prepare.

In this electronic signature device, the definition information of the electronic certificate including the certificate issuance request for issuing a new electronic certificate and the scheduled issue date of the electronic certificate is received. When the certificate issuance request and definition information of the electronic certificate are received, the definition information of the electronic certificate is registered in the certificate information storage unit. By registering the definition information of the electronic certificate in the electronic signature device, it is possible to centrally manage the new issue processing of a plurality of electronic certificates. In addition, the content provider does not need to perform an operation of directly applying to the certificate authority for a new issuance of an electronic certificate used for the electronic signature of the content to be provided.
When the scheduled date of issue of a new electronic certificate in which the definition information is registered arrives, the electronic signature device transmits a certificate issue request to the certificate authority based on the definition information of the electronic certificate. When the issuance process at the certificate authority is completed, the digital signature device receives the data of the newly issued electronic certificate from the certificate authority, and the data of the newly issued electronic certificate and the scheduled update date of the electronic certificate The issued certificate information including the data is registered in the certificate information storage unit. By registering issued certificate information in this electronic signature device, the data of the electronic certificate can be used for the electronic signature of content, and a plurality of electronic certificates can be managed in an integrated manner.
In addition, the validity period of the electronic certificate issued from the certificate authority is a period obtained by adding a grace period to a predetermined update management period of the electronic certificate, and is thus performed based on the update management period. Even if the update process of the electronic certificate is not executed for some reason, the electronic certificate is not suddenly invalidated during the grace period added to the update management period.

  In the electronic signature device, the certificate issuance request and the definition information of the electronic certificate may be received from a communication terminal device of an electronic signature service provider that manages the electronic signature device. You may receive from the communication terminal device of the content provider who provides the target content.

In the electronic signature device, after registration of the issued certificate information is completed, a content signature request receiving unit that receives a signature request for requesting an electronic signature of the content together with the content to be signed, and corresponds to the content to be signed Signature processing means for reading out electronic certificate data to be read from the certificate information storage means, digitally signing the content based on the electronic certificate data, and saving the signed content in a predetermined storage destination; and the content And a signature completion notification means for transmitting to the content provider's communication terminal device a signature completion notification indicating that the electronic signature is completed.
The information on the storage destination of the signed content or the signed content may be transmitted together with the signature completion notification.
The signature request and the content to be signed may be received from the communication terminal device of the electronic signature service provider or from the communication terminal device of the content provider.

In the electronic signature device, for the issued electronic certificate, from the update reception start date that goes back a predetermined update reception period from the planned update date of the electronic certificate to the day before the scheduled update date, An update acceptance period notification means for transmitting an update acceptance notice indicating acceptance of an update to the communication terminal device of the content provider, and a certificate update request reception for receiving a certificate update request for requesting the update of the electronic certificate An update acceptance information registration means for registering the update acceptance information in the certificate information storage means based on the certificate update request received during the update acceptance period, and the update accepted electronic certificate. A period in which the grace period is added to the update management period of the electronic certificate that has been accepted based on the update acceptance information when the scheduled update date of the certificate has arrived Certificate renewal processing for transmitting a certificate renewal request for requesting renewal of the electronic certificate to the certificate authority and receiving data of the renewed electronic certificate from the certificate authority And updated certificate information including data of the electronic certificate and data of the next scheduled update date of the electronic certificate for the updated electronic certificate received from the certificate authority. You may further provide the updated certificate information registration means registered into a memory | storage means.
The certificate update request may be received from the communication terminal device of the electronic signature service provider or from the communication terminal device of the content provider.

In the electronic signature device, after the registration of the updated certificate information is completed, a resignature request for requesting an electronic signature of the content corresponding to the updated electronic certificate is received from the communication terminal device of the content provider. A content resignature request receiving unit that receives the content together with the content, and reads out the updated electronic certificate data corresponding to the content to be resigned from the certificate information storage unit, and based on the data of the electronic certificate Re-sign processing means for digitally signing the content may be further provided.
The resigned content for which the electronic signature of the content has been completed may be transmitted and stored in a predetermined storage location accessible from the communication terminal device of the content provider.
Further, after completion of the electronic signature of the content, resignature completion notification means for transmitting a resignature completion notification indicating that the electronic signature has been completed to the communication terminal device of the content provider may be further provided. In this case, information on the storage destination of the signed content or the signed content may be transmitted together with the resignature completion notification.
Further, the resignature request and the content to be signed may be received from the communication terminal device of the electronic signature service provider, or may be received from the communication terminal device of the content provider.

In the electronic signature device, after the registration of the updated certificate information is completed, a storage destination of the content to be resigned corresponding to the updated electronic certificate is accessed, and the content to be resigned is acquired. Re-signature content acquisition means and the updated electronic certificate data corresponding to the content to be resigned are read from the certificate information storage means, and the content is digitally signed based on the digital certificate data Re-sign processing means, and after the digital signature of the content is completed, re-signed content transmission means for transmitting the re-signed content for which the digital signature has been completed to be stored in the storage destination of the content. May be.
The information on the storage destination of the content to be resigned may be included in advance in the definition information of the electronic certificate and acquired from the definition information, or the communication terminal device of the electronic signature service provider or You may receive and acquire from the communication terminal device of the said content provider.
In addition, after the digital signature of the content is completed, resignature completion notification means for transmitting a resignature completion notification indicating that the digital signature has been completed to the communication terminal device of the content provider may be further provided. In this case, information on the storage destination of the signed content or the signed content may be transmitted together with the resignature completion notification.
Further, the signed content may be overwritten on the content to be resigned before being resigned, which is stored in the predetermined storage location.

In the electronic signature device, the certificate update request receiving unit receives the content to be resigned together with the certificate update request, and the update accepted information registration unit includes the update accepted information, Registering the content to be resigned in the certificate information storage means, and after registering the updated certificate information, the data of the electronic certificate corresponding to the content to be resigned is Re-signature processing means for reading out from the document information storage means and digitally signing the content based on the data of the electronic certificate.
The resigned content for which the electronic signature of the content has been completed may be transmitted and stored in a predetermined storage location accessible from the communication terminal device of the content provider.
In addition, after the digital signature of the content is completed, resignature completion notification means for transmitting a resignature completion notification indicating that the digital signature has been completed to the communication terminal device of the content provider may be further provided. In this case, information on the storage destination of the signed content or the signed content may be transmitted together with the resignature completion notification.

In the electronic signature device, after registration of the definition information of the electronic certificate is completed, registration of the issued certificate information is completed, or registration of the update accepted information is completed, the registration is performed. Registration completion notification means for transmitting a registration completion notification indicating the completion to the communication terminal device of the content provider may be further provided.
In the electronic signature device, the content signature request receiving unit, the content resignature request receiving unit, the resignature content obtaining unit, or the certificate update request receiving unit may receive a plurality of contents as the contents to be signed. And the signature processing means or the re-signature processing means digitally signs the plurality of contents based on the data of the electronic certificate and stores the plurality of signed contents in the same storage destination. Good.
In the electronic signature device, the storage destination of the signed content is a storage destination set to be used only once for acquisition of the signed content from the communication terminal device of the content provider, When the signed content stored in the storage location of the signed content is received by the communication terminal device of the content provider, the signed content may be deleted.

