ACCOUNT MANAGEMENT SYSTEM, BASE ACCOUNT MANAGEMENT APPARATUS, DESCENDANT ACCOUNT MANAGEMENT APPARATUS, AND PROGRAM

摘要

PROBLEM TO BE SOLVED: To prevent a descendant authentication component from being invalidated, even if an authentication component used as a root is invalidated.;SOLUTION: A base account management apparatus 20 authenticates a user of a client apparatus, based on initial authentication component information in base account information. When the authentication result is valid, the base account management apparatus 20 generates an electronic signature, based on a surviving condition and a secret key, and transmits derived account reliance component information containing the surviving condition, the electronic signature and a public key certificate to a descendant account management apparatus. The derived account management apparatus 20 generates derived account information which becomes effective when the surviving condition is satisfied. This derived account information includes derived account reliance component information, which becomes invalid if a validity time period of the public key certificate is expired, and an effective biomedical information template for a user regardless of the validity time period. Accordingly, even if an authentication component (the public key certificate) used as a root is invalidated, invalidation of an authentication component (biomedical information template) is prevented.;COPYRIGHT: (C)2009,JPO&INPIT