JP6667371B2 - Communication system, communication device, communication method, and program - Google Patents

Description

  An embodiment of the present invention relates to a communication system, a communication device, a communication method, and a program.

  In recent years, a service that generates and manages an electronic key for a door by executing an application installed on a smartphone or tablet has been known (for example, see Non-Patent Document 1).

“Akerun SMART LOCK ROBOT”, [online], Photosynth Inc., [Search May 16, 2016], Internet <URL: http: // akerun. com>

For example, a key is generated by a SIM (Subscriber Identity Module), and among the door keys to be managed, a public key certificate is issued to a sharing partner to authenticate the partner in order to share the key with a user other than the door device owner. And authority management. In this case, each time the user uses a different door device, it is necessary to issue and give and receive a public key certificate, which complicates the procedure for use.
If a single public key certificate can be used for a plurality of door devices, convenience for the user is improved. However, if the public key certificate is revoked according to the shortest validity period, the right to use all the door keys paired with the revoked public key certificate is lost.
The above problem applies not only to the door key but also to a device that performs a predetermined operation.
The present invention has been made to solve the above-described problem, and an object of the present invention is to share an electronic key with a device that performs a predetermined operation, and to perform a predetermined operation on the device using the electronic key. An object of the present invention is to flexibly manage the authority of an electronic key in a communication system to be performed.

(1) One embodiment of the present invention is a communication system including a first communication device and a second communication device that performs communication with the first communication device, wherein the first communication device includes a first communication device. A first obtaining unit for obtaining a client public key certificate stored in a second storage unit included in the terminal device, and a public key certificate of a public key generated by the terminal device; A first authentication processing unit that performs client authentication based on the client public key certificate obtained by the first obtaining unit; and a first authentication processing unit that performs a client authentication when the result of the client authentication is successful. And storing, in the first storage unit, account information of a user of the terminal device, a serial number of the public key certificate, and identification information of a second communication device for performing a predetermined operation using the public key certificate. , Register with the expiration date A registration unit; a list creation unit that creates a list of serial numbers of public key certificates that have not expired among the serial numbers of the public key certificates stored in the first storage unit; A first communication unit that transmits the list created by the list creation unit to the second communication device, wherein the second communication device receives the list sent by the first communication device A third communication unit, a third storage unit that stores the list received by the third communication unit, the client public key certificate stored in the second storage unit included in the terminal device, A third obtaining unit that obtains the public key certificate of the public key generated by the terminal device, and whether the public key certificate obtained by the third obtaining unit is included in the list. A verification unit for verifying the A third authentication processing unit that performs client authentication based on the client public key certificate acquired by the third acquisition unit when the verification is successful; And a control unit that performs a predetermined operation when the authentication is successful.
(2) In one aspect of the present invention, in the communication system according to (1), the first communication device includes the serial number of the public key certificate included in the list created by the list creating unit. A communication system, comprising: a setting unit that sets an expiration date of the public key certificate in association with the expiration date, and the list creation unit updates the list based on the expiration date set by the setting unit.
(3) In one aspect of the present invention, in the communication system according to (1) or (2), the terminal device includes a certificate authority that issues a public key certificate, and the second storage unit includes , A communication system that is a storage area that cannot be accessed from outside.
(4) In an aspect of the present invention, in the communication system according to any one of (1) to (3), the terminal device transmits a challenge transmitted by the second communication device to the second communication device. A second encryption processing unit for generating a response by encrypting with a private key paired with the public key registered in the public key certificate stored in the second storage unit, and the second communication device A second communication unit for receiving the challenge transmitted by the second communication unit and transmitting a response generated by the second encryption processing unit to the second communication device, wherein the second communication device A third encryption processing unit that generates and decrypts the response transmitted by the terminal device with the public key when the client authentication is successful by the third authentication processing unit; Said And verifying the response decrypted by the third cryptographic processing unit based on the challenge generated by the third cryptographic processing unit, wherein the third communication unit verifies the response generated by the third cryptographic processing unit. A communication system for transmitting a challenge to the terminal device, receiving a response transmitted by the terminal device, and performing the predetermined operation when the verification by the verification unit is successful.
(5) In one aspect of the present invention, in the communication system according to (4), the control unit associates the terminal with the serial number of the public key certificate included in the list as status information. The apparatus stores information indicating that the client authentication has not been performed, and the verification unit, if the verification is successful, as the status information associated with the serial number of the public key certificate, A communication system that performs the predetermined operation when information indicating that client authentication is not performed is not stored.
(6) One embodiment of the present invention provides a first storage unit, a client public key certificate stored in a second storage unit included in the terminal device, and a public key certificate of a public key generated by the terminal device. A first obtaining unit that obtains the client certificate, a first authentication processing unit that performs client authentication based on the client public key certificate obtained by the first obtaining unit, and a first authentication processing unit. When the result of the client authentication is successful, the first storage unit stores a predetermined operation based on the account information of the user of the terminal device, the serial number of the public key certificate, and the public key certificate. A registration unit that registers identification information of another communication device to be performed and an expiration date in association with each other, and an expiration date of the serial number of the public key certificate stored in the first storage unit. No public key certification A list creation unit that creates a list of the serial numbers, the list which the list creation section creates a communication device and a first communication unit for transmitting to the second communication device.
(7) One aspect of the present invention is a third method for acquiring a client public key certificate stored in a second storage unit included in the terminal device and a public key certificate of a public key generated by the terminal device. An acquiring unit, a validating unit that verifies whether the public key certificate acquired by the third acquiring unit is included in a serial number list of a public key certificate that has not expired, A third authentication processing unit that performs client authentication based on the client public key certificate acquired by the third acquisition unit when the verification is successful, and a third authentication processing unit A control unit that performs a predetermined operation when the client authentication is successful.
(8) One embodiment of the present invention is a communication method executed by a first communication device and a second communication device that communicates with the first communication device, wherein the first communication device includes a terminal. Obtaining a client public key certificate stored in a second storage unit included in the device and a public key certificate of a public key generated by the terminal device, based on the obtained client public key certificate, Performing client authentication, and performing a predetermined operation based on the account information of the user of the terminal device, the serial number of the public key certificate , and the public key certificate when the result of the client authentication is successful. steps and, among the serial numbers of the stored the public key certificate, a public key expiration date has not come to be registered in association with identification information of the second communication device, and a valid period for Performing a step of creating a list of serial numbers of a certificate, and transmitting the list created in the step of creating the list to the second communication device, wherein the second communication device Receiving the list transmitted by the first communication device, the client public key certificate stored in the second storage unit included in the terminal device, and the public key generated by the terminal device. Obtaining a public key certificate; and verifying whether or not the obtained public key certificate is included in the list.If the verification is successful, the obtained client public key certificate And performing a predetermined operation when the client authentication is successful.
(9) One embodiment of the present invention provides, in a computer of a first communication device, a client public key certificate stored in a second storage unit provided in a terminal device and a public key certificate of a public key generated by the terminal device. And a step of performing client authentication based on the obtained client public key certificate; and, if the result of the client authentication is successful, account information of a user of the terminal device; Registering the serial number of the public key certificate, identification information of another communication device that causes the public key certificate to perform a predetermined operation, and an expiration date; and Creating a list of public key certificates whose expiration date has not expired among the serial numbers, and the list created in the step of creating the list , And a step of transmitting to the second communication device, a program.
(10) One aspect of the present invention is a step of receiving, in a computer of a second communication device, a list of serial numbers of public key certificates transmitted by the first communication device that have not expired, Acquiring a client public key certificate stored in a second storage unit included in the device and the public key certificate of a public key generated by the terminal device; and acquiring the public key certificate into the list. Verifying whether it is included in, and, if the verification is successful, performing client authentication based on the obtained client public key certificate; and, if the client authentication is successful, a predetermined And a step of performing an operation.

