Patent ID: 7840804
Filing Date: 2010-11-23
Classification: G06F,H04L

Abstract:
1. An attribute certificate validation method for a service provider device providing services on a network to check attribute information of a subject using the services, comprising the steps of: a signed data transmitting step, conducted by a user device utilized by the subject, in which the device generates signed data including to-be-signed data which is data required to receive a service provided by the service provider device, a signature value generated when a digital signature is made to the to-be-signed data using a private key corresponding to a public key Certificate of the subject, and attribute certificate information required for an attribute certificate validation device to check integrity of an attribute described in the attribute certificate; verifies the authenticity of a holder who presents the attribute certificate to the service provider by contracting a certification path for certifying the public key certificate, verifying the public key certificate and checking validity of the public key certificate using the signature verification information and the signature value in the validation request data, the obtained public key certificate of the subject and the trust anchor information, in the validation response transmitting step, adds the authenticity validation result of the attribute certificate holder to the validation response data; wherein the attribute certificate validation device conducting the attribute certificate validating step is a trusted third party device excluding access by the service provider device to the public key certificate or any privacy information contained in the public key certificate.