Skip to main content

This page has been translated using TexTra by NICT. Please note that the translation may not be completely accurate.
If you find any mistranslations, we appreciate your feedback on the "Request form for improving the automatic translation ".

Japanese Public Key Infrastructure (JPKI)

This section introduces basic information (service features and certification systems), service introduction examples, and useful information for introducing services (introduction methods, procedures for introduction, Japanese Public Key Infrastructure usage fees, etc.) necessary for introducing Japanese Public Key Infrastructure (JPKI * 1) to local governments and private sector residents.

* 1 Japanese Public Key Infrastructure

What's New

Contents

1. What is Japanese Public Key Infrastructure

Japanese Public Key Infrastructure is a safe and secure identity verification service that uses electronic certification installed in My Number Card's IC chips (My Number is not used) to officially authenticate users and confirm that documents such as contracts have not been tampered with online. Japanese Public Key Infrastructure can be used not only by administrative agencies but also by various services in private sector.

The use of Japanese Public Key Infrastructure is expected to improve customer service and reduce administrative costs. For example, it can reduce the cost and time required for customers to fill out and mail identity verification documents and application forms. It can also reduce the workload required for private sector to receive and examine documents.

Japanese Public Key Infrastructure is used by 634 companies in private sector (as of December 25, 2024) for a variety of purposes, including opening bank and securities accounts and making loan contracts.

Based on the Public Personal Authentication Law * 2, this system is operated by Japan Agency for Local Authority Information Systems (hereinafter referred to as "J-LIS"), a corporation jointly managed by the national and local governments, and has the highest level of security and reliability.

When private sector introduces a Japanese Public Key Infrastructure, there are two ways. One is to become an approved business operator by obtaining the approval of the competent minister based on the Public Personal Authentication Act, and the other is to use the Japanese Public Key Infrastructure by entrusting the work of verifying signatures to an approved business operator. To become an approved business operator, it is necessary to have the facilities and systems for managing information in the work of verifying signatures. The facilities can also be used in the cloud. On the other hand, by entrusting the work of verifying signatures to an approved business operator, it is possible to introduce the signature verification without each business operator having to install the signature verification facilities.

The government as a whole is strongly promoting initiatives * 3 aimed at spreading and expanding the use of My Number Card, including Japanese Public Key Infrastructure, and My Number Card is becoming increasingly convenient and user-friendly for citizens. Currently, the number of valid applications * 4 for My Number Card has exceeded the number of driver's licenses issued as of January 2023, and has reached two-thirds of the population (about 83 million applications).

* 2 Act on Certification Business of Japan Agency for Local Authority Information Systems Concerning Electronic Signatures, etc.

* 3 Please refer to the following for the roadmap of main initiatives.
Priority Plan Roadmap for the Realization of a Digital Society (PDF / 2,015 kb)
Sections concerning My Number Card
P7: (4) Promoting the spread and use of My Number Card
P24 to P25: Process Sheet for digitalisation of Various Cards Using My Number Card

* 4 The number of applications for issuance of My Number Card, excluding cases where there were defects in documents and cases where applications were cancelled. For the latest number of valid applications, please refer to the dashboard on the popularization of Japanese Public Key Infrastructure.

2. Service Features

This enables us to improve customer service by eliminating the need to enter names and addresses on application forms and reducing the time and effort involved in mailing applications, reduce administrative costs by eliminating the need to fill out application forms, and strengthen security.

2.1. Improve customer service

You can reduce the cost borne by customers, such as preparing and filling out identity verification documents and application forms, and mailing them.
For example, in the case of a identity verification for opening a bank account, it is necessary to submit identity verification documents and an application form, but if you use a Japanese Public Key Infrastructure, you can make a identity verification and apply online. This reduces the cost of preparing, filling out, and mailing the documents. In addition, by transcribing the information from the four pieces of information recorded in the electronic certification for signing (address, name, date of birth, and gender), you can reduce the burden and errors related to customer input. In addition, since the identity verification is completed online, you can provide services without restrictions on time and place.

2. 2. Administrative cost reduction

Administrative costs borne by identity verification, such as the receipt and examination of private sector documents and application forms, and the mailing of notifications to customers, can be reduced.
For example, in the case of identity verification at the time of opening a bank account, there have been requests to receive and examine identity verification documents and application forms, and to resend documents when there are incomplete entries. By using Japanese Public Key Infrastructure, identity verification and application can be made online, reducing the work burden.

2.3. Security Enhancements

Japanese Public Key Infrastructure uses a cryptographic technique called "public key cryptography" to ensure the security of communications.
Public-key cryptography uses two different keys (a private key and a public key) for encryption and decryption, and is characterized by the fact that encryption with one key cannot be decrypted without the other key.
Also, My Number Card's IC chips contain private keys.
In the event that information recorded in the My Number Card IC chips is improperly read, countermeasures such as automatic deletion are taken, so there is no need to worry about the secret keys being stolen.

Please refer to the following for details of "Public Key Cryptography".

3. Service Introduction Method

This chapter introduces the service introduction method for the private sector which is interested in the introduction of Japanese Public Key Infrastructure.

3.1. Service Introduction Method

When using a Japanese Public Key Infrastructure, a service introduction business operator needs to confirm the effectiveness of the electronic certification provided by the customer. There are two service introduction methods: one is to become a "platform business operator" that conducts the effectiveness confirmation itself, and the other is to become a "service provider business operator" that entrusts the effectiveness confirmation to the platform business operator.