  According to the embodiment of the present invention, in a communication system in which an electronic key is shared with a device performing a predetermined operation and the device performs the predetermined operation using the electronic key, the authority of the electronic key is determined. Can be managed flexibly.

FIG. 1 is a configuration diagram illustrating a communication system according to an embodiment. FIG. 4 is a diagram illustrating an example of a key management table. 6 is a sequence chart illustrating an example of an operation (part 1) of the communication system according to the embodiment. 6 is a sequence chart illustrating an example of an operation (part 2) of the communication system according to the embodiment. FIG. 14 is a configuration diagram illustrating a communication system according to a modification. 13 is a sequence chart illustrating an example of an operation (part 1) of the communication system according to the modification. 15 is a sequence chart illustrating an example of an operation (part 2) of the communication system according to the modification.

Next, an embodiment for carrying out the present invention will be described with reference to the drawings. The embodiment described below is merely an example, and the embodiment to which the present invention is applied is not limited to the following embodiment.
In all the drawings for describing the embodiments, components having the same function are denoted by the same reference numerals, and repeated description is omitted.

<Embodiment>
FIG. 1 is a configuration diagram illustrating a communication system 1 according to the embodiment. In FIG. 1, the communication system 1 includes a device 2, a control device 3, and a management device 4.
The device 2 includes a secure element (Secure Element) such as a SIM (Subscriber Identity Module) 100, a communication unit 130, and a control unit 140. An example of the device 2 is a terminal device such as a mobile phone, a smartphone, and a tablet terminal, an IC card, and the like.
The SIM 100 stores the SIM identification information simid1. The SIM identification information simid1 is identification information unique to the SIM 100.
The SIM 100 includes a key generation unit 101, a public key certificate generation unit 102, an encryption processing unit 104, a storage unit 105, and a secret key storage unit 106.

The control device 3 includes a secure element such as the SIM 200, a communication unit 230, and a control unit 240.
The SIM 200 stores the SIM identification information simid2. The SIM identification information simid2 is identification information unique to the SIM 200. The SIM 200 includes an authentication processing unit 202, a verification unit 203, an encryption processing unit 204, and a storage unit 205. Note that a plurality of control devices may be used instead of a single control device, and each of the plurality of control devices may have different SIM identification information.

  The SIM 100 is a SIM issued to a user authenticated by a communication carrier. The user is a user who uses the network of the communication carrier. The SIM identification information simid1 of the SIM 100 is stored in the communication carrier database 10 in association with the user identification information of the user authenticated by the communication carrier. Here, the user who uses the network of the communication carrier, in other words, the user who issued the SIM by the communication carrier and the user of the device in which the SIM is incorporated may be the same or different. Further, the user identification information of the user authenticated by the communication carrier may use the telephone number of the user. Similar to the SIM 100, the SIM 200 is a SIM issued to a user authenticated by a communication carrier. The SIM identification information simid2 of the SIM 200 is stored in the carrier database 10 in association with the user identification information of the user authenticated by the carrier. Note that the SIM 100 and the SIM 200 may be SIMs issued to a user authenticated by a virtual network operator (Virtual Network Operator).

  As the SIM identification information, for example, an IMSI (International Mobile Subscriber Identity) or an ICCID (Integrated Circuit Card ID) may be used. Further, the user identification information associated with the SIM 100 or the SIM 200 may be used as the SIM identification information of the SIM 100 or the SIM identification information of the SIM 200.

  The management device 4 includes a storage unit 300, a communication unit 325, an authentication processing unit 302, a registration unit 304, a list creation unit 306, and a control unit 345. The storage unit 300 stores a key management table 305.

  The communication unit 130 of the device 2 communicates with the communication unit 325 of the management device 4 and the communication unit 230 of the control device 3. Communication between the communication unit 130 of the device 2 and the communication unit 325 of the management device 4 and communication between the communication unit 230 of the control device 3 may be wireless communication or wired communication. For example, the communication unit 130 of the device 2, the communication unit 325 of the management device 4, and the communication unit 230 of the control device 3 may perform communication via a wireless communication network such as a wireless LAN or a mobile phone network.

  Alternatively, the communication unit 130 of the device 2 and the communication unit 325 of the management device 4 and the communication unit 230 of the control device 3 perform communication by directly transmitting and receiving signals using short-range wireless communication technology such as Bluetooth (registered trademark). May go. Alternatively, the communication unit 130 of the device 2 may communicate with the communication unit 325 of the management device 4 and the communication unit 230 of the control device 3 via a communication network such as the Internet, a fixed telephone network, or a wired LAN. Alternatively, the communication unit 130 of the device 2 and the communication unit 325 of the management device 4 and the communication unit 230 of the control device 3 may be connected by a communication cable to perform communication.

  The control unit 140 of the device 2, the control unit 240 of the control device 3, and the control unit 345 of the management device 4 each include a CPU (Central Processing Unit) and a memory. , And an application 350.

