Authentication server device, authentication system and authentication method

摘要

To reduce a user procedure load to service resumption without management of secret information on the server side, and to complete personal authentication for a plurality of services even after a terminal is lost.SOLUTION: A preliminary public template generated by using biological information acquired from a user, and a preliminary public key certificate are stored in advance into an authentication server. This enables, if a personal terminal disappears (is lost or stolen), the identification of the preliminary public template and the public key certificate stored in the authentication server without registration of a new public key and a secret key, and the continuation of user authentication as usual by validating using the biological information of the user. The revocation of the original public key certificate and the publication of a new public key certificate may be performed by processing in one step, or may be performed by processing in two steps.SELECTED DRAWING: Figure 10