Patent ID: 7673331

Claim:
A server certificate issuing system comprising a registration server provided in a registration authority to receive a server certificate request transmitted from a Web server via a network and to transmit a certificate signing request file (CSR) which is included in said server certificate request to an issuing authority after performing a predetermined examination, and a certificate issuing server provided in the issuing authority to receive the CSR transmitted from the registration server, to generate a server certificate with a digital signature, and to transmit the generated server certificate to said registration server, wherein said Web server comprises means for generating an entry screen to input application information, means for generating a key pair of a public key and a private key, means for generating the CSR containing the generated public key, verification page generating means for generating a verification page to indicate intention of requesting an issuance of the server certificate and storing verification information in said verification page, means for generating the server certificate request containing an application information including at least the generated CSR and the address information of said Web server, and means for transmitting the generated server certificate request to the registration server provided in the registration authority, and said registration server comprises means for receiving the server certificate request transmitted from said Web server, verification information reading means for accessing the verification page of the Web server based on the address information contained in the received server certificate request to read out the verification information indicated on the verification page, verification means for comparing the read verification information with the information contained in the server certificate request, and means for transmitting the CSR contained in the received server certificate request to the certificate issuing server, means for receiving the server certificate transmitted from the certificate issuing server, download means for downloading the server certificate to the Web server, and wherein said registration server transmits the CSR contained in said server certificate request to the certificate issuing server only when said verification means has judged that the verification page has been generated, as the result of the verification.