In the electronic signature device, the electronic certificate may be an electronic certificate issued for each of a plurality of content providers or for each of a plurality of types of content provided by the content providers.
Also, in the electronic signature device, a certificate deletion request for receiving a certificate deletion request for requesting deletion of an electronic certificate, and a content provider corresponding to the electronic certificate to be deleted or identification information for identifying the content A receiving unit; a certificate information deleting unit that deletes the issued certificate information corresponding to the electronic certificate to be deleted from the certificate information storage unit based on the certificate deletion request; and Certificate revocation processing means for transmitting a certificate revocation request for requesting revocation of an electronic certificate to the certificate authority and receiving a response to the effect that the electronic certificate has been revoked from the certificate authority. .
Further, in the electronic signature device, after the completion of the deletion of the issued certificate information, a deletion completion notification means for transmitting a deletion completion notification indicating that the deletion is completed to the communication terminal device of the content provider, Further, it may be provided.

The communication terminal device according to the present invention is a communication terminal device capable of downloading the contents of an application digitally signed based on data of an electronic certificate by any of the electronic signature devices from a server via a communication network, Download information receiving means for receiving download information for downloading application content, electronic certificate revocation list acquisition means for acquiring an electronic certificate revocation list from a certificate authority, and the electronic certificate revocation information acquired from the certificate authority It is determined whether or not an electronic certificate of the application to be downloaded exists in the list. If the electronic certificate does not exist in the electronic certificate revocation list, the server is based on the download information. Download the application content from If the electronic certificate to the electronic certificate revocation list are present and a control means for controlling so as not to download the content of the application.
Another communication terminal apparatus according to the present invention is a communication terminal apparatus capable of downloading the contents of an application digitally signed based on electronic certificate data by any of the electronic signature apparatuses from a server via a communication network. An electronic certificate revocation list acquisition means for acquiring an electronic certificate revocation list from a certificate authority, and an application to be activated in the electronic certificate revocation list acquired from the certificate authority when activation of the downloaded application is accepted. If the electronic certificate does not exist in the electronic certificate revocation list, the application is started, and the electronic certificate is included in the electronic certificate revocation list. And control means for controlling the application not to be started when it exists.

According to the present invention, for a plurality of newly issued electronic certificates, definition information relating to the issuance of each electronic certificate is registered in the electronic signature device. As a result, it is possible to centrally manage new issue processing of a plurality of electronic certificates. In addition, since the digital signature device performs a new issuance process of the electronic certificate to the certificate authority when a predetermined scheduled issue date arrives, the content provider is used for the electronic signature of the content to be provided. There is no need to apply directly to a certificate authority for a new digital certificate. Therefore, it is possible to reduce the work burden when a new digital certificate used for digital signature of contents is issued.
Furthermore, the issued certificate information of the electronic certificate is registered in an electronic signature device that digitally signs content based on the electronic certificate data included in the issued certificate information. Therefore, it is possible to perform unified management of a plurality of newly issued digital certificates and newly issued digital certificates.
In addition, even if the digital certificate renewal process based on the renewal management period set in the validity period of the newly issued digital certificate is not executed for some reason, it was added to the renewal management period. Since the electronic certificate is not suddenly invalidated during the grace period, it is possible to prevent the electronic certificate from expiring unexpectedly.

1 is an explanatory diagram illustrating an example of a schematic configuration of a content signature system including an electronic signature device according to an embodiment of the present invention. The functional block diagram which shows each means for the new issue of the electronic certificate of an electronic signature apparatus. The functional block diagram which shows each means for the electronic signature of the content based on the issued electronic certificate of the electronic signature apparatus. The functional block diagram which shows each means for performing the electronic signature of a content based on the said electronic certificate following the new issue of the electronic certificate of an electronic signature apparatus. The functional block diagram which shows each means for the update of the electronic certificate of an electronic signature apparatus. The functional block diagram which shows each means for receiving the resignature request after updating the electronic certificate of an electronic signature apparatus, and performing the resignature of the content based on the updated electronic certificate. The functional block diagram which shows each means for acquiring the content of the resignature object from a server after renewing the electronic certificate of an electronic signature apparatus, and performing a resignature. The functional block diagram which shows each means for performing the re-signature of a content based on the updated electronic certificate following the update of the electronic certificate of an electronic signature apparatus. The functional block diagram which shows each means for the deletion and the revocation process of the electronic certificate of an electronic signature apparatus. The sequence diagram which shows an example of the process of the new issue of an electronic certificate, and an electronic signature. The sequence diagram which shows the other example of the process of the new issue of an electronic certificate, and an electronic signature. The sequence diagram which shows an example of the process of the update and resignature of an electronic certificate. FIG. 10 is a sequence diagram showing another example of electronic certificate update and resignature processing. FIG. 10 is a sequence diagram showing still another example of electronic certificate update and resignature processing. The sequence diagram which shows an example of the deletion / revocation process of an electronic certificate. The block diagram which shows an example of schematic structure of the user terminal device which can download and use the signed content uploaded to the content provision server. The flowchart which shows an example of a process of the user terminal device when downloading and registering the content of the signed application from the content providing server. The flowchart which shows an example of a process of the user terminal device when starting the downloaded application.

Hereinafter, embodiments of the present invention will be described with reference to the drawings.
FIG. 1 is an explanatory diagram showing an example of a schematic configuration of a content signature system including an electronic signature device according to an embodiment of the present invention. The content signature system 1 includes an electronic signature device 10, a certificate authority 20, a communication terminal device (for example, a sales representative's terminal device) 30 of a service provider that provides a communication service for electronic signatures to content, and content And a content provider communication terminal device (for example, a content developer communication terminal device) 40 that provides the user with a fee or free of charge. The service provider issues an account ID as identification information to the content provider who uses the communication service for electronic signatures on the content, and manages the issuance of electronic certificates based on the account ID. To do. The contents to be digitally signed are, for example, applications that can be downloaded and incorporated into the user terminal device 70 which is a communication terminal device such as a mobile communication terminal such as a mobile phone.

  The electronic signature device 10, on behalf of each content provider, issues a digital certificate issuance application process, digital certificate management process, and digital certificate management process. Performs signature processing, electronic certificate renewal application processing, etc. The content signature process by the electronic signature device 10 includes, for example, an encryption process for encrypting the content to be processed with a predetermined secret key, a signature data generation process for generating signature data with the secret key, and the encrypted data A signed content generation process for generating a signed content having the content, signature data, and digital certificate data. The private key used for generating the encryption and signature data is generated in pairs with the public key for the content provider or content for which the electronic certificate is to be issued prior to the application for issuance of the electronic certificate to the certificate authority 20. It has been done.

