Self-authentication communication equipment and device authentication system

摘要

In the system for performing secure communication communication equipment using an electronic certificate, without the prior off-line distribution of the self-signed certificate, the equipment of the communication partner, and equipment self-signed certificate is shown in the self-signed certificate certainly to ensure is allowed to verify that at that has been generated. Communication equipment 200 generates an ID-based encryption private key 293b that public key apparatus unique ID291b on the basis of the public parameters and master key 293a. The communication device 200 generates, as ID-based cryptographic signature 294b the electronic signature of the RSA public key 292b using an ID-based encryption private key 293b. The communication device 200, to generate a self-signed RSA 294a as target ID-based cryptographic signature 294b RSA public key 292b, expiration date, host name 291c, and device-specific ID291b. Then, the communication device 200, to generate a self-signed certificate 294, including a self-signed RSA 294a and ID-based cryptographic signature 294b.