The SIM 100 and the SIM 200 are a kind of computer, and realize desired functions by a computer program.
In the SIM 100, the storage unit 105 stores a pair of a certification authority public key certificate C_Krp and a certification authority private key Krs. The certificate authority public key certificate C_Krp is a public key certificate of a certificate authority public key Krp (not shown) of a pair of the certificate authority private key Krs. The CA public key certificate C_Krp and the CA private key Krs are securely stored in the SIM 100, for example, when the SIM 100 is manufactured.
Further, the storage unit 105 stores a pair of the client public key certificate C_Kkp and the client private key Kks. The client public key certificate C_Kkp is a public key certificate of the client public key Kkp (not shown) of the pair of the client private key Kks. The client public key certificate C_Kkp and the client private key Kks are securely stored in the SIM 100, for example, when the SIM 100 is manufactured.

The storage unit 105 is provided in a non-volatile storage area that cannot be accessed from outside the SIM 100 among storage areas in the SIM 100. Therefore, the certification authority public key certificate C_Krp, the certification authority private key Krs, the client public key certificate C_Kkp, and the client private key Kks stored in the storage unit 105 are not accessed from outside the SIM 100. Further, the SIM 100 has tamper resistance. Therefore, the certificate authority public key certificate C_Krp, the certificate authority secret key Krs, the client public key certificate C_Kkp, and the client secret key Kks stored in the storage unit 105 are protected from attacks on the SIM 100.
The storage unit 205 is provided in a non-volatile storage area that cannot be accessed from outside the SIM 200 among storage areas in the SIM 200.

  The key generation unit 101 generates a pair of a public key and a secret key. The public key certificate generation unit 102 generates a public key certificate using the pair of the certificate authority public key certificate C_Krp and the certificate authority private key Krs stored in the storage unit 105. The secret key storage unit 106 stores a secret key paired with the public key certificate generated by the public key certificate generation unit 102. Like the storage unit 105, the secret key storage unit 106 is provided in a non-volatile storage area that cannot be accessed from outside the SIM 100 among storage areas in the SIM 100. Therefore, the secret key stored in the secret key storage unit 106 is not accessed from outside the SIM 100. Further, since the SIM 100 has tamper resistance, the secret key stored in the secret key storage unit 106 is protected from an attack on the SIM 100.

The authentication processing unit 202 performs client authentication based on the client public key certificate transmitted by the device 2.
The verification unit 203 verifies the public key certificate received by the communication unit 230 from the device 2.
The encryption processing unit 204 performs an encryption process of a public key cryptosystem using the client public key Kkp of the client public key certificate of the device 2 and the client private key Kks of the pair.

  In the management device 4, the authentication processing unit 302 performs client authentication based on the client public key certificate C_Kkp transmitted by the device 2. If the client authentication by the authentication processing unit 302 succeeds, the registration unit 304 discloses in the storage unit 300 the account information of the user of the device 2 that transmitted the client public key certificate and the public number of the serial number of the public key certificate. The identification information of the key certificate, the identification information (control device ID) of the control device for performing a predetermined operation by the public key certificate such as the ID of the control device, and the predetermined operation of the control device by the public key certificate. Is registered in the key management table 305 of the storage unit 300 in association with the authority such as the expiration date for performing the above. The list creation unit 306 creates a list of public key certificates included in the key management table 305 stored in the storage unit 300. The storage unit 300 stores a key management table 305.

  FIG. 2 shows an example of the key management table. The key management table 305 associates account information of a user of the device, a serial number of a public key certificate, a control device ID, and an expiration date. The management device 4 may store the control device ID in advance, or may obtain the control device ID from the control device 3 via the communication unit 325. In the example shown in FIG. 2, the account information “aaaa”, the serial number “12345” of the public key certificate, the control device IDs “01aa” and “02aa”, and the expiration date “2016.7.1” are included. They are stored in association with each other.

  Next, the operation of the communication system 1 shown in FIG. 1 will be described with reference to FIG. FIG. 3 is an explanatory diagram of a communication method of the communication system according to the present embodiment. FIG. 3 shows a process of registering a public key certificate issued by the device 2 from the device 2 to the management device 4.

[Public key certificate registration procedure]
(Step S301) In the device 2, the public key / private key issuing application instructs the SIM 100 to generate a pair of a public key and a secret key. The key generation unit 101 of the SIM 100 generates a public key K1p (not shown) and a secret key K1s (not shown) according to the instruction. The generation of the public key K1p and the secret key K1s is performed in a secure RAM (Secure RAM) in the SIM 100. The secure RAM in the SIM 100 is a volatile storage area that cannot be accessed from outside the SIM 100. Therefore, the processing performed in the secure RAM in the SIM 100 is kept secret from outside the SIM 100. In the SIM 100, the secret key storage unit 106 stores the secret key K1s generated by the key generation unit 101. The secret key K1s is stored in a secure ROM in the SIM 100.

(Step S302) In the SIM 100, the certificate authority application instructs the SIM 100 to generate a public key certificate C_K1p (not shown). The public key certificate generation unit 102 generates a public key certificate C_K1p of the public key K1p generated by the key generation unit 101. The generation of the public key certificate C_K1p is performed in the secure RAM in the SIM 100. The public key certificate C_K1p includes a public key K1p, SIM identification information simid1, and an electronic signature of the public key K1p. The electronic signature of the public key K1p is encrypted data obtained by encrypting a digest of data including the public key K1p and the SIM identification information simid1 with the certificate authority private key Krs. Here, a hash value is used as an example of the digest.
Further, as an example of the public key certificate format, a public key certificate format of the “X.509” standard specified by ITU-T (International Telecommunication Union-Telecommunication) or the like is used. The public key K1p is stored at a predetermined position in the public key certificate format of the “X.509” standard. Also, the SIM identification information simid1 is stored at the position of "subject parameter: subject's name" in the public key certificate format of the "X.509" standard.

A method for generating the public key certificate C_K1p in the SIM 100 will be specifically described. In the SIM 100, the public key certificate generation unit 102 calculates a hash value hash (K1p, simid1) of data in the public key certificate format of the “X.509” standard that stores the public key K1p and the SIM identification information simid1. .
Next, the public key certificate generation unit 102 encrypts the hash value hash (K1p, simid1) with the certificate authority private key Krs stored in the storage unit 105 of the SIM 100. The encrypted data Krs (hash (K1p, simid1)) is an electronic signature of the public key K1p.
Next, the public key certificate generation unit 102 generates a public key certificate of the “X.509” standard including the public key K1p, the SIM identification information simid1, and the electronic signature Krs (hash (K1p, simid1)) of the public key K1p. Public key certificate C_K1p “K1p, simid1, Krs (hash (K1p, simid1))” in the certificate format.
The SIM 100 passes the public key certificate C_K1p “K1p, simid1, Krs (hash (K1p, simid1))” generated by the public key certificate generation unit 102 to the client authentication application.