  The certificate authority 20 performs processing such as issuance and revocation of an electronic certificate used for electronic signature of content. The electronic certificate issued by the certificate authority 20 is, for example, a content provider or content public key to which the electronic certificate is issued and a higher-level certificate authority (for example, a root certificate authority) to the certificate authority 20. It includes the issued electronic certificate and information on the issue target (content provider or content) of the electronic certificate. The electronic certificate issued by the certificate authority 20 may be a so-called self-signed electronic certificate that includes the electronic signature of the certificate authority 20 (in the case of a self-signature) and proves itself. Further, the certificate authority 20 may be configured to issue electronic certificates with different security levels according to the type of content. A plurality of certificate authorities 20 and 21 having different security levels may be provided.

  Communication between the electronic signature device 10 and the certificate authority 20 (21), the service provider communication terminal device 30 and the content provider communication terminal device 40 is, for example, an IP-VPN (Virtual Private Network) or a wide area. It can be configured by an Ethernet (Wide-Ethernet (registered trademark)) network. Communication between the electronic signature device 10 and the certificate authority 20 (21), the communication terminal device 30 of the service provider, and the communication terminal device 40 of the content provider is via a public communication network such as the Internet 50. You may make it perform. The communication provider device 30 of the service provider and the communication terminal device 40 of the content provider that can communicate with the electronic signature device 10 may be each one or a plurality of communication terminal devices 40. Applicable without limitation.

  The signed content digitally signed by the electronic signature device 10 is uploaded to the content providing server 60 connected to the Internet 50. A user who is a subscriber of the mobile communication service accesses the content providing server 60 from the user terminal device 70 which is a mobile communication terminal such as a mobile phone via the mobile communication network 51 and the Internet 50, and the content providing server 60. You can download signed content published on. The content providing server 60 may be provided so as to be connected to the mobile communication network 51. In this case, the content providing server 60 can be directly accessed from the user terminal device 70 via the mobile communication network 51 without using the Internet 50. The Internet 50 is provided with a mail server (not shown) for sending a registration completion notification mail of various information from the electronic signature device 10 to the communication terminal device 30 of the service provider and the communication terminal device 40 of the content provider. Yes.

  2 to 9 are functional block diagrams showing the main functions of the electronic signature device 10, respectively. The electronic signature device 10 can be composed of, for example, a computer device having a CPU, a memory (RAM, ROM, etc.), an external storage device such as an HD, and an external communication unit such as Ethernet (registered trademark). The electronic signature device 10 includes, for example, basic software (OS: Operating System) and a predetermined application program such as a database server function and a communication function in a computer that is hardware, and is executed. The function as each means shown to each can be implement | achieved.

FIG. 2 is a functional block diagram showing each means for newly issuing an electronic certificate. In FIG. 2, the electronic signature device 10 includes a certificate information storage unit 100, a certificate issuance request receiving unit 101, a certificate information registration unit 102, a certificate issuance processing unit 103, an issued certificate information registration unit 104, and a registration completion. Notification means 105 is provided. The certificate information storage unit 100 includes information on a plurality of electronic certificates issued for each of a plurality of content providers (CP) or a plurality of types of contents provided by the content provider, and each of the plurality of electronic certificates. A plurality of pieces of signature information (for example, a plurality of private keys corresponding to each electronic certificate) used for the electronic signature according to the above are stored. The certificate issuance request receiving unit 101, together with a certificate issuance request for issuing a new electronic certificate, information of a content provider or content that is an issuance target of an electronic certificate (account ID or content as identification information) The definition information of the electronic certificate including the ID of the service provider is received from the communication terminal device 30 of the service provider. If the electronic certificate is issued on the date specified by the service provider instead of being issued immediately, the electronic certificate definition information may include the expected date of issue of the electronic certificate. Based on the certificate issuance request received by the certificate issuance request receiving unit 101, the certificate information registration unit 102 obtains new electronic certificate definition information including content provider corresponding to the electronic certificate or content information. , It is registered in the certificate information storage means 100. If the definition information of the electronic certificate includes the expected date of issuance of the electronic certificate, the issuance date of the electronic certificate is also registered. After the registration is completed, the registration completion notification means 105 transmits a registration completion notification indicating that the registration is completed to the communication terminal device 40 of the content provider.
The certificate issuance request and the electronic certificate definition information may be received from the communication terminal device 40 of the content provider.

  In FIG. 2, when the certificate issuance processing unit 103 determines that the predetermined issuance date has arrived based on the time information output from the clock in the electronic signature device 10, the certificate issuance storage unit Based on the definition information of the electronic certificate registered in the means 100, a certificate issuance request for requesting issuance of the electronic certificate is transmitted to the certificate authority 20. As a validity period of the new electronic certificate, a period obtained by adding a revocation grace period to a predetermined update management period is set. In addition, the certificate issuance request transmitted to the certificate authority 20 includes a public key generated in a pair with a private key for a content provider or content for which an electronic certificate is issued. The private key paired with the public key is stored in the certificate information storage unit 100 as signature information for the content. Further, the certificate issuance processing unit 103 receives data of a newly issued electronic certificate from the certificate authority 20. Also, the issued certificate information registration unit 104 receives the data of the newly issued electronic certificate received from the certificate authority 20, the content provider or content information corresponding to the electronic certificate, and the scheduled update date of the electronic certificate. The issued certificate information including the data is registered in the certificate information storage unit 100. After the registration of the issued certificate information is completed, the registration completion notification unit 105 transmits a registration completion notification indicating that the registration is completed to the communication terminal device 40 of the content provider.

  FIG. 3 is a functional block diagram showing each means for electronic signature of content based on data of issued electronic certificate. As shown in FIG. 3, the electronic signature device 10 further includes a content signature request receiving unit 106, a signature processing unit 107, and a signature completion notification unit 108. After the registration of the issued certificate information is completed, the content signature request receiving unit 106 receives a signature request for requesting an electronic signature of the content together with the content to be signed from the communication terminal device 40 of the content provider. The signature processing unit 107 reads out the digital certificate data corresponding to the content to be signed from the certificate information storage unit 100, digitally signs the content based on the digital certificate data, and stores the signed content in a predetermined storage. Save first. After the digital signature of the content is completed, the signature completion notification means 108 transmits a signature completion notification indicating that the digital signature has been completed to the communication terminal device 40 of the content provider together with information on the storage location of the signed content. . The storage location of the signed content is, for example, a one-time URL (Uniform) set in the electronic signature device 10 so that the signed content is used only once for acquisition of the signed content from the communication terminal device 40 of the content provider. Resource Locator). Upon receiving the signature completion notification, the content provider obtains the signed content by accessing the storage location of the predetermined signed content from the communication terminal device 40, and provides the predetermined content accessible from each user terminal device 70 It can be uploaded to the server 60.

