초록 ▼

Both of a user side and a protect side such as a programmer of an application programmer need not handle a large number of inherent information such as authentication keys. An access ticket generation device generates an access ticket from user unique identifying information and access rights authen

Both of a user side and a protect side such as a programmer of an application programmer need not handle a large number of inherent information such as authentication keys. An access ticket generation device generates an access ticket from user unique identifying information and access rights authentication feature information. As unique security characteristic information, there is used a secret key of an elliptic curve encryption or an ElGamal encryption. A proof data generation device receives the access ticket, converts authentication data received from a proof data verification device into proof data by use of the access ticket and the user unique identifying information, and returns the resultant proof data to the proof data verification device. The proof data generation device or the proof data verification device decrypts the above-mentioned encryption. The proof data verification device verifies the access rights as correct access only when a combination of an access ticket and user unique identifying information used in the proof data generation device is correct.

대표청구항 ▼

[ What is claimed is:] [1.] A device for authenticating user's access rights to resources by verifying legitimacy of proof data generated in order to prove the right of said user, said device for authenticating user's access rights to resources comprising:first memory means for storing first authent

[ What is claimed is:] [1.] A device for authenticating user's access rights to resources by verifying legitimacy of proof data generated in order to prove the right of said user, said device for authenticating user's access rights to resources comprising:first memory means for storing first authentication data;second memory means for storing unique identifying information of the user;third memory means for storing proof support information which are executed results obtained when said the user unique identifying information and unique security characteristic information are calculated in a predetermined manner;proof data generation means for generating proof data by the application of specified calculation to said first authentication data stored in said first memory means, said the user unique identifying information stored in said second memory means, and said proof support information stored in said third memory means; andverification means for verifying the legitimacy of said proof data by verifying that said authentication data and unique security characteristic information satisfy a specific predefined relation,provided that, in particular, said unique security characteristic information X is a decryption key in an asymmetric cryptosystem arranged in such a way as to satisfy a relationship expressed as Y=a.sup.x modp, where p is a modulus and a is a positive integer,said proof data generation means generating a value which is obtained by multiplying said first authentication data stored in said first memory means by a power of said X value under the modulus p as proof data, and said verfication means verifies the legitimacy of proof data by verifying that the proof proof data generated by said proof data generation means is identical with decryption of the data which is encrypted with encryption key corresponding to said decryption key.