CROSS-REFERENCE TO RELATED APPLICATION

This application is based upon and claims the benefit of priority of the prior Japanese Patent Application No. 2018-014183, filed on Jan. 30, 2018, the entire contents of which are incorporated herein by reference.

FIELD

The embodiments discussed herein are related to a registration system and a registration method.

BACKGROUND

In recent years, due to advances in information communication technology, compact electronic devices or computers having communication capability have been widely used. For example, as the electronic device having a communication capability (hereinafter, referred to as a “communication processing apparatus”), there are a cellular phone, a smart phone, a router, a network switch, a network camera, a network conference device, and various sensors/home appliances having a network function.

Most of the communication processing apparatuses communicate with a server on a local area network in a home, an office, or the like, or on the Internet. Generally, a server distinguishes each of many communication processing apparatuses for communication. Furthermore, the users (owners, users, etc.) of the communication processing apparatuses are often different from each other. Therefore, the server correctly identifies the communication processing apparatus, and further restricts access to the information and control capability for each communication processing apparatus to a specific user. Since the access is restricted as such, the communication processing apparatus and the server perform a work and a processing in a state where the server and the communication processing apparatus correctly share an authentication key pair and the server properly recognizes a user corresponding to each communication processing apparatus. The work and the processing performed in such a state is called a “registration” or a “registration work”. Further, a server that accepts registration of the communication processing apparatus is called a “registration server”. The registration server may be separate server from a service providing server that is responsible for original communication with the communication processing apparatus or one server may serve as both the registration server and the service providing server.

The phrase “authentication key pair” refers to a pair of an authentication key to be kept secret and a verifier corresponding to the authentication key. For example, in a registration process, the communication processing apparatus to be authenticated allows a server which authenticates the authentication key to possess a verifier. An example of the authentication key pair, that is, a pair of the authentication key and the verifier may include {k, k} for the authentication key k in a symmetric key encryption scheme and {private key (sk), public key (pk)} in a public key encryption scheme. Further, the example of the authentication key pair may include {s, H(s)} (H(⋅) is a cryptographic hash function) in the secret value s such as a password.

In the registration work, a management apparatus that automates and simply performs the work may be used by being locally connected to or approaching the communication processing apparatus. Examples of local communication by local connection may include, for example, universal serial bus (USB) communication and wired local area network (LAN) communication which are physically connected. Further, the local communication which is performed by the approach may include, for example, Bluetooth (registered trademark) communication, infrared communication and near field communication (NFC).

In association with the registration work performed using the management apparatus, a system is known, which includes a service providing server, a terminal apparatus, and an authentication server and flexibly controls allocation of an account by the service providing server while preventing leakage of personal information which is information on a user of a terminal. In such a system, the service providing server allocates an ID to the terminal. When server identification information and the ID are transmitted from the terminal, the authentication server transmits the password stored in association with the ID to the terminal. The terminal transmits the ID and the password to the service providing server. The service providing server provides a service to the user of the terminal based on the ID and the password.

Related techniques are disclosed in, for example, Japanese Laid-open Patent Publication No. 2010-128554.

SUMMARY

According to an aspect of the embodiments, a registration system includes a management apparatus configured to include a first memory configured to store a first registration key, and a first processor coupled to the first memory and the first processor configured to acquire first information of an authentication key for registration from a communication processing apparatus to communicate with the management apparatus, put a signature for the first information with the first registration key, and transmit the first information completed with the signature to the communication processing apparatus, and a registration server configured to include a second memory configured to store a second registration key paired with the first registration key, and a second processor coupled to the second memory and the second processor configured to acquire a registration request including the first information completed with the signature by the management apparatus from the communication processing apparatus to communicate with the registration server, verify the signature put for the first information included in the registration request, by using the second registration key, and register the first information included in the registration request, based on a result of verifying the signature put for the first information.

The object and advantages of the invention will be realized and attained by means of the elements and combinations particularly pointed out in the claims.

It is to be understood that both the foregoing general description and the following detailed description are exemplary and explanatory and are not restrictive of the invention, as claimed.

