お知らせ

CSP 2024において当研究所研究員が研究発表を行いました

デロイト トーマツ サイバーセキュリティ先端研究所(DT-ARLCS)

2024年4月20日から4月22日にかけて、2024 8th International Conference on Cryptography, Security and Privacy (CSP 2024) が大阪で開催されました。研究会において、当研究所の研究員である林田 淳一郎が "A Trust Service Model Adaptable to Various Assurance Levels by Linking Digital IDs and Certificates" と題した研究論文を発表しました。研究では、デジタルIDと複数の電子証明書の結びつけを行うためのトラストサービスモデルの提案を行いました。提案により、適切な保証レベルと法的要件に応じた電子証明書の使い分けをユーザ側で行うことが可能となります。また、パスポートを用いたeKYCを導入することによるインバウンド観光客向けの身元確認手段の提供と相互運用性についての検討も行いました。

研究成果の発表

2024年4月

A Trust Service Model Adaptable to Various Assurance Levels by Linking Digital IDs and Certificates

学会・研究会:2024 8th International Conference on Cryptography, Security and Privacy (CSP 2024)
著者:Junichiro Hayata, Kenta Nomura, Yuta Takata, Hiroshi Kumagai, Masaki Kamizono (DTCY), Tsuyoshi Kono, Yoshihiro Maeda (DTG), Naohisa Fukuda (Japan Communications Inc.)
https://www.iccsp.org/(外部サイト)

論文概要

Trust services based on regulations and guidelines such as those provided by eIDAS and NIST SP800-63 are rapidly proceeding toward the realization of sound electronic transactions. The assurance level of the entire service is determined by the assurance level of the trust service provider, identity verification, and authentication. For example, transactions in compliance with the law require identity authentication using digital certificates with a high level of assurance. However, since personal information is required for strict authentication, there is a privacy trade-off. Therefore, it is preferable to have the ability to use different digital certificates for different services depending on the appropriate assurance level and legal requirements. However, there are some practical issues, such as the inability to link services across multiple digital certificates and complexities involved in managing them. Therefore, this study proposes a trust service model that is adaptable to various assurance levels by defining replaceable service components. Specifically, users are issued multiple digital certificates with different assurance levels, which they can link with their digital ID, enabling certificate switching and flexible inter-service collaboration. This study introduces domestic examples based on this model, whereby the scalability of the services is studied in relation to passport identity verification.

お役に立ちましたか?