Public key certification issuing apparatus

• US 7,461,251 B2
• Filed: 04/22/2003
• Issued: 12/02/2008
• Est. Priority Date: 05/09/2002
• Status: Expired due to Fees

• Current Assignee: Canon Kabushiki Kaisha (Canon Inc.)
• Original Assignee: Canon Kabushiki Kaisha (Canon Inc.)
• Inventors: Oishi, Kazuomi
• Primary Examiner(s): TRAN, ELLEN C
• Application Number:
  US10/419,776
• Publication Number:
  US 20030212892A1
• Time in Patent Office: 2,051 Days
• Field of Search: 713/153, 713/155, 713/162, 713/175, 713/158, 713/156, 713/171, 726/15
• US Class Current: 713/162
• CPC Class Codes: H04L 2209/42 Anonymization, e.g. involving pseudonyms
• CPC Class Codes: H04L 61/00 Network arrangements, protocols or services for addressing or naming
• CPC Class Codes: H04L 61/50 Address allocation
• CPC Class Codes: H04L 63/0407 wherein the identity of one or more communicating identities is hidden cryptographic mechanisms or cryptographic arrangements for anonymous credentials or for identity based cryptographic systems H04L9/00
• CPC Class Codes: H04L 63/0421 Anonymous communication, i.e. the party's identifiers are hidden from the other party or parties, e.g. using an anonymizer
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 69/167 Adaptation for transition between two IP versions, e.g. between IPv4 and IPv6 translation of Internet protocol [IP] addresses H04L61/2503
• CPC Class Codes: H04L 9/3013 involving the discrete logarithm problem, e.g. ElGamal or Diffie-Hellman systems
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04L 9/3271 using challenge-response

Abstract

A host requests a public key certificate from a gateway, and the gateway requests a public key certificate from a Certification Authority (CA). The CA generates a public key certificate, which is sent to the host through the gateway. The host sets an IPv6 address based on information from the gateway. The host requests and receives a new public key certificate whenever necessary, and sends a public key certificate including the IPv6 address to the communication counterpart.

Claims

1. An anonymous public key generating apparatus comprising:

communication means for communicating with a communication apparatus through a network;

generation means for generating an anonymous public key based on public information related to a secret key of the communication apparatus; and

transmission means which transmits a signal including a global address prefix to be used by the communication apparatus and transmits, in response to a first request for a public key certificate from the communication apparatus, a second request including the anonymous public key generated by said generation means and the global address prefix of the communication apparatus to a public key certificate issuer for requesting a public key certificate of the generated anonymous public key,

wherein the anonymous public key is generated so that the communication apparatus may use the anonymous public key with the secret key of the communication apparatus.

2. An apparatus according to claim 1, wherein said communication means transmits a public key certificate issued by the public key certificate issuer to the communication apparatus.

3. An apparatus according to claim 1, wherein said transmission means transmits a second public key, generated by said generation means according to the first public key of the communication apparatus requesting the public key certificate, to the public key certificate issuer.

4. An apparatus according to claim 3, wherein said communication means, upon receiving the first request including a digital signature from the communication apparatus, confirms the legitimacy of the digital signature, utilizing the first public key of the communication apparatus.

5. An apparatus according to claim 1, wherein said transmission means transmits address information of the communication apparatus to the public key certificate issuer.

6. An apparatus according to claim 1, wherein said generating means generates the public key in accordance with a public parameter, and said transmission means transmits the generated public key to the public key certificate issuer in response to the public key certificate requesting message.

7. A computer-readable medium embodying an anonymous public key generating program, the program comprising steps of:

transmitting a signal including a global address prefix to be used by the communication apparatus;

generating an anonymous public key based on public information related to a secret key of the communication apparatus;

receiving a first request for a public key certificate from a communication apparatus through a network; and

transmitting, in response to the first request, a second request including the generated anonymous public key and the global address prefix of the communication apparatus to a public key certificate issuer for requesting a public key certificate of the generated anonymous public key,

wherein the anonymous public key is generated so that the communication apparatus may use the anonymous public key with a the secret key of the communication apparatus.

8. A program according to claim 7, wherein said transmission step transmits a second public key, generated according to a first public key of the communication apparatus requesting the public key certificate, to the public key certificate issuer.

9. A program according to claim 8, wherein said reception step, upon receiving the first request including a digital signature from the communication apparatus, confirms the legitimacy of the digital signature, utilizing the first public key of the communication apparatus.

10. A program according to claim 7, wherein a second public key is generated in said generating step in accordance with a first public key of the communication apparatus, and the generated second public key is transmitted in said transmitting step to the public key certificate issuer in response to the public key certificate requesting message.

11. A program according to claim 7, wherein the public key is generated in accordance with a public parameter and the generated public key is transmitted in said transmitting step to the public key certificate issuer in response to the public key certificate requesting message.

12. A public key certificate issuing method comprising steps that:

an anonymous public key generating apparatus transmits a signal including a global address prefix to be used by a communication apparatus, generates an anonymous public key based on public information related to a secret key of the communication apparatus, receives a first request for a public key certificate from the communication apparatus through a network, and transmits, in response to the first request, a second request including the generated anonymous public key and the global address prefix of the communication apparatus to a public key certificate issuer for requesting the public key certificate for the anonymous public key; and

said public key certificate issuer issues the public key certificate for the anonymous public key received from the anonymous public key generating apparatus,

wherein the anonymous public key is generated so that the communication apparatus may use the anonymous public key with the secret key of the communication apparatus.

13. A method according to claim 12, wherein said public key generating apparatus transmits a second public key, generated according to the first public key of the communication apparatus requesting the public key certificate, to said public key certificate issuer.

14. A method according to claim 13, wherein said public key generating apparatus, upon receiving the first request including a digital signature from the communication apparatus, confirms the legitimacy of the digital signature, utilizing the first public key of the communication apparatus.

15. A method according to claim 12, wherein the public key generating apparatus generates a second public key in accordance with a first public key of the communication apparatus and transmits the generated second public key to the public key certificate issuer in response to the public key certificate requesting message.

16. A method according to claim 12, wherein the public key generating apparatus generates the public key in accordance with a public parameter and transmits the generated public key to the public key certificate issuer in response to the public key certificate requesting message.

17. An anonymous public key generating method comprising:

transmitting a signal including a global address prefix to be used by a communication apparatus;

generating an anonymous public key based on public information related to a secret key of the communication apparatus;

receiving a first request for a public key certificate from the communication apparatus through a network; and

transmitting, in response to the first request, a second request including the generated anonymous public key and the global address prefix of the communication apparatus to a public key certificate issuer for requesting a public key certificate of the generated anonymous public key,

wherein the anonymous public key is generated so that the communication apparatus may use the anonymous public key with a the secret key of the communication apparatus.

18. A method according to claim 17, wherein said transmission step transmits a second public key, generated according to a first public key of the communication apparatus requesting the public key certificate, to the public key certificate issuer.

19. A program according to claim 18, wherein said reception step, upon receiving the first request including a digital signature from the communication apparatus, confirms the legitimacy of the digital signature, utilizing the first public key of the communication apparatus.

20. A method according to claim 17, wherein a second public key is generated in said generating step in accordance with a first public key of the communication apparatus, and the generated second public key is transmitted in said transmitting step to the public key certificate issuer in response to the public key certificate requesting message.

21. A program according to claim 17, wherein the public key is generated in accordance with a public parameter and the generated public key is transmitted in said transmitting step to the public key certificate issuer in response to the public key certificate requesting message.