  FIG. 4 is a functional block diagram showing each means for digitally signing content based on data of the digital certificate following the new issue of the digital certificate. Description of the means common to FIGS. 2 and 3 is omitted. As shown in FIG. 4, the electronic signature device 10 includes a certificate information storage unit 100, a certificate issuance request receiving unit 101, a certificate information registration unit 102, a certificate issuance processing unit 103, and an issued certificate information registration unit 104. In addition to the registration completion notification unit 105, a signature processing unit 107 and a signature completion notification unit 108 are further provided. In FIG. 4, a certificate issuance request receiving unit 101 receives content to be signed together with the certificate issuance request and electronic certificate definition information. The certificate information registration unit 102 registers the content to be signed received by the certificate issuance request reception unit 101 in the certificate information storage unit 100 together with the definition information of the electronic certificate. Then, after the registration of the issued certificate information is completed, the signature processing unit 107 reads the electronic certificate data corresponding to the content to be signed from the certificate information storage unit 100, and based on the electronic certificate data The content is digitally signed, and the signed content is stored in a predetermined storage location.

3 and 4, the content signature request receiving means 106 or the certificate issuing request receiving means 101 receives a plurality of contents as contents to be signed, and the signature processing means 107 is an electronic certificate corresponding to each content. Even if the plurality of contents are digitally signed based on the data of the certificate and the plurality of signed contents are stored as a single file (for example, a compressed file such as ZIP) in the same storage location (the same one-time URL) Good.
When digitally signing content based on the data of the newly issued electronic certificate, the electronic signature device 10 stores a predetermined storage location where the content to be signed is stored (for example, content provision by the content provider) Server), and the content to be signed may be acquired.

FIG. 5 is a functional block diagram showing each means for updating the electronic certificate. As shown in FIG. 5, the electronic signature device 10 includes an update acceptance period notifying unit 111, a certificate update request receiving unit 112, an update accepted information registration unit 113, a certificate update processing unit 114, and an updated certificate information registration unit. 115 and registration completion notification means 105. The update acceptance period notifying unit 111 transmits an update acceptance notice for the issued electronic certificate to the communication terminal device 40 of the content provider. The update acceptability notification is a notification indicating that an electronic certificate update is accepted from an update acceptance start date that goes back a predetermined update acceptance period from the scheduled update date of the electronic certificate to the day before the scheduled update date. Here, for example, one month is set as the update acceptance period. In this case, if the scheduled update date of the electronic certificate is November 1, 2008, the update acceptance period is from October 1, 2008 to 31st of the same month. The certificate update request receiving unit 112 receives a certificate update request for updating an electronic certificate from the communication terminal device 30 of the service provider. The update acceptance information registration unit 113 registers the update acceptance information in the certificate information storage unit 100 based on the certificate update request received during the predetermined update acceptance period. The update accepted information is, for example, account information or content identification information of the content provider corresponding to the electronic certificate to be updated, or identification information of the electronic certificate to be updated. After the registration of the updated information is completed, the registration completion notification unit 105 transmits an update completion notification indicating that the registration is completed to the communication terminal device 40 of the content provider.
Here, the scheduled update date of the electronic certificate is, for example, the last day of the update management period set based on the issue date of the electronic certificate or the next day.
Note that the certificate update request may be received from the communication terminal device 40 of the content provider.

  In FIG. 5, the certificate update processing unit 114 has received the scheduled update date set for the electronic certificate that has been accepted for update, based on the time information output from the clock in the digital signature device 10. If it is determined, based on the update accepted information registered in the certificate information storage unit 100, a certificate update request for requesting the update of the electronic certificate is transmitted to the certificate authority 20. As the validity period of the electronic certificate to be updated, a period obtained by adding a revocation grace period to the update management period of the electronic certificate that has been accepted for update is set. Further, the certificate update processing unit 114 receives the updated electronic certificate data from the certificate authority 20. The updated certificate information registration unit 115 also includes updated certificate information including the data of the electronic certificate and the next scheduled update date of the electronic certificate for the updated electronic certificate received from the certificate authority 20. Is registered in the certificate information storage unit 100. Further, after the registration of the updated certificate information is completed, the registration completion notification unit 105 transmits a registration completion notification indicating that the registration is completed to the communication terminal device 40 of the content provider.

  FIG. 6 is a functional block diagram showing each means for receiving a resignature request after updating the electronic certificate and resigning the content based on the updated electronic certificate data. As shown in FIG. 6, the electronic signature device 10 further includes a content resignature request receiving unit 116, a resignature processing unit 117, and a resignature completion notification unit 118. After the registration of the updated certificate information is completed, the content resignature request receiving unit 116 sends a content resignature request for requesting the content resignature from the content provider communication terminal device 40 together with the content to be signed. Receive. The resignature processing unit 117 reads the updated digital certificate data corresponding to the content to be signed from the certificate information storage unit 100, digitally signs the content based on the digital certificate data, and the signed content. Is stored in a predetermined storage location. After the content resignature is completed, the signature completion notification means 118 sends a resignature completion notification indicating that the resignature has been completed to the communication terminal device 40 of the content provider together with information on the storage location of the resigned content. Send. For example, the re-signed content storage destination is also a one-time URL set in the electronic signature device 10 so as to be used only once for obtaining the signed content from the communication terminal device 40 of the content provider. is there. Upon receiving the resignature completion notification, the content provider accesses the storage location of the predetermined resigned content from the communication terminal device 40 to acquire the resigned content, and can be accessed from each user terminal device 70. Can be uploaded to the content providing server 60.

  FIG. 7 is a functional block diagram showing each means for acquiring the content to be resigned from the server and resigning it after updating the electronic certificate. As shown in FIG. 7, the electronic signature device 10 further includes a resignature content acquisition unit 119, a resignature processing unit 117, and a resignature completion notification unit 118. Description of the means common to FIG. 6 is omitted. In FIG. 7, the resignature content acquisition unit 119 accesses the storage destination of the content to be resigned corresponding to the updated electronic certificate, and acquires the content to be resigned. The storage destination of the content to be resigned may be set in the content providing server 60 as shown in FIG. 7, or may be set in another server such as a content development server managed by the content provider. Good.

  FIG. 8 is a functional block diagram showing each means for re-signing the content based on the updated digital certificate data following the update of the digital certificate. Description of the means common to FIGS. 5 and 6 is omitted. As shown in FIG. 8, the electronic signature device 10 further includes a resignature processing unit 120 and a resignature completion notification unit 121 in addition to the units in FIGS. 5 and 6. In FIG. 8, the certificate update request receiving means 112 receives the content to be resigned together with the certificate update request. The update accepted information registration unit 113 registers the content to be resigned in the certificate information storage unit 100 together with the update accepted information. Then, after the registration of the updated certificate information is completed, the resignature processing unit 120 reads out the data of the electronic certificate corresponding to the content to be resigned from the certificate information storage unit 100, and the data of the electronic certificate The content is digitally signed based on the above, and the resigned content is stored in a predetermined storage location. Further, the resignature completion notifying unit 121 sends a resignature completion notification indicating that the digital signature has been completed, together with the storage destination information of the resigned content, to the communication terminal of the content provider after the digital signature of the content is completed. Transmit to device 40.

