# US 12,120,248 B2 · Owner identity confirmation system, terminal and owner identity confirmation method > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,120,248 B2 - Document ID: US12120248B2 - Status: Granted - Kind: B2 - Application number: 17/628,427 - Filed: 2019-08-01 - Published: 2022-09-08 - Granted: 2024-10-15 - Earliest claimed: 2019-08-01 - Assignees: Nippon Telegraph and Telephone Corporation - Applicants: Nippon Telegraph and Telephone Corporation - Inventors: Yoshihiko Omori; Takao Yamashita - Web page: https://patentgrep.com/patent/US12120248B2 ## CPC - H04L 9/3263: {involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements (network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823)} - G06F 21/31: User authentication - H04L 9/008: {involving homomorphic encryption} - H04L 9/0825: {using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates} - H04L 9/0866: {involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics} - H04L 9/3247: {involving digital signatures} - H04L 9/3273: {for mutual authentication (network architectures or network communication protocols for achieving mutual authentication in a packet data network H04L63/0869)} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract The owner sameness confirmation system determines whether or not the owners of two terminals (200A, 200B) are the same. The terminals (200A, 200B) store identity confirmation information stored in association with electronic certificates issued to the terminals by authentication station servers (100A, 100B). The terminal (200A) transmits information obtained by encrypting the identity confirmation information of the owner through homomorphic encryption to the terminal (200B). The terminal (200B) transmits response encrypted information including information obtained by encrypting the identity confirmation information of the owner of the terminal (200B), as a response to the terminal (200A). The terminal (200A) decrypts the response encrypted information and determines the sameness of the owners based on whether or not the decryption result matches a predetermined value. ## Claims ### Claim 1 An owner sameness confirmation system including a plurality of terminals and a plurality of authentication station servers, wherein each of the authentication station servers includes a first storage unit configured to store an electronic certificate issued to a terminal and identity confirmation information of an owner of the terminal in association with each other, each of the terminals includes: a second storage unit configured to store identity confirmation information stored in association with an electronic certificate in an authentication station server that issued the electronic certificate to the terminal; and a confirmation request unit, including one or more processors, configured to transmit a confirmation request message including encrypted information obtained by encrypting the identity confirmation information stored in the storage unit using a public key for homomorphic encryption, and the public key to a partner terminal that is a target of owner sameness confirmation, the partner terminal includes: a third storage unit configured to store identity confirmation information stored in association with an electronic certificate in an authentication station server that issued the electronic certificate to the partner terminal; and a confirmation response unit, including one or more processors, configured to, upon receiving the confirmation request message, transmit a confirmation response message including response encrypted information, which is the result of calculating an encrypted text obtained by encrypting the identity confirmation information stored in the storage unit using the public key, and the encrypted information through computation corresponding to the homomorphic encryption, as a response to the terminal, and each of the terminals further includes: a sameness determination unit, including one or more processors, configured to decrypt the response encrypted information, and determine whether or not the identity confirmation information of the owner of the terminal and the identity confirmation information of an owner of the partner terminal match each other based on whether or not the decryption result matches a predetermined value. ### Claim 2 A terminal for an owner sameness confirmation system that includes a plurality of terminals and a plurality of authentication station servers, the terminal comprising: a storage unit configured to store identity confirmation information of an owner of the terminal, the identity confirmation information being stored in association with an electronic certificate in an authentication station server that issued the electronic certificate to the terminal; a confirmation request unit, including one or more processors, configured to transmit a confirmation request message including encrypted information obtained by encrypting the identity confirmation information stored in the storage unit using a public key for homomorphic encryption, and the public key to a partner terminal that is a target of owner sameness confirmation; a confirmation response unit, including one or more processors, configured to, upon receiving the confirmation request message, transmit a confirmation response message including response encrypted information, which is the result of calculating an encrypted text obtained by encrypting the identity confirmation information stored in the storage unit using the public key, and the encrypted information through computation corresponding to the homomorphic encryption, as a response to the transmission source of the confirmation request message; and a sameness determination unit, including one or more processors, configured to decrypt the response encrypted information, and determine whether or not the identity confirmation information of the owner of the terminal and identity confirmation information of an owner of the partner terminal match each other based on whether or not the decryption result matches a predetermined value. ### Claim 3 (depends on 2) The terminal according to claim 2, wherein the identity confirmation information includes one or more items, the confirmation request unit is configured to calculate the encrypted information by encrypting the identity confirmation information for an item for confirming the sameness using the public key, the item being selected from among the one or more items, and transmit the item in a state of being included in the confirmation request message, the confirmation response unit is configured to generate the encrypted text obtained by encrypting the identity confirmation information for the item stored in the storage unit using the public key, calculate the response encrypted information, and transmit the calculated response encrypted information as a response, and the sameness determination unit is configured to decrypt the response encrypted information and determine whether or not the identity confirmation information for the item of the owner of the terminal and the identity confirmation information for the item of the owner of the partner terminal match each other based on whether or not the