(Step S303) In the device 2, the client authentication application receives the client public key certificate C_Kkp “Kkp, simid1, Krs (hash (Kkp, simid1))” received from the SIM 100 and the public key certificate C_K1p “K1p, simid1, Krs (hash (K1p, simid1)) ”to the communication unit 130. The communication unit 130 includes the client public key certificate C_Kkp “Kkp, simid1, Krs (hash (Kkp, simid1))” and the public key certificate C_K1p “K1p, simid1, Krs (hash (K1p, simid1))”. Is transmitted to the management device 4.

  In the management device 4, the communication unit 325 receives a registration request from the device 2. The communication unit 325 includes the client public key certificate C_Kkp “Kkp, simid1, Krs (hash (Kkp, simid1))” included in the registration request and the public key certificate C_K1p “K1p, simid1, Krs (hash (K1p, simid1 )) ”To the key management application.

(Step S304) In the management device 4, the key management application uses the client public key certificate C_Kkp “Kkp, simid1, Krs (hash (Kkp, simid1))” included in the registration request received from the device 2 to authenticate the client. To perform The authentication processing unit 302 performs client authentication based on the client public key certificate C_Kkp “Kkp, simid1, Krs (hash (Kkp, simid1))”.

  The authentication (verification) method of the client public key certificate C_Kkp “Kkp, simid1, Krs (hash (Kkp, simid1))” in the authentication processing unit 302 will be specifically described. The authentication processing unit 302 acquires the client public key Kkp and the SIM identification information simid1 from the client public key certificate C_Kkp “Kkp, simid1, Krs (hash (Kkp, simid1))”, and acquires the acquired client public key Kkp and SIM. It generates verification data in which the identification information simid1 is stored in the public key certificate format of the “X.509” standard. In the verification data, the client public key Kkp is stored at a predetermined position in the public key certificate format of the “X.509” standard. In the verification data, the SIM identification information simid1 is stored at the position of "subject parameter: subject's name" in the public key certificate format of the "X.509" standard.

  Next, the authentication processing unit 302 calculates a verification hash value hash '(Kkp, simid1) which is a hash value of the verification data. Next, the authentication processing unit 302 acquires an electronic signature Krs (hash (Kkp, simid1)) from the client public key certificate C_Kkp “Kkp, simid1, Krs (hash (Kkp, simid1))”, and acquires the obtained electronic signature Krs. (Hash (Kkp, simid1)) is decrypted with the CA public key Krp of the CA public key certificate C_Krp. By this decoding, decoded data “Krp · Krs (hash (Kkp, simid1))” is obtained.

Next, the authentication processing unit 302 determines whether the verification hash value hash ′ (Kkp, simid1) matches the decrypted data “Krp · Krs (hash (Kkp, simid1))”. As a result of this determination, if they match, the authentication of the client public key certificate C_Kkp “Kkp, simid1, Krs (hash (Kkp, simid1))” is successful, and if they do not match, the client public key certificate C_Kkp “ The authentication of “Kkp, simid1, Krs (hash (Kkp, simid1))” has failed.
In the management device 4, the authentication processing unit 302 notifies the key management application of the result of the authentication of the client public key certificate C_Kkp “Kkp, simid1, Krs (hash (Kkp, simid1))”.

(Step S305) In the management device 4, the result of the authentication of the client public key certificate C_Kkp “Kkp, simid1, Krs (hash (Kkp, simid1))” from the authentication processing unit 302 to the key management application may be successful. When notified, the registration unit 304 determines the account information of the user of the device 2, the serial number of the public key certificate C_K1p “K1p, simid1, Krs (hash (K1p, simid1))”, the control device ID, and the validity. Store it with the expiration date. In the storage of the public key certificate C_K1p, the SIM identification information stored in the position of “subject parameter: subject's name” of the public key certificate C_K1p “K1p, simid1, Krs (hash (K1p, simid1))” Simid1 is acquired, and the public key certificate C_K1p “K1p, simid1, Krs (hash (K1p, simid1))” is associated with the acquired SIM identification information simid1, and the key management table 305 in the storage unit 300 of the management device 4 is stored. May be stored.

  On the other hand, if the result of the verification of the client public key certificate C_Kkp “Kkp, simid1, Krs (hash (Kkp, simid1))” notified from the authentication processing unit 302 is “fail”, the key management application fails. The public key certificate C_Kkp “Kkp, simid1, Krs (hash (Kkp, simid1))” and the public key certificate C_K1p “K1p, simid1, Krs (hash (K1p, simid1))” are discarded. Further, a predetermined error process may be executed.

(Step S306) In the management device 4, the key management application uses the registration unit 304 to register the account information of the user of the device 2 and the serial number of the public key certificate C_K1p “K1p, simid1, Krs (hash (K1p, simid1))”. When the number, the control device ID, and the expiration date are stored in association with each other, an instruction is issued to create a list of valid public key certificates. The list creation unit 306 includes, among serial numbers of public key certificates stored in the key management table 305 in the storage unit 300, a serial number of a public key certificate whose expiration date has not expired, Create a list of valid public key certificates, including the expiration date associated with the serial number.
In the management device 4, the key management application instructs the control device 3 to transmit the list of valid public key certificates created by the list creation unit 306. The control unit 345 causes the list creation unit 306 to output the created list of valid public key certificates to the communication unit 325.
(Step S307) In the management device 4, when the list creation unit 306 outputs the list of valid public key certificates to the communication unit 325, the communication unit 325 converts the list of valid public key certificates into an OTA. (Over The Air) (for example, a wireless network of a communication carrier) to transmit to the control device 3. By using a wireless network of a communication carrier, transmission can be performed more safely than an open network such as a public wireless LAN.

