Public key certification providing apparatus

• US 20030200437A1
• Filed: 04/16/2003
• Published: 10/23/2003
• Est. Priority Date: 04/17/2002
• Status: Active Grant

• Current Assignee: Canon Kabushiki Kaisha (Canon Inc.)
• Original Assignee: Canon Kabushiki Kaisha (Canon Inc.)
• Inventors: Oishi, Kazuomi
• Granted Patent: US 7,529,926 B2
• Time in Patent Office: Days
• US Class Current: 713/175
• CPC Class Codes: H04L 2209/42 Anonymization, e.g. involving pseudonyms
• CPC Class Codes: H04L 9/3013 involving the discrete logarithm problem, e.g. ElGamal or Diffie-Hellman systems
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04L 9/3271 using challenge-response

Abstract

A host communicates with a gateway, a DHCP server or a PPP peer of ISP to determine an IPv6 address, also receives a public key certificate from the gateway, the DHCP server or the PPP peer of ISP, and sends a public key certificate including an IPv6 address to a communication counterpart. The host receives a new public key certificate from the gateway, the DHCP server or the PPP peer of ISP when necessary.

Claims

1. A public key certificate providing apparatus comprising:

generation means for generating a certificate of a first public key; and

providing means for providing the certificate of the first public key, generated by said generation means;

wherein the certificate of the first public key generated by said generation means includes a certificate of a second public key issued by an authenticating service provider and a digital signature of which legitimacy can be confirmed with the second public key.

2. An apparatus according to claim 1, wherein said providing means provides a host in a subnet with the first public key certificate.

3. An apparatus according to claim 1, wherein said providing means provides the host with the first public key certificate and information for determining an address of the host.

4. An apparatus according to claim 1, further comprising connection means which connects the host, to which the first public key certificate is provided by said providing means, to the internet.

5. A public key certificate providing program comprising steps of:

generating a certificate of a first public key; and

providing the generated certificate of the first public key;

wherein the certificate of the first public key generated by said generation step includes a certificate of a second public key issued by an authenticating service provider and a digital signature of which legitimacy can be confirmed with the second public key.

6. A program according to claim 5, wherein said providing step provides a host in a subnet with the first public key certificate.

7. A program according to claim 5, wherein said providing step provides the host with the first public key certificate and information for determining an address of the host.

8. A program according to claim 5, further comprising a connection step of connecting the host, to which the first public key certificate is provided by said providing step, to the internet.

9. A providing apparatus including, in a subnet, providing means which provides a host in the subnet with information for determining an address and a certificate of a first public key, further comprising:

generation means for generating the certificate of the first public key;

wherein the certificate of the first public key generated by said generation means includes a certificate of a second public key issued by an authenticating service provider and a digital signature of which legitimacy can be confirmed with the second public key.

10. A connecting apparatus comprising:

internet connection means for executing connection with the internet;

host connection means for executing connection with a host; and

providing means for providing a certificate of a first public key;

wherein the certificate of the first public key provided by said providing means includes a certificate of a second public key issued by an authenticating service provider and a digital signature of which legitimacy can be confirmed with the second public key.

11. A communication apparatus comprising:

communication means; and

determination means for determining an own address by a result of a communication with a first counterpart;

wherein said communication means informs a public key certificate received from a first counterpart to a second counterpart in order to execute an encrypted communication with the second counterpart.

12. A communication program comprising steps of:

determining an own address by a result of a communication with a first counterpart; and

informing a public key certificate received from a first counterpart to a second counterpart in order to execute an encrypted communication with the second counterpart.