  6, 7, and 8, the content resignature request receiving unit 116, the resignature content receiving unit 119, or the certificate update request receiving unit 112 receives a plurality of contents as signature target contents and performs signature processing. The means 117 and 120 digitally sign the plurality of contents based on the data of the electronic certificate corresponding to each content, and store the plurality of signed contents as a single file (for example, a compressed file such as ZIP). You may preserve | save ahead (same one-time URL).

  FIG. 9 is a functional block diagram showing each means for electronic certificate deletion / revocation processing. As shown in FIG. 9, the electronic signature device 10 includes a certificate deletion request receiving unit 131, a certificate information deleting unit 132, a certificate revocation processing unit 133, and a deletion completion notification unit 134. The certificate deletion request receiving unit 131 receives a certificate deletion request for requesting deletion of an electronic certificate, and a content provider corresponding to the electronic certificate to be deleted or identification information (for example, an account ID or Content ID) from the communication terminal device 30 of the service provider. The certificate information deleting unit 132 deletes the issued certificate information corresponding to the electronic certificate to be deleted from the certificate information storage unit 100 based on the certificate deletion request. In addition, the certificate revocation processing unit 133 transmits a certificate revocation request for requesting revocation of the electronic certificate to be deleted to the certificate authority 20 and receives a response from the certificate authority 20 that the electronic certificate has been revoked. . Then, after the deletion of the issued certificate information is completed, the deletion completion notifying unit 134 transmits a deletion completion notification indicating that the deletion is completed to the communication terminal device 40 of the content provider.

  The electronic signature device 10 may be configured by a single computer device, or may be configured to operate in cooperation with a plurality of computer devices connected to a network.

FIG. 10 is a sequence diagram illustrating an example of a new digital certificate issuance and digital signature processing by the digital signature device. In this example, a case where a new electronic certificate is issued for each content provider will be described. However, a case where a new electronic certificate is issued for each content is the same process, and thus description thereof is omitted.
In FIG. 10, when a sales representative of a service provider who provides a communication service using the electronic signature device 10 receives a request for new issuance of an electronic certificate from a content provider developing content, the content provider The communication terminal device 30 is operated so that an electronic certificate is newly issued for the user. By this operation, the communication terminal apparatus 30 obtains the certificate issuance request for requesting the issuance of a new electronic certificate, the identification information of the content provider for which the electronic certificate is issued, and the expected date of issuance of the electronic certificate The definition information of the included electronic certificate is transmitted to the electronic signature device 10 (step 1). Upon receiving the certificate issuance request from the communication terminal device 30 of the service provider, the electronic signature device 10 issues the content provider identification information and the electronic certificate corresponding to the electronic certificate based on the certificate issuance request. The definition information of the new electronic certificate including the scheduled date information is registered (step 2), and a registration completion notification indicating that the registration is completed is transmitted to the communication terminal device 40 of the content provider (step 3). .

  After that, when the electronic signature device 10 determines that the predetermined issuance date has arrived (step 4), the digital signature device 10 generates a public key and private key pair for the content provider to which the electronic certificate is issued. Preparation processing for certificate issuance is executed (step 5), and a certificate issuance request including the generated public key is transmitted to the certificate authority 20 based on the definition information of the registered electronic certificate (step 6). . Here, a period obtained by adding a revocation grace period to a predetermined update management period is set as the validity period of the new electronic certificate. For example, when 12 months is set as the update management period and 1 month is set as the revocation grace period, 13 months (= 12 months + 1 month) is set as the validity period of the electronic certificate. The certificate authority 20 issues an electronic certificate used for the content provider based on the certificate issuance request received from the electronic signature device 10 and transmits it to the electronic signature device 10 (steps 7 and 8). The electronic certificate issued by the certificate authority 20 includes, for example, the public key of the content provider, the data of the electronic certificate issued by the higher-level certificate authority (for example, the root certificate authority) to the certificate authority 20, and the content provider. Information. The electronic signature apparatus 10 issues an issued certificate that includes data of a newly issued electronic certificate received from the certificate authority 20, information of a content provider corresponding to the electronic certificate, and data of a scheduled update date of the electronic certificate. The information is registered (step 9), and a registration completion notification indicating that the registration is completed is transmitted to the communication terminal device 40 of the content provider (step 10).

  The content provider receives the registration completion notification indicating that the registration of the issued certificate information is completed at the communication terminal device 40, and then prepares the content to be digitally signed and performs the electronic signature on the content. The communication terminal device 40 is operated. By this operation, the communication terminal device 40 transmits a signature request for requesting an electronic signature of the content together with the content to be signed to the electronic signature device 10 (step 11). When the electronic signature device 10 receives the signature request and the content to be signed from the communication terminal device 40 of the content provider, the electronic signature device 10 reads the data of the electronic certificate corresponding to the content to be signed, and based on the data of the electronic certificate The content is digitally signed, and the signed content is stored in a predetermined storage location (step 12). Here, the content signature processing includes, for example, encryption processing for encrypting content with a predetermined secret key corresponding to the content provider, signature data generation processing for generating signature data with the secret key, Signed content generation processing for generating signed content having encrypted content, signature data, and digital certificate data. After the digital signature of the content is completed, the electronic signature device 10 sends a signature completion notification indicating that the digital signature has been completed, together with a one-time URL that is information on the storage location of the signed content, to the communication terminal device of the content provider 40 (step 13). Upon receiving the signature completion notification, the content provider operates the communication terminal device 40 so as to acquire the signed content. By this operation, the communication terminal device 40 accesses the one-time URL of the electronic signature device 10 to acquire signed content (steps 14 and 15), and a predetermined content providing server 60 accessible from each user terminal device 70. (Step 16). When the signed content is acquired by the communication terminal device 40, the signed content stored in the one-time URL of the electronic signature device 10 is deleted.

  In FIG. 10, when the digital certificate is issued immediately, it is not necessary to include information on the expected date of issue in the definition information of the electronic certificate, and whether the predetermined expected date of issue has arrived. This determination (step 4) is not necessary.

FIG. 11 is a sequence diagram illustrating another example of processing for newly issuing an electronic certificate and processing an electronic signature by the electronic signature device. Also in this example, a case where a new electronic certificate is issued for each content provider will be described, and a case where a new electronic certificate is issued for each content will be the same process, and thus description thereof will be omitted. Further, the description of the same processing as in FIG. 10 is omitted.
In FIG. 11, the communication terminal device 30 of the service provider issues a certificate issuance request that requests the issuance of a new electronic certificate, as well as the identification information of the content provider to which the electronic certificate is issued and the issuance of the electronic certificate. The electronic certificate definition information including the scheduled date and the content to be digitally signed are transmitted to the electronic signature device 10 (step 1). Upon receiving a certificate issuance request or the like from the communication terminal device 30 of the service provider, the electronic signature device 10 receives the content provider identification information corresponding to the electronic certificate and the electronic certificate based on the certificate issuance request. The definition information of the new electronic certificate including the information on the scheduled issue date and the content to be digitally signed are registered (step 2).
Then, the electronic signature device 10 is issued including the data of the newly issued electronic certificate received from the certificate authority 20, the information of the content provider corresponding to the electronic certificate, and the data of the scheduled update date of the electronic certificate. After registering the certificate information (step 9), the electronic certificate data corresponding to the content to be signed received together with the certificate issuance request is read, and the content is electronically stored based on the electronic certificate data. The signature is signed, and the signed content is stored in a predetermined storage location (step 10).