(Step S308) In the control device 3, the communication unit 230 receives a list of valid public key certificates from the management device 4. The communication unit 230 passes the list of valid public key certificates received from the management device 4 to the public key certificate management application.
In the control device 3, the public key certificate management application instructs to store the list of valid public key certificates received from the management device 4. The control unit 240 stores a list of valid public key certificates in the storage unit 205. The control unit 240 indicates that the control device 3 has not yet performed client authentication of the device 2 as status information in a list of valid public key certificates (that is, the user of the device 2 uses the control device 3 for the first time). ) Is stored in association with information indicating the first use.

[Control procedure using public key certificate]
Next, a control procedure using a public key certificate will be described.

(Step S401) In the device 2, the lock / unlock request application sends the client public key certificate C_Kkp “Kkp, simid1, Krs (hash (Kkp, simid1))” from the SIM 100 and the public key certificate C_K1p “K1p, simid1, Krs (hash (K1p, simid1)) ". The lock / unlock request application receives the client public key certificate C_Kkp “Kkp, simid1, Krs (hash (Kkp, simid1))” received from the SIM 100 and the public key certificate C_K1p “K1p, simid1, Krs (hash (K1p, and outputs a lock or unlock request including “simid1))” to the communication unit 130. The communication unit 130 transmits the lock or unlock request to the control device 3.
In the control device 3, the communication unit 230 receives a lock or unlock request from the device 2. The communication unit 230 passes the lock or unlock request to the lock / unlock application.

(Step S402) In the control device 3, the lock / unlock application verifies the public key certificate C_K1p “K1p, simid1, Krs (hash (K1p, simid1))” included in the lock / unlock request received from the device 2. Instruct. The verification unit 203 verifies the public key certificate C_K1p “K1p, simid1, Krs (hash (K1p, simid1))”. The verification unit 203 determines whether the list of valid public key certificates stored in the storage unit 205 includes the public key certificate C_K1p “K1p, simid1, Krs (hash (K1p, simid1))”. When the list of valid public key certificates includes the public key certificate C_K1p “K1p, simid1, Krs (hash (K1p, simid1))”, the verification unit 203 uses the certificate authority public key certificate C_Krp. Then, the validity of the public key certificate C_K1p “K1p, simid1, Krs (hash (K1p, simid1))” is verified. The verification of the public key certificate C_K1p is performed by the verification unit 203. If the list of valid public key certificates does not include the public key certificate C_K1p “K1p, simid1, Krs (hash (K1p, simid1))”, the verification fails. In the verification, if the authority (expiration date) included in the list of valid public key certificates is not valid, the verification fails.

  A method of verifying the public key certificate C_K1p “K1p, simid1, Krs (hash (K1p, simid1))” in the verification unit 203 will be specifically described. The verification unit 203 acquires the public key K1p and the SIM identification information simid1 from the public key certificate C_K1p “K1p, simid1, Krs (hash (K1p, simid1))”, and acquires the acquired public key K1p and SIM identification information simid1. Is generated in the public key certificate format of the “X.509” standard. In the verification data, the public key K1p is stored at a predetermined position in the public key certificate format of the “X.509” standard. In the verification data, the SIM identification information simid1 is stored at the position of "subject parameter: subject's name" in the public key certificate format of the "X.509" standard.

  Next, the verification unit 203 calculates a verification hash value hash '(K1p, simid1) which is a hash value of the verification data. Next, the verification unit 203 obtains an electronic signature Krs (hash (K1p, simid1)) from the public key certificate C_K1p “K1p, simid1, Krs (hash (K1p, simid1))”, and obtains the obtained electronic signature Krs (hash (hash)). (K1p, simid1)) is decrypted with the certificate authority public key Krp of the certificate authority public key certificate C_Krp. By this decoding, decoded data “Krp · Krs (hash (K1p, simid1))” is obtained.

Next, the verification unit 203 determines whether the verification hash value hash ′ (K1p, simid1) matches the decrypted data “Krp · Krs (hash (K1p, simid1))”. As a result of this determination, if they match, the verification of the public key certificate C_K1p “K1p, simid1, Krs (hash (K1p, simid1))” passes, and if they do not match, the public key certificate C_K1p “K1p, The verification of "simid1, Krs (hash (K1p, simid1))" failed.
In the control device 3, the verification unit 203 notifies the lock / unlock application of the verification result of the public key certificate C_K1p “K1p, simid1, Krs (hash (K1p, simid1))”.

(Step S403) In the control device 3, the lock / unlock application is notified from the verification unit 203 that the verification result of the public key certificate C_K1p “K1p, simid1, Krs (hash (K1p, simid1))” is passed. Then, the control unit 240 checks the status information associated with the public key certificate C_K1p “K1p, simid1, Krs (hash (K1p, simid1))”. If the status information is information indicating agreement, client authentication between the device 2 and the control device 3 may be omitted. Further, the challenge generation and response verification at the subsequent stage may be omitted.

(Step S404) In the control device 3, when the lock / unlock application is notified that the information indicating the first use is stored as the status information from the control unit 240, the authentication processing unit 202 performs the lock or unlock operation. Client authentication is performed based on the client public key certificate included in the unlock request.

  The authentication (verification) method of the client public key certificate C_Kkp “Kkp, simid1, Krs (hash (Kkp, simid1))” in the authentication processing unit 202 will be specifically described. The authentication processing unit 202 obtains the client public key Kkp and the SIM identification information simid1 from the client public key certificate C_Kkp “Kkp, simid1, Krs (hash (Kkp, simid1))”, and obtains the obtained client public key Kkp and SIM. It generates verification data in which the identification information simid1 is stored in the public key certificate format of the “X.509” standard. In the verification data, the client public key Kkp is stored at a predetermined position in the public key certificate format of the “X.509” standard. In the verification data, the SIM identification information simid1 is stored at the position of "subject parameter: subject's name" in the public key certificate format of the "X.509" standard.

  Next, the authentication processing unit 202 calculates a verification hash value hash '(Kkp, simid1) which is a hash value of the verification data. Next, the authentication processing unit 202 obtains an electronic signature Krs (hash (Kkp, simid1)) from the client public key certificate C_Kkp “Kkp, simid1, Krs (hash (Kkp, simid1))”, and obtains the obtained electronic signature Krs. (Hash (Kkp, simid1)) is decrypted with the CA public key Krp of the CA public key certificate C_Krp. By this decoding, decoded data “Krp · Krs (hash (Kkp, simid1))” is obtained.