decryption result matches the predetermined value. ### Claim 4 (depends on 2) The terminal according to claim 2, wherein E, which is the homomorphic encryption, is homomorphic encryption in which E(M1)×E(M2)=E(M1+M2) is satisfied for unencrypted texts M1 and M2, the confirmation request unit is configured to transmit E(V1) as the encrypted information for identity confirmation information V1 of the owner of the terminal, the confirmation response unit is configured to generate a random number r for identity confirmation information V2 of the owner of the partner terminal and transmit E(V1)r×E(V2)−r as the response encrypted information as a response, and the sameness determination unit is configured to determine whether or not V1 and V2 match each other based on whether or not the decryption result of the response encrypted information is 0, which is the predetermined value. ### Claim 5 (depends on 2) The terminal according to claim 2, wherein E, which is the homomorphic encryption, is homomorphic encryption in which E(M1)×E(M2)=E(M1×M2) is satisfied for unencrypted texts M1 and M2, the confirmation request unit is configured to transmit E(V1) as the encrypted information for identity confirmation information V1 of the owner of the terminal, the confirmation response unit is configured to generate a random number r for identity confirmation information V2 of the owner of the partner terminal and transmit E(V1)r×E(V2)−r as the response encrypted information as a response, and the sameness determination unit is configured to determine whether or not V1 and V2 match each other based on whether or not the decryption result of the response encrypted information is 1, which is the predetermined value. ### Claim 6 (depends on 2) The terminal according to claim 2, wherein a value of a key owner included in the electronic certificate issued to the terminal is identification information of the terminal that is unrelated to the identity confirmation information of the owner of the terminal. ### Claim 7 (depends on 2) The terminal according to claim 2, wherein at least one of the confirmation request message and the confirmation response message transmitted by the terminal is signed using at least one of a secret key corresponding to the electronic certificate and a secret key corresponding to a model number electronic certificate indicating a model number of the terminal. ### Claim 8 An owner sameness confirmation method to be executed by a terminal of an owner sameness confirmation system that includes a plurality of terminals and a plurality of authentication station servers, wherein the terminal includes a storage unit configured to store identity confirmation information of an owner of the terminal, the method comprising: a step of transmitting a confirmation request message including encrypted information obtained by encrypting the identity confirmation information stored in the storage unit using a public key for homomorphic encryption, and the public key to a partner terminal that is a target of owner sameness confirmation; a step of, upon receiving the confirmation request message, transmitting a confirmation response message including response encrypted information, which is the result of calculating an encrypted text obtained by encrypting the identity confirmation information stored in the storage unit using the public key and the encrypted information through computation corresponding to the homomorphic encryption, as a response to the transmission source of the confirmation request message; and a step of decrypting the response encrypted information and determining whether or not the identity confirmation information of the owner of the terminal and identity confirmation information of an owner of the partner terminal match each other based on whether or not the decryption result matches a predetermined value. ### Claim 9 (depends on 8) The owner sameness confirmation method according to claim 8, wherein the identity confirmation information includes one or more items, and the method further comprises: calculating the encrypted information by encrypting the identity confirmation information for an item for confirming the sameness using the public key, the item being selected from among the one or more items, and transmitting the item in a state of being included in the confirmation request message, generating the encrypted text obtained by encrypting the identity confirmation information for the item stored in the storage unit using the public key, calculating the response encrypted information, and transmitting the calculated response encrypted information as a response, and decrypting the response encrypted information and determines whether or not the identity confirmation information for the item of the owner of the terminal and the identity confirmation information for the item of the owner of the partner terminal match each other based on whether or not the decryption result matches the predetermined value. ### Claim 10 (depends on 8) The owner sameness confirmation method according to claim 8, wherein E, which is the homomorphic encryption, is homomorphic encryption in which E(M1)×E(M2)−E(M1+M2) is satisfied for unencrypted texts M1 and M2, and the method further comprises: transmitting E(V1) as the encrypted information for identity confirmation information V1 of the owner of the terminal, generating a random number r for identity confirmation information V2 of the owner of the partner terminal and transmitting E(V1)r×E(V2)−r as the response encrypted information as a response, and determining whether or not V1 and V2 match each other based on whether or not the decryption result of the response encrypted information is 0, which is the predetermined value. ### Claim 11 (depends on 8) The owner sameness confirmation method according to claim 8, wherein E, which is the homomorphic encryption, is homomorphic encryption in which E(M1)×E(M2)=E(M1×M2) is satisfied for unencrypted texts M1 and M2, and the method further comprises: transmitting E(V1) as the encrypted information for identity confirmation information V1 of the owner of the terminal, generating a random number r for identity confirmation information V2 of the owner of the partner terminal and transmitting E(V1)r×E(V2)−r as the response encrypted information as a response, and determining whether or not V1 and V2 match each other based on whether or not the decryption result of the response encrypted information is 1, which is the predetermined value. ### Claim 12 (depends on 8) The owner sameness confirmation method according to claim 8, wherein a value of a key owner included in the electronic certificate issued to the terminal is identification information of the terminal that is unrelated to the identity confirmation information of the owner of the terminal. ### Claim 13 (depends on 8) The owner sameness confirmation method according to claim 8, wherein at least one of the confirmation request message and the confirmation response message transmitted by the terminal is signed using at least one of a secret key corresponding to the electronic certificate and a secret key corresponding to a model number electronic certificate indicating a model number of the terminal.