  In FIG. 11 as well, when issuing an electronic certificate immediately, it is not necessary to include information on the expected date of issue in the definition information of the electronic certificate, and whether or not the predetermined expected date of issue has arrived. It is not necessary to make a determination (step 4).

FIG. 12 is a sequence diagram illustrating an example of digital certificate update and resignature processing by the digital signature device. In this example as well, a case where a new electronic certificate is issued for each content provider will be described. Since the same process is performed when a new electronic certificate is issued for each content, the description is omitted.
In FIG. 12, the electronic signature device 10 transmits an update acceptance notice for the issued electronic certificate to the communication terminal device 40 of the content provider (step 1). Here, the notification indicating that the update can be accepted is a notification indicating that the update of the electronic certificate is accepted from the update reception start date that goes back a predetermined update reception period from the planned update date of the electronic certificate to the day before the scheduled update date. It is. The scheduled update date of the electronic certificate is, for example, the last day of the update management period set based on the issue date of the electronic certificate or the next day.

  Upon receiving the update acceptance notice, the content provider renews the electronic certificate used for the content provider within the predetermined update acceptance period notified by the update acceptance notice. Ask the sales representative of the service provider that provides the used communication service. Upon receiving a request for renewal of the electronic certificate from the content provider, the sales representative operates the communication terminal device 30 so as to renew the electronic certificate used for the content provider. By this operation, the communication terminal apparatus 30 transmits a certificate update request for requesting the update of the electronic certificate to the electronic signature apparatus 10 (step 2). Upon receiving the certificate update request from the communication terminal device 30 of the service provider, the electronic signature device 10 registers the update accepted information based on the certificate issuance request (step 3), and the registration is completed. Is sent to the communication terminal device 40 of the content provider (step 4). The update accepted information is, for example, account information of the content provider corresponding to the electronic certificate to be updated or identification information of the electronic certificate to be updated.

  Thereafter, when the electronic signature device 10 determines that the predetermined update scheduled date has arrived (step 5), it newly generates a public / private key pair for the content provider to which the electronic certificate is issued, etc. Then, preparation processing for certificate update is executed (step 6), and a certificate update request including the newly generated public key is transmitted to the certificate authority 20 based on the registered update acceptance information (step 6). 7). Here, as a new valid period of the electronic certificate to be renewed, a period obtained by adding a revocation grace period to a predetermined renewal management period based on the renewal date is set. For example, when 12 months is set as the update management period and 1 month is set as the revocation grace period, 13 months (= 12 months + 1 month) is set as the validity period of the electronic certificate. The certificate authority 20 updates the electronic certificate used for the content provider based on the certificate update request received from the electronic signature device 10 and transmits the updated electronic certificate data to the electronic signature device 10. (Steps 8 and 9). The updated electronic certificate data issued by the certificate authority 20 includes, for example, the public key of the content provider, the electronic certificate issued to the certificate authority 20 by a higher-level certificate authority (for example, the root certificate authority), Content provider information. The electronic signature device 10 has updated certificate information including the updated electronic certificate data received from the certificate authority 20, the content provider information corresponding to the electronic certificate, and the scheduled update date data of the electronic certificate. Is registered (step 10), and a registration completion notification indicating that the registration is completed is transmitted to the communication terminal device 40 of the content provider (step 11).

  The content provider receives the registration completion notification indicating that the registration of the updated certificate information is completed at the communication terminal device 40, then prepares the content to be resigned and re-signs the content. The communication terminal device 40 is operated. By this operation, the communication terminal device 40 transmits a signature request for requesting an electronic signature of the content based on the updated electronic certificate data to the electronic signature device 10 together with the content to be resigned (step 12). When receiving the signature request and the content to be resigned from the communication terminal device 40 of the content provider, the electronic signature device 10 reads the updated electronic certificate data corresponding to the content to be resigned, and the electronic certificate The content is digitally signed based on the data of the certificate, and the signed content is stored in a predetermined storage location (step 13). After the resignature of the content is completed, the electronic signature device 10 sends a signature completion notification indicating that the resignature has been completed together with a one-time URL that is information on the storage location of the signed content to the communication terminal device of the content provider 40 (step 14). Upon receiving the signature completion notification, the content provider operates the communication terminal device 40 so as to obtain the signed content that has been re-signed based on the updated digital certificate data. By this operation, the communication terminal device 40 accesses the one-time URL of the electronic signature device 10 to acquire signed content (steps 15 and 16), and a predetermined content providing server 60 accessible from each user terminal device 70. (Step 17). When the signed content is acquired by the communication terminal device 40, the signed content stored in the one-time URL of the electronic signature device 10 is deleted.

  FIG. 13 is a sequence diagram illustrating another example of digital certificate update and resignature processing by the digital signature device. In this example, the content to be resigned corresponding to the updated electronic certificate is not received from the communication terminal device 40 of the content provider, but is a predetermined storage location where the content to be resigned is stored. In this example, the content providing server 60 is accessed to acquire the content to be resigned. Also in this example, a case where a new electronic certificate is issued for each content provider will be described, and a case where a new electronic certificate is issued for each content will be the same process, and thus description thereof will be omitted. Also, the description of the same processing as in FIG. 12 is omitted.

  In FIG. 13, the electronic signature device 10 transmits a registration completion notification indicating that the registration of the updated certificate information is completed to the communication terminal device 40 (step 11), and then a content providing server that is a predetermined storage destination The designated URL 60 is accessed, and the content to be resigned is acquired (steps 12 and 13). Here, the information of the URL specified by the content providing server 60 is included in the certificate update request transmitted from the communication terminal device 30 of the service provider to the electronic signature device 10 in step 2, for example, or other appropriate It is transmitted from the communication terminal device 40 of the content provider to the electronic signature device 10 at a proper timing. After acquiring the content to be resigned from the content providing server 60, the electronic signature device 10 reads the data of the updated electronic certificate corresponding to the content to be resigned, and based on the data of the electronic certificate The content is digitally signed, and the signed content is stored in a predetermined storage location (step 14).

  FIG. 14 is a sequence diagram illustrating still another example of processing for updating and re-signing an electronic certificate by the electronic signature device. In this example, the content to be resigned is not received from the communication terminal device 40 of the content provider after the update process of the electronic certificate, but the content is resigned following the update process of the electronic certificate. It is an example. Also in this example, a case where a new electronic certificate is issued for each content provider will be described, and a case where a new electronic certificate is issued for each content will be the same process, and thus description thereof will be omitted. Also, the description of the same processing as in FIG. 12 is omitted.