Next, the authentication processing unit 202 determines whether the verification hash value hash ′ (Kkp, simid1) matches the decrypted data “Krp · Krs (hash (Kkp, simid1))”. As a result of this determination, if they match, the authentication of the client public key certificate C_Kkp “Kkp, simid1, Krs (hash (Kkp, simid1))” is successful, and if they do not match, the client public key certificate C_Kkp “ The authentication of “Kkp, simid1, Krs (hash (Kkp, simid1))” has failed.
In the control device 3, the authentication processing unit 202 notifies the lock / unlock application of the result of the authentication of the client public key certificate C_Kkp “Kkp, simid1, Krs (hash (Kkp, simid1))”.
Then, the authentication processing unit 202 rewrites status information stored in association with the list of valid public key certificates stored in the storage unit 205 to information indicating agreement. As a result, client authentication is performed between the device 2 and the control device 3, and it is indicated that the electronic key (client public key Kkp) is set in the control device 3.

(Step S405) In the control device 3, the lock / unlock application issues an instruction to generate a challenge value (random number). The encryption processing unit 204 generates a challenge value (random number) and outputs it to the communication unit 230.

(Step S406) In the control device 3, the lock / unlock application instructs the challenge value to be transmitted to the device 2. The communication unit 230 transmits the challenge value generated by the encryption processing unit 204 to the device 2.
(Step S407) In the device 2, the lock / unlock request application instructs to create a response value based on the challenge value received from the lock / unlock application of the control device 3. The encryption processing unit 104 creates the response value Kks (random number) by encrypting the challenge value with the client private key Kks paired with the client public key Kkp of the client public key certificate C_Kkp of the device 2. The encryption processing unit 104 outputs the response value Kks (random number) to the communication unit 130.
(Step S408) In the device 2, the lock / unlock request application instructs the response value to be transmitted to the control device 3. The communication unit 130 transmits the response value Kks (random number) to the control device 3.

(Step S409) In the control device 3, the lock / unlock application checks the validity of the response value Kks (random number) received from the lock / unlock application of the device 2 by checking the client public key Kkp of the client public key certificate C_Kkp of the device 2. Validate using. For example, the verification unit 203 passes the verification if the result of decrypting the response value Kks (random number) with the client public key Kkp matches the challenge value, and rejects the verification if the result does not match the challenge value. And
(Step S410) In the control device 3, the control unit 240 executes a predetermined control when the result of verification of the response value Kks (random number) is successful. For example, the control unit 240 executes locking or unlocking requested by the device 2. On the other hand, when the verification of the response value Kks (random number) fails, the control unit 240 does not execute the predetermined control. If the verification of the response value Kks (random number) fails, the control unit 240 may execute a predetermined error process.
Note that the device 2 encrypts the challenge value received from the control device 3 with the client secret key Kks and transmits it to the control device 3 as a response value Kks (random number), and the control device 3 converts the response value with the client public key Kkp. Although the validity of the response value is verified by decrypting and comparing the response value with the challenge value, a common key is generated and shared in advance between the device 2 and the control device 3, and the challenge is performed using the common key. The validity of the response value may be verified by encrypting and decrypting the value.

In the above-described embodiment, the account information is account information of a user who uses a service provided by the control device 3 (for example, unlocking and locking a door device installed in a hotel, and content distribution of a distribution server). 4 may be issued to the user of the device 2. Further, the management device 4 may acquire the user identification information from the device 2 and use it as account information. The status information may be changed according to the user's service usage status. For example, when a user checks out a hotel, the management device 4 may transmit a request to the control device 3 to rewrite status information from information indicating agreement to information indicating first use.
Further, in the above-described embodiment, the management device 4 may notify the user of the device 2 in advance of the destination (destination) of the registration request transmitted by the device 2. The management device 4 stores information about the destination (destination) of the lock or unlock request transmitted by the device 2 in advance, and when the management device 4 issues account information to the user of the device 2. You may be notified. Further, when the user of the device 2 terminates the use of the control device 3 (when the device 2 does not transmit a lock or unlock request to the management device 4), the device 2 transmits a registration deletion request to the management device 4. May be.
According to the present embodiment, the control device 3 is provided with a function of managing the authority to lock or unlock the door key. Thus, even if there are a plurality of control devices 3, each control device can independently manage the door key.
Generally, whether a public key certificate is valid or not is verified by using a certificate revocation list (CRL) or Online Certificate Status Protocol (OCSP). A common method is to check the list.
However, in this embodiment, a list of valid public key certificates is created by assuming that all public key certificates are in a revoked state by default. Then, the control device 3 verifies whether the public key certificate received from the device 2 is valid by referring to the list of valid public key certificates. Further, the user of the device 2 is authenticated by the client public key certificate received from the device 2. Thereby, even when the door key is shared by a plurality of users, unnecessary reissuance of the public key certificate can be avoided, and when an unspecified number of devices and control devices are combined, The validity and authority of the door key can be finely and appropriately managed.

  In the present embodiment, the SIM 100 included in the device 2 and the SIM 200 included in the control device 3 are SIMs that have been user-authenticated by a communication carrier. This can be a basis for trust of the device 2 and the control device 3 as a certificate authority.

  The user of the device 2 operating the device 2 may be bound (associated) with the device 2. For example, a storage authentication for inputting a predetermined password is added to an operation or information to be authenticated. Specifically, for example, when the device 2 generates a public key or a public key certificate, the user of the device 2 operating the device 2 may be caused to input a predetermined password. Further, when an electronic signature is attached with the secret key in the SIM 100 of the device 2, the user of the device 2 operating the device 2 may be allowed to input a predetermined password.

  SIM is a general term for a communication module that stores unique identification information associated with user identification information, and is not limited to a communication module used in a specific communication system. For example, a UIM (User Identity Module), a USIM (Universal Subscriber Identity Module), an eSIM (Embedded Subscriber Identity Module), or the like may be used.

The SIM 100 may store a pair of a public key certificate and a private key in advance. For example, a pair of a public key certificate and a private key may be stored in the SIM 100 when the SIM 100 is manufactured. When the SIM 100 stores a pair of a public key certificate and a private key in advance, the SIM 100 does not need to include the key generation unit 101.
Further, the SIM 100 may generate or store a plurality of pairs of public keys (public key certificates) and private keys. In this case, for example, the device 2 may selectively use a pair of a public key (public key certificate) and a secret key according to the communication partner. Further, when a pair of a certain public key (public key certificate) and a secret key is leaked, the device 2 may switch to another pair.

