Identification information creating apparatus, identification information resolving apparatus, information system utilizing the apparatuses, controlling method and program thereof

An identification information resolving apparatus which judges whether derivative identification information being different identification information to identify a user is created from user identification information being original identification information to identify the user, the identification information resolving apparatus comprising:

• an encrypted identification information extracting unit for extracting encrypted identification information included in the derivative identification information, the encrypted identification information being encrypted based on a predetermined encryption key;
• an encrypted identification information decrypting unit for decrypting the encrypted identification information based on a decryption key corresponding to the encryption key and thereby creating decrypted identification information;
• and
• an identification information judging unit for determining that the derivative identification information is created from the user identification information when part of the decrypted identification information coincides with information created based on the user identification information.

An identification information resolving apparatus which judges whether derivative identification information being different identification information to identify a user is created from user identification information being original identification information to identify the user, the identification information resolving apparatus comprising:

• a derivative value creating unit for creating a derivative value being a predetermined data value;
• a user identification information encrypting unit for encrypting information including the user identification information and the derivative value based on a predetermined encryption key and thereby creating encrypted identification information;
• an expected value creating unit for creating an expected value for the derivative identification information based on the encrypted identification information;
• and
• an identification information judging unit for determining that the derivative identification information is created from the user identification information when the derivative identification information coincides with the expected value.

An identification information creating apparatus which creates derivative identification information being different identification information to identify a user from user identification information being original identification information to identify the user of an information system, the identification information creating apparatus comprising:

• a derivative value creating unit for creating first and second derivative values which are mutually different data values;
• a user identification information encrypting unit for encrypting information including the user identification information based on a predetermined encryption key and thereby creating encrypted identification information;
• and
• a derivative identification information creating unit for creating first derivative identification information including the encrypted identification information and the first derivative value and for creating second derivative identification information including the encrypted identification information and the second derivative value. 11. An identification information resolving apparatus which judges whether derivative identification information being different identification information to identify a user is created from user identification information being original identification information to identify the user, the identification information resolving apparatus comprising:
• an encrypted identification information extracting unit for extracting encrypted identification information which is encrypted based on a predetermined encryption key, the encrypted identification information being included as part of the derivative identification information;
• an encrypted identification information decrypting unit for decrypting the encrypted identification information based on a decryption key corresponding to the encryption key and thereby creating decrypted identification information;
• and
• an identification information judging unit for determining that the derivative identification information is created from the user identification information when at least part of the decrypted identification information coincides with information created based on the user identification information.

An information system comprising:

• identification information creating apparatus which creates derivative identification information being different identification information to identify a user from user identification information being original identification information to identify the user;
• and
• an identification information resolving apparatus which judges whether the derivative identification information is created from the user identification information,
• wherein the identification information creating apparatus includes:
• a derivative value creating unit for creating first and second derivative values which are mutually different data values;
• a user identification information encrypting unit for creating first encrypted identification information which is encrypted information including the user identification information and the first derivative value based on a predetermined encryption key and for creating second encrypted identification information which is encrypted information including the user identification information and the second derivative value based on the predetermined encryption key;
• and
• a derivative identification information creating unit for creating first derivative identification information based on the first encrypted identification information and for creating second derivative identification information based on the second encrypted identification information, and
• wherein the identification information resolving apparatus includes:
• an encrypted identification information extracting unit for extracting the first and second encrypted identification information included respectively in the first and second derivative identification information, the first and second encrypted identification information respectively being encrypted based on the encryption key;
• an encrypted identification information decrypting unit for decrypting the first and second encrypted identification information based on a decryption key corresponding to the encryption key and thereby creating first and second decrypted identification information;
• and
• an identification information judging unit for judging that the first derivative identification information is created from the user identification information when part of the first decrypted identification information coincides with information created based on the user identification information, and that the second derivative identification information is created from the user identification information when part of the second decrypted identification information coincides with information created based on the user identification information.

A controlling method for controlling an identification information creating apparatus which creates derivative identification information being different information to identify a user from user identification information being original identification information to identify the user of an information system, the controlling method comprising:

• a derivative value creating step of creating first and second derivative values which are mutually different data values;
• a user identification information encrypting step of creating first encrypted identification information which is encrypted information including the user identification information and the first derivative value based on a predetermined encryption key and creating second encrypted identification information which is encrypted information including the user identification information and the second derivative value based on the predetermined encryption key;
• and
• a derivative identification information creating step of creating first derivative identification information based on the first encrypted identification information and creating second derivative identification information based on the second encrypted identification information.

A controlling method for controlling an identification information resolving apparatus which judges whether derivative identification information being different identification information to identify a user is created from user identification information being original identification information to identify the user, the controlling method comprising:

• an encrypted identification information extracting step of extracting encrypted identification information included in the derivative identification information, the encrypted identification information being encrypted based on a predetermined encryption key;
• an encrypted identification information decrypting step of decrypting the encrypted identification information based on a decryption key corresponding to the encryption key and thereby creating decrypted identification information;
• and
• an identification information judging step of determining that the derivative identification information is created from the user identification information when part of the decrypted identification information coincides with information created based on the user identification information.

A controlling method for controlling an identification information resolving apparatus which judges whether derivative identification information being different information to identify a user is created from user identification information being original identification information to identify the user, the controlling method comprising:

• a derivative value creating step of creating a derivative value which is a predetermined data value;
• a user identification information encrypting step of encrypting information including the user identification information and the derivative value based on a predetermined encryption key and thereby creating encrypted identification information;
• an expected value creating step of creating an expected value for the derivative identification information based on the encrypted identification information;
• and
• an identification information judging step of determining that the derivative identification information is created from the user identification information when the derivative identification information coincides with the expected value.

A program for allowing an information processing apparatus to function as an identification information creating apparatus which creates derivative identification information being different identification information to identify a user from user identification information being original identification information to identify the user of an information system, the program allowing the information processing apparatus to function as:

• a derivative value creating unit for creating first and second derivative values which are mutually different data values;
• a user identification information encrypting unit for creating first encrypted identification information which is encrypted information including the user identification information and the first derivative value based on a predetermined encryption key and creating second encrypted identification information which is encrypted information including the user identification information and the second derivative value based on the predetermined encryption key;
• and
• a derivative identification information creating unit for creating first derivative identification information based on the first encrypted identification information and creating second derivative identification information based on the second encrypted identification information.

A program for allowing an information processing apparatus to function as an identification information resolving apparatus which judges whether derivative identification information being different identification information to identify a user is created from user identification information being original identification information to identify the user, the program allowing the information processing apparatus to function as:

• an encrypted identification information extracting unit for extracting encrypted identification information included in the derivative identification information, the encrypted identification information being encrypted based on a predetermined encryption key;
• an encrypted identification information decrypting unit for decrypting the encrypted identification information based on a decryption key corresponding to the encryption key and thereby creating decrypted identification information;
• and
• an identification information judging unit for determining that the derivative identification information is created from the user identification information when part of the decrypted identification information coincides with information created based on the user identification information.

A program for allowing an information processing apparatus to function as an identification information resolving apparatus which judges whether derivative identification information being different identification information to identify a user is created from user identification information being original identification information to identify the user, the program allowing the information processing apparatus to function as:

• a derivative value creating unit for creating a derivative value which is a predetermined data value;
• a user identification information encrypting unit for encrypting information including the user identification information and the derivative value based on a predetermined encryption key and thereby creating encrypted identification information;
• an expected value creating unit for creating an expected value for the derivative identification information based on the encrypted identification information;
• and
• an identification information judging unit for determining that the derivative identification information is created from the user identification information when the derivative identification information coincides with the expected value.