In FIG. 14, the communication terminal device 30 of the service provider converts the content to be resigned to be resigned based on the updated electronic certificate together with the certificate update request for updating the electronic certificate. It transmits to the apparatus 10 (step 2). When receiving the certificate update request from the communication terminal device 30 of the service provider, the electronic signature device 10 registers the update accepted information based on the certificate update request (step 3).
Then, the electronic signature device 10 receives the updated certificate including the updated electronic certificate data received from the certificate authority 20, the content provider information corresponding to the electronic certificate, and the scheduled update date data of the electronic certificate. After registering the certificate information (step 10), the electronic certificate data corresponding to the content to be resigned received together with the certificate renewal request is read, and the electronic certificate is read into the content based on the electronic certificate data. The signature is signed and the signed content is stored in a predetermined storage location (step 11).

FIG. 15 is a sequence diagram illustrating an example of an electronic certificate deletion / revocation process by the electronic signature device. In this example, the case where the digital certificate issued for each content provider is deleted or revoked is explained. However, the case where the electronic certificate issued for each content is deleted or revoked is the same process, so it is explained. Is omitted.
In FIG. 15, when the sales representative of the service provider who provides the communication service using the electronic signature device 10 determines that the electronic certificate issued for the content provider is to be revoked for some reason, the content The communication terminal device 30 is operated so that the electronic certificate issued for the provider is revoked. By this operation, the communication terminal apparatus 30 receives a certificate deletion request for requesting deletion of the electronic certificate, and identification information (account ID) that can identify the content provider corresponding to the electronic certificate to be deleted. Is transmitted to the electronic signature device 10 (step 1). Here, when deleting or revoking an electronic certificate issued for each content individually, it is possible to identify the certificate deletion request that requests the deletion of the electronic certificate and the content corresponding to the electronic certificate to be deleted Identification information (content ID) is transmitted. Upon receiving the certificate deletion request from the communication terminal device 30 of the service provider, the electronic signature device 10 deletes the issued certificate information corresponding to the electronic certificate to be deleted based on the certificate deletion request ( Along with step 2), a certificate revocation request for requesting revocation of the electronic certificate to be deleted is transmitted to the certificate authority 20 (step 3). Here, when an electronic certificate for each content is issued for the content developed by the content provider corresponding to the electronic certificate to be deleted, the electronic signature device 10 issues the electronic certificate issued for the content provider. The issued certificate information of the certificate may be deleted, and the issued certificate information of the electronic certificate issued for the content developed by the content provider may be deleted together. The electronic signature device 10 may also send a certificate revocation request for requesting revocation of an electronic certificate issued for the content developed by the content provider to the certificate authority 20 together.

  Based on the certificate revocation request received from the electronic signature device 10, the certificate authority 20 executes a revocation process for revoking the electronic certificate and listing the electronic certificate in a revocation list (step 4). Here, when an electronic certificate for each content is issued for the content developed by the content provider corresponding to the electronic certificate to be revoked, the certificate authority 20 issues the electronic certificate issued for the content provider. The revocation processing of the electronic certificate issued for the content developed by the content provider may be performed together. When the revocation process is completed, the certificate authority 20 transmits a response to the effect that the electronic certificate has been revoked to the electronic signature device 10 (step 5).

Upon receiving a response from the certificate authority 20 that the electronic certificate has expired, the electronic signature device 10 sends a deletion completion notification indicating that the deletion of the issued certificate information of the electronic certificate has been completed by the content provider. It transmits to the communication terminal device 40 (step 6). The deletion completion notification may be transmitted not only to the content provider's communication terminal device 40 but also to the service provider's communication terminal device 30.
As described above, the electronic certificate issued for the content provider corresponding to the account ID is immediately revoked simply by specifying the account ID and sending a certificate deletion request to the electronic signature device 10. At the same time, the issued certificate information of the electronic certificate can be deleted from the electronic signature device 10.

As described above, according to the present embodiment, the electronic certificate definition information related to the issuance of the electronic certificate requested for the content provider is registered in the electronic signature device 10. This makes it possible to centrally manage the new digital certificate issuance processing for a plurality of content providers to which the digital certificate is issued. Moreover, since the electronic signature device 10 performs a new issuance processing of the electronic certificate on the certificate authority 20 when a predetermined scheduled date of issue arrives or immediately, the content provider There is no need to directly apply for a new issue to the certificate authority 20. Therefore, it is possible to reduce the work burden when a new digital certificate used for digital signature of contents is issued.
Further, issued certificate information of an electronic certificate issued for the content provider is registered in the electronic signature device 10. Therefore, it is possible to centrally manage electronic certificate new issue processing and newly issued electronic certificates used for a plurality of content providers.
In addition, even if the digital certificate renewal process based on the renewal management period set in the validity period of the newly issued digital certificate is not executed for some reason, it was added to the renewal management period. Since the electronic certificate is not suddenly revoked during the revocation grace period, it is possible to avoid revocation of the electronic certificate against the will of the content provider.

  FIG. 16 is a block diagram showing an example of a schematic configuration of a user terminal device 70 that can download and use a signed content uploaded to the content providing server 60. The user terminal device 70 of the present embodiment includes a main control unit 720 as a control unit, an internal memory 721 as a storage unit, a wireless communication unit 722 as a communication unit that performs communication via the mobile communication network 51, and an antenna. 712, a display unit 725 as a display unit, and a key operation unit 726 as an operation unit.

  In addition, the user terminal device 70 includes an application execution management unit 727 as an application execution management unit that builds and manages an execution environment for executing various application programs (hereinafter, abbreviated as “application” as necessary). In addition. Examples of the application include an application called a widget and an application made up of a program written in a program language such as JAVA (registered trademark), C, C ++, or the like. Each application is executed on a dedicated execution environment such as a widget execution environment or a JAVA (registered trademark) virtual machine (VM).