In the above-described embodiment, the list creation unit 306 may periodically update the list of valid public key certificates and transmit the list to the control device 3. Further, the list creation unit 306 changes the public key certificate included in the list of valid public key certificates, such as when a new public key certificate is registered, when the expiration date of the public key certificate has expired, and the like. May occur, the list of valid public key certificates may be updated and transmitted to the control device 3. This allows the control device 3 to be notified of the latest list of valid public key certificates.
Further, the control device 3 may delete the public key certificate whose validity period has expired from the public key certificates included in the list of valid public key certificates stored in the storage unit 205.

  The communication system according to the embodiment can be applied to a scene where it is desired to individually grant a time-limited use right to an unspecified number of service users such as a private residence, a model room, and car sharing.

<Modification>
FIG. 5 is a configuration diagram illustrating a communication system according to a modification. 5, the communication system includes a device 5, a distribution server 6, and a management device 7. The device 5 can apply the device 2 of the above-described embodiment, and the management device 7 can apply the management device 4 described above.
The distribution server 6 includes a secure element such as the SIM 400, a communication unit 430, a control unit 440, and a storage unit 500.

  The SIM 400 stores the SIM identification information simid3. The SIM identification information simid3 is identification information unique to the SIM 400. The SIM 400 includes an authentication processing unit 402, a verification unit 403, an encryption processing unit 404, and a storage unit 405. The SIM 200, the authentication processing unit 402, the verification unit 403, the encryption processing unit 404, and the storage unit 405 can apply the SIM 200, the authentication processing unit 202, the verification unit 203, the encryption processing unit 204, and the storage unit 205 described above.

Next, the operation of the communication system shown in FIG. 5 will be described with reference to FIG. FIG. 6 is an explanatory diagram of the communication method of the communication system according to the present modification. FIG. 6 shows a process of registering a public key certificate issued by the device 2 from the device 2 to the management device 4.
Steps S601 to S608 can apply steps S301 to S308 shown in FIG.

[Control procedure using public key certificate]
Next, a control procedure using a public key certificate will be described with reference to FIG.
(Step S701) In the device 5, the content delivery request application sends the client public key certificate C_Kkp “Kkp, simid1, Krs (hash (Kkp, simid1))” from the SIM 100 and the public key certificate C_K1p “K1p, simid1, Krs”. (Hash (K1p, simid1)) ". The content distribution request application receives the client public key certificate C_Kkp “Kkp, simid1, Krs (hash (Kkp, simid1))” received from the SIM 100 and the public key certificate C_K1p “K1p, simid1, Krs (hash (K1p, simid1) )) Is output to the communication unit 130. The communication unit 130 transmits the content distribution request to the distribution server 6.
In the distribution server 6, the communication unit 430 receives a content distribution request from the device 2. The communication unit 430 passes the content distribution request to the content distribution application.

Steps S702 to S704 can apply steps S402 to S404 in FIG.
However, in step S704, in the distribution server 6, the authentication processing unit 402 notifies the content distribution application of the result of the authentication of the client public key certificate C_Kkp “Kkp, simid1, Krs (hash (Kkp, simid1))”.
Then, the authentication processing unit 402 rewrites status information stored in association with the list of valid public key certificates stored in the storage unit 405 to information representing agreement. As a result, client authentication is performed between the device 2 and the distribution server 6, and it is indicated that an electronic key (client public key) has been set in the distribution server 6.

Steps S705 to S709 can apply steps S405 to S409 in FIG.
(Step S710) In the distribution server 6, the control unit 440 executes predetermined control when the result of the verification of the response value Kks (random number) is successful. For example, the control unit 440 distributes the content requested by the device 2 among the contents 550 stored in the storage unit 500. On the other hand, when the verification of the response value Kks (random number) fails, the control unit 440 does not distribute the content. If the verification of the response value Kks (random number) fails, the control unit 440 may execute a predetermined error process.

As described above, the embodiments and the modified examples of the present invention have been described in detail with reference to the drawings. However, the specific configuration is not limited to this embodiment, and a design change and the like within a range not departing from the gist of the present invention. Is also included.
A computer program for realizing the functions of the communication device or the communication terminal according to the above-described embodiment is recorded on a computer-readable recording medium, and the program recorded on the recording medium is read by a computer system and executed. You may make it. Here, the “computer system” may include an OS and hardware such as peripheral devices.
The “computer-readable recording medium” is a writable non-volatile memory such as a flexible disk, a magneto-optical disk, a ROM, a flash memory, a portable medium such as a DVD (Digital Versatile Disc), or a computer system. Storage device such as a hard disk.

Further, a “computer-readable recording medium” refers to a volatile memory (for example, a DRAM (Dynamic)) in a computer system that becomes a server or a client when a program is transmitted via a network such as the Internet or a communication line such as a telephone line. Random Access Memory)), which includes programs that have been held for a certain period of time.
Further, the above program may be transmitted from a computer system storing the program in a storage device or the like to another computer system via a transmission medium or by a transmission wave in the transmission medium. Here, the "transmission medium" for transmitting a program refers to a medium having a function of transmitting information, such as a network (communication network) such as the Internet or a communication line (communication line) such as a telephone line.
Further, the program may be for realizing a part of the functions described above.
Furthermore, what can implement | achieve the function mentioned above in combination with the program already recorded on the computer system, and what is called a difference file (difference program) may be sufficient.

  In the above-described embodiment, the management device 4 is an example of a first communication device, the storage unit 300 is an example of a first storage unit, and the communication unit 325 is an example of a first acquisition unit and a distribution unit. The registration unit 304 is an example of a registration unit and a setting unit, and the list creation unit 306 is an example of a list creation unit. The control device 3 is an example of a second communication device, the communication unit 430 is an example of a second acquisition unit and a reception unit, and the control unit 240 is an example of a control unit. The unit 102 is an example of a certificate authority. Further, the encryption processing unit 104 is an example of a first encryption processing unit, the encryption processing unit 204 is an example of a second encryption processing unit, the communication unit 130 is an example of a first communication unit, and the verification unit 203 is an example of a verification unit.

