Authentication system and authentication method
A device in an authentication system acquires a certificate revocation list along with a control command from an operating terminal to the device. The device determines the validity of the controller to which the device connects, based on the certificate revocation list acquired along with the control command.
1. An authentication method in an authentication system including a device, an operating terminal that operates the device, and a controller, where an authentication request from the device is authenticated by the controller, the method comprising:
acquiring, by the device, a first certificate revocation list from the controller;
after acquiring the first certificate revocation list, acquiring, by the device, a second certificate revocation list along with a control instruction from the operating terminal to the device, the first certificate revocation list and the second certificate revocation list relating to certificates of the controller and the device;
determining, by the device, validity of the controller based on the first certificate revocation list and the second certificate revocation list; and
determining, by the device, in accordance with a content of the control instruction, an execution order of the determination of the validity of the controller and control processing based on the content of the control instruction.
2. The authentication method according to claim 1 , further comprising:
disconnecting, by the device, connection between the device and the controller when it is determined that the controller is invalid.
3. The authentication method according to claim 1 ,
wherein the validity of the controller is determined by comparing a next issue date of the first certificate revocation list with an issue date of the second certificate revocation list.
4. The authentication method according to claim 1 ,
wherein the authentication system further includes a server,
and wherein the server provides the second certificate revocation list to the control instruction.
5. The authentication method according to claim 1 , further comprising:
determining, by the device, in accordance with the content of the control instruction, whether or not to execute control processing based on the content of the control instruction.
6. The authentication method according to claim 1 , further comprising:
when the device determines that the controller is invalid based on the comparing, deleting registration of the controller from a management table.
7. An authentication system including a device, an operating terminal that operates the device, and a controller, where an authentication request from the device is authenticated by the controller,
wherein the device
acquires a first certificate revocation list from the controller,
after the first certificate revocation list acquired, acquires a second certificate revocation list along with a control instruction from the operating terminal to the device, and
compare the first certificate revocation list of the controller and the second certificate revocation list of the operating terminal for consistency,
wherein the first certificate revocation list and the second certificate revocation list relate to certificates of the controller and the device,
wherein the device determines validity of the controller based on the comparing of the first certificate revocation list of the controller and the second certificate revocation list of the operating terminal,
wherein the device determines, in accordance with a content of the control instruction, an execution order of the determination of the validity of the controller and control processing based on the content of the control instruction, and
wherein the operating terminal, the device, and the controller are separated from one another.
8. A device connected to the authentication system according to claim 7 .