The main control unit 720 includes, for example, a CPU, a cache memory, a ROM, a system bus, and the like, and transmits and receives data to and from each unit such as the internal memory 721 and the wireless communication unit 722 by executing a predetermined control program. And control each part. The main control unit 720 is connected to a microphone 708 as a sound input unit and a speaker 709 as a sound output unit via a sound signal processing unit 723. In addition, a display unit 725 is connected to the main control unit 720 via a display control unit 724 serving as a display control unit. Further, the main control unit 720 is also connected with a key operation unit 726 operated by a user when instructing various processes or inputting various data. The main control unit 720 transmits and receives various commands and data to and from the application execution management unit 727.
In addition, the main control unit 720 stores application data acquired from the content providing server 60 in a predetermined folder of the internal memory 721, and various messages transmitted to and received from user terminal devices such as other mobile phones. It also functions as a means for saving to a predetermined folder. Further, the main control unit 720 cooperates with the wireless communication unit 722 and the like to transmit / receive messages and data to / from means for acquiring application data from the content providing server 60 and other user terminal devices such as mobile phones. It also functions as a means to

The wireless communication unit 722 and the antenna 712 as the communication means perform wireless communication with a base station on the mobile communication network 51 side by a predetermined communication method.
The internal memory 721 is constituted by a semiconductor memory such as a RAM or a ROM, for example, and stores a program executed by the main control unit 720 and various data. As these storage means, instead of the internal memory 721, a storage medium such as a memory card or an IC card that can be attached to and detached from the user terminal device body may be used.
The display control unit 724 performs control to display an image on the display unit 725 based on the drawing data sent from the main control unit 720. The display unit 725 is configured using a liquid crystal panel, for example, and displays various images based on data stored in the internal memory 721. The display unit 725 can display various screens related to the application, such as an application list screen in which executable applications are listed, an application startup setting screen, and an application startup confirmation screen.
The speaker 709 receives the analog signal converted from the digital signal by the sound signal processing unit 723, and outputs a voice during a call, or outputs a mail ringtone, a telephone ringing tone, music, or the like. The sound generating means including the speaker 709 and the sound signal processing unit 723 reproduces and outputs a sound effect and music (music, melody) using an attached file attached to the received mail. Can be controlled. The speaker 709 may be configured by separately providing a receiver speaker (receiver) for listening to a voice during a call and an external output speaker for outputting a ring tone, music, or the like. You may comprise by one speaker so that the speaker for receivers and the speaker for external outputs may be combined.
The key operation unit 726 includes data input keys (ten key, * key, # key), a call start key, a call end key, a scroll key, a multi-function key, and the like. This is used when instructing display mode switching or inputting information.
The microphone 708 converts the user's voice into an electrical signal (analog signal). An audio electrical signal (analog signal) output from the microphone 708 is input to the sound signal processing unit 723 and converted into a digital signal.

FIG. 17 is a flowchart illustrating an example of processing of the user terminal device 70 when downloading and registering the content of a signed application from the content providing server 60. The application of this example is an application that can be downloaded only when the electronic certificate used for electronic signature on the content of the application has not expired.
In FIG. 17, first, the user operates the user terminal device 70 to activate a WEB browser, and accesses an application download site (steps 101 and 102). When the user selects a desired application from the list of applications displayed on the screen of the user terminal device 70 (step 103), the user terminal device 70 receives signed download information of the selected application (step 104). ). This signed download information is also referred to as a “descriptive”. Information on the URL where the main data of the application can be downloaded and an electronic certificate of the end entity corresponding to the content provider who developed the application (hereinafter referred to as “EE electronic”). Certificate ") data. The user terminal device 70 uses a signature verification program or a root certificate incorporated in the device in advance to check whether the EE electronic certificate is issued from a trusted certificate authority and whether the download information is halfway In step 105, verification processing such as whether or not tampering has occurred is performed. Next, the user terminal device 70 acquires a revocation list (CRL) of the electronic certificate from the predetermined certificate authority 20 and determines whether or not the EE electronic certificate exists in the revocation list, that is, the EE electronic certificate. Is determined whether or not has expired (steps 106 and 107). Here, if the EE electronic certificate is present in the revocation list, the user terminal device 70 is controlled so that the main data of the application cannot be downloaded because the EE electronic certificate has already been revoked. Is done. On the other hand, if the EE electronic certificate does not exist in the revocation list, the EE electronic certificate is valid, so the user terminal device 70 is controlled so that the main data of the application can be downloaded. In this case, when the user instructs the download by operating the user terminal device 70, the data body of the selected application is downloaded (step 108). The application data that has been downloaded is subjected to post-processing such as decryption with the public key included in the EE electronic certificate data. The post-processed application data is stored in a predetermined folder in the internal memory and registered as an executable application.

FIG. 18 is a flowchart showing an example of processing of the user terminal device 70 when starting the downloaded application. The application of this example is an application that can be activated only when the electronic certificate used for electronic signature on the content of the application has not expired.
In FIG. 18, first, the user operates the user terminal device 70 to display an application execution menu (step 201). When the user selects a desired application from the list of applications displayed on the screen of the user terminal device 70 (step 202), the user terminal device 70 obtains a revocation list (CRL) of an electronic certificate from a predetermined certificate authority 20. It is obtained, and it is determined whether or not the EE electronic certificate of the selected application exists in the revocation list, that is, whether or not the EE electronic certificate has been revoked (steps 203 and 204). Here, if the EE electronic certificate is present in the revocation list, the user terminal apparatus 70 is controlled so that the application cannot be activated because the EE electronic certificate has already been revoked. On the other hand, when the EE electronic certificate does not exist in the revocation list, the EE electronic certificate is valid, so the user terminal device 70 is controlled so that the application can be activated. In this case, when the user instructs activation by operating the user terminal device 70, the selected application is activated (step 205).

  In the examples of FIGS. 17 and 18, the revocation list is acquired by accessing the certificate authority 20 from the user terminal device 70 at the time of downloading and when the application is started, respectively, but other revocation list acquisition methods are adopted. May be. For example, the latest revocation list is distributed to a plurality of user terminal devices 70 that can use signed application content by using a PUSH type information distribution system at a predetermined timing or an arbitrary timing. You may do it.

DESCRIPTION OF SYMBOLS 10 Electronic signature apparatus 20 Certification authority 30 Service provider's communication terminal apparatus 40 Content provider's communication terminal apparatus 50 Internet 51 Mobile communication network 60 Content providing server 70 User terminal apparatus

Claims (2)

The content of the electronic signature application based on the electronic certificate data a communication terminal device that can be downloaded via a communications network from a server,
Prior to downloading the main data of the content of the application, download information including URL information that can download the main data and data of the electronic certificate used for the electronic signature corresponding to the provider of the application is received. Download information receiving means;
An electronic certificate revocation list acquisition means for acquiring an electronic certificate revocation list from a certificate authority;
After receiving the download information, obtain an electronic certificate revocation list from a certificate authority, and whether the electronic certificate of the application to be downloaded exists in the electronic certificate revocation list obtained from the certificate authority If the electronic certificate does not exist in the electronic certificate revocation list, the content of the application is downloaded from the server based on the download information, and the electronic certificate is displayed in the electronic certificate revocation list. Control means for controlling not to download the contents of the application when the document exists;
A communication terminal device comprising: The communication terminal device according to claim 1 ,
When the activation of the downloaded application based on the download information is accepted, the electronic certificate revocation list is obtained from the certificate authority , and the application of the application to be activated is added to the electronic certificate revocation list obtained from the certificate authority . It is determined whether or not the electronic certificate used for the electronic signature corresponding to the provider exists, and when the electronic certificate does not exist in the electronic certificate revocation list, the application is started, communication terminal apparatus characterized by comprising a control means to control so as not to start the application when the electronic certificate to the electronic certificate revocation list is present.