1, 8 communication system, 2 device, 3 control device, 4 management device, 10 communication carrier database, 100, 200, 400 SIM, 101 key generation unit, 102 public key certificate generation unit , 104, 204, 404: cryptographic processing unit, 105, 205, 300, 405, 500: storage unit, 106: private key storage unit, 202, 302, 402 ... authentication processing unit, 130, 230, 325, 430 ... communication Unit, 140, 240, 345, 440 ... control unit, 202, 402 ... authentication processing unit, 203, 403 ... verification unit, 304 ... registration unit, 306 ... list creation unit, 305 ... key management table, 550 ... content

Claims (10)

A communication system comprising: a first communication device; and a second communication device that communicates with the first communication device,
The first communication device is
A first storage unit;
A first obtaining unit that obtains a client public key certificate stored in a second storage unit included in the terminal device and a public key certificate of a public key generated by the terminal device;
A first authentication processing unit that performs client authentication based on the client public key certificate acquired by the first acquisition unit;
When the result of the client authentication is successful by the first authentication processing unit, the first storage unit stores account information of a user of the terminal device, a serial number of the public key certificate, A registration unit for registering the identification information of the second communication device that causes the predetermined operation to be performed by the public key certificate and the expiration date in association with each other;
A list creation unit that creates a list of serial numbers of public key certificates that have not expired among the serial numbers of the public key certificates stored in the first storage unit;
A first communication unit that transmits the list created by the list creation unit to the second communication device;
The second communication device includes:
A third communication unit that receives the list transmitted by the first communication device;
A third storage unit that stores the list received by the third communication unit;
A third obtaining unit that obtains the client public key certificate stored in the second storage unit included in the terminal device and the public key certificate of the public key generated by the terminal device;
A verification unit that verifies whether the public key certificate acquired by the third acquisition unit is included in the list;
A third authentication processing unit that performs client authentication based on the client public key certificate obtained by the third obtaining unit when the verification is successful by the verification unit;
And a control unit that performs a predetermined operation when the client authentication is successful by the third authentication processing unit. The first communication device includes:
A setting unit that sets an expiration date of the public key certificate in association with the serial number of the public key certificate included in the list created by the list creating unit,
The communication system according to claim 1, wherein the list creating unit updates the list based on an expiration date set by the setting unit. The terminal device,
It has a certificate authority that issues public key certificates,
The communication system according to claim 1, wherein the second storage unit is a storage area that cannot be accessed from outside. The terminal device,
A response is generated by encrypting a challenge transmitted by the second communication device with a private key paired with a public key registered in the public key certificate stored in the second storage unit. A second cryptographic processing unit;
A second communication unit that receives a challenge transmitted by the second communication device and transmits a response generated by the second encryption processing unit to the second communication device;
The second communication device includes:
A third encryption processing unit that generates the challenge, and decrypts the response transmitted by the terminal device with the public key when the client authentication is successful by the third authentication processing unit;
The verification unit verifies the response decrypted by the third cryptographic processing unit based on the challenge generated by the third cryptographic processing unit;
The third communication unit transmits the challenge generated by the third encryption processing unit to the terminal device, receives a response transmitted by the terminal device,
4. The communication system according to claim 1, wherein the control unit performs the predetermined operation when the verification by the verification unit is successful. 5. The control unit, in association with the serial number of the public key certificate included in the list, as the status information, the terminal device stores information indicating that the client authentication is not performed,
By the verification unit, if the verification is successful, as the status information associated with the serial number of the public key certificate, if information indicating that the client authentication is not performed is not stored, The communication system according to claim 4, wherein the communication system performs the predetermined operation. A first storage unit;
A first obtaining unit that obtains a client public key certificate stored in a second storage unit included in the terminal device and a public key certificate of a public key generated by the terminal device;
A first authentication processing unit that performs client authentication based on the client public key certificate acquired by the first acquisition unit;
When the result of the client authentication is successful by the first authentication processing unit, the first storage unit stores account information of a user of the terminal device, a serial number of the public key certificate, A registration unit that registers the identification information of another communication device that causes a predetermined operation to be performed by the public key certificate and the expiration date in association with each other;
A list creation unit that creates a list of serial numbers of public key certificates that have not expired among the serial numbers of the public key certificates stored in the first storage unit;
And a first communication unit that transmits the list created by the list creation unit to a second communication device. A third obtaining unit that obtains a client public key certificate stored in a second storage unit included in the terminal device and a public key certificate of a public key generated by the terminal device;
A verification unit that verifies whether or not the public key certificate acquired by the third acquisition unit is included in a list of serial numbers of public key certificates whose expiration date has not arrived;
A third authentication processing unit that performs client authentication based on the client public key certificate obtained by the third obtaining unit when the verification is successful by the verification unit;
A control unit that performs a predetermined operation when the client authentication is successful by the third authentication processing unit. A communication method executed by a first communication device and a second communication device that communicates with the first communication device,
The first communication device is
Acquiring a client public key certificate stored in a second storage unit included in the terminal device and a public key certificate of a public key generated by the terminal device;
Performing client authentication based on the obtained client public key certificate;
If the result of the client authentication is successful, the account information of the user of the terminal device, the serial number of the public key certificate, and the second communication device for performing a predetermined operation using the public key certificate Registering the identification information and the expiration date in association with each other;
Among the serial numbers of the stored public key certificate, a step of creating a list of serial numbers of public key certificates that have not expired,
Transmitting the list created in the step of creating the list to the second communication device.
The second communication device includes:
Receiving the list transmitted by the first communication device;
Obtaining the client public key certificate stored in the second storage unit included in the terminal device and the public key certificate of the public key generated by the terminal device;
Verifying whether the obtained public key certificate is included in the list,
If the verification is successful, performing client authentication based on the obtained client public key certificate;
And performing a predetermined operation when the client authentication is successful. In the computer of the first communication device,
Acquiring a client public key certificate stored in a second storage unit included in the terminal device and a public key certificate of a public key generated by the terminal device;
Performing client authentication based on the obtained client public key certificate;
If the result of the client authentication is successful, the account information of the user of the terminal device, the serial number of the public key certificate, and the identification of another communication device that performs a predetermined operation by the public key certificate Registering the information in association with the expiration date;
Among the serial numbers of the stored public key certificates, a step of creating a list of public key certificates that have not expired,
Transmitting the list created in the step of creating the list to a second communication device. In the computer of the second communication device,
Receiving a list of serial numbers of public key certificates not yet expired sent by the first communication device;
Obtaining a client public key certificate stored in a second storage unit included in the terminal device and the public key certificate of a public key generated by the terminal device;
Verifying whether the obtained public key certificate is included in the list,
If the verification is successful, performing client authentication based on the obtained client public key certificate;
And performing a predetermined operation when the client authentication is successful.

Images