3.1. 1. How to Become a Service Provider

A service provider (hereinafter referred to as "SP") is a business that does not install its own signature verification equipment when using a Japanese Public Key Infrastructure and provides services by entrusting the confirmation of the validity of the electronic certification to a PF business.
By entrusting the verification of the effectiveness of the electronic certification, it is possible to reduce the burden of expenses related to the maintenance and operation of equipment, shorten the period until the introduction of the service, and introduce it cheaply and quickly. The flow of the verification of the effectiveness of the electronic certification in the case of the SP business operator is as shown in Fig. 1. In general, the use of the service related to the signature verification incurs a service usage fee specified by the PF business operator. The usage fee varies depending on the PF business operator.
For procedures for becoming an SP operator and service usage fees, please contact " 7.2.4. Inquiries about services provided by platform operators: ".

Illustration explaining the flow of electronic certification validation in the case of an SP operator. When a service user sends a electronic certification to a service provider operator, the entrusted platform operator verifies the validity of the electronic certification with the Japan Agency for Local Authority Information Systems. The platform operator that receives the verified result provides the result to the service provider operator, and the service provider operator that receives the result provides the service after verifying the validity of the electronic certification.
Figure 1: Flow of electronic certification Validation (SP Operator)

3.1.2. How to become a platform operator

When using a Japanese Public Key Infrastructure, a electronic certification that verifies the validity of the private sector itself with the J-LIS must establish a signature verification facility and become a "platform business operator (hereinafter referred to as the" PF business operator ")" after being certified by the competent minister based on the Public Personal Authentication Act.

The PF business operator can provide the function of electronic certification validation to another private sector as a platform.
The signature verification equipment to be installed can also be installed in the cloud. This is expected to reduce the cost burden related to the installation and operation of the equipment and shorten the time to the introduction of the service.

When using the service, a electronic certification verification fee is charged to J-LIS. The fee is based on the number of confirmations. It is 20 yen per electronic certification for signature verification and 2 yen per electronic certification for user identification verification. From January 2023, these fees will be free for the time being.
For the procedure to become a PF business operator, please refer to " 3.2 Procedure to Become a Platform Business Operator ".

3.2. Procedures for becoming a platform operator

When introducing services as a PF business operator, it is necessary to first obtain technical specifications, etc. from the J-LIS and then proceed with the competent minister approval procedure. After obtaining the approval, it is necessary to improve the system environment for signature verification, etc.

It takes about six months to one year from the acquisition of technical specifications to the acquisition of certification by the competent minister. For an overview of the procedures, please refer to the guidelines published by Ministry of Internal Affairs and Communications and Digital Agency below.

For the overview of the procedures, see "C. Accreditation Procedures" on pages 39 to 41.

3.2.1. Acquisition of Technical Specifications

After exchanging a pledge of confidentiality with J-LIS, we will apply for the disclosure of technical specifications, etc. related to Japanese Public Key Infrastructure. These documents are necessary for the competent minister approval procedure and system environment development, but they are also necessary for the consideration of the introduction of services, so please use them from the consideration stage.

3.2. 2. Competent Minister Accreditation Procedures

Based on the technical specifications provided by the J-LIS, we will respond to the requirements indicated in the accreditation standards, prepare documents to prove that the requirements are met, and apply for accreditation to Digital Agency and Ministry of Internal Affairs and Communications with the documents.

3. 2.3. Preparation for Commencement of Actual Use

After obtaining the certification, the operation is verified in the test environment of the Japanese Public Key Infrastructure. If there are no problems, based on the provisions of the Public Personal Authentication Act, a notification, etc. is submitted to receive the effectiveness verification results of the electronic certification from J-LIS. Finally, the operation is verified in the production environment, and the service is started.

3. 3. Japanese Public Key Infrastructure Fees

In the use of Japanese Public Key Infrastructure, there are no costs associated with obtaining or maintaining the competent minister's certification, unlike general national government licensing projects. Only the electronic certification Verification Fee for J-LIS is required.

The Japanese Public Key Infrastructure usage fee is charged according to the number of validity confirmations. The fee is 20 yen per electronic certification for signature confirmation and 2 yen per electronic certification for user identification confirmation.

These usage fees will be free for the time being from January 2023 * 8. The aim is to lower the cost of using the service for PF operators and support the introduction of the service. For details, please refer to the following.

* 8 The CRL method will be free permanently, and the OCSP responder method will be free for three years for the time being.

4. Service Case Studies

In this chapter, we introduce a case study in private sector, where Japanese Public Key Infrastructure is currently being introduced. We publish information that can be used as a reference, such as how it is being introduced in what industries and services, and what advantages it has for the private sector and customers. We hope that you will use this information when considering the introduction.
For example, in the banking and securities industries, Japanese Public Key Infrastructure is widely used to open accounts, and its introduction is proving effective. It eliminates the need to copy identity verification documents, fill out an application form, and send it by mail, which were necessary when opening an account. By using electronic certification in My Number Card, you can easily and accurately apply through a smartphone, etc. This leads to a reduction in administrative costs such as reception and screening, and an improvement in customer convenience.

5. Authentication Mechanism

For the Japanese Public Key Infrastructure, the electronic certification mounted on the IC chip of the My Number Card is used. The J-LIS, which is the issuer of the electronic certification, becomes a trust anchor (base point of reliability) and proves its effectiveness.

5.1. What is the effectiveness of a electronic certification?

The electronic certification loses its validity depending on the conditions, so the private sector needs to confirm the validity of the electronic certification submitted by the client.

5.1. 1. electronic certification Revocation Conditions

The conditions for invalidation of a electronic certification include the expiration of the validity period of the electronic certification, a change in the four basic information on the resident record (address, name, date of birth, and gender), and the death of the person concerned. There are two types of electronic certification: "electronic certification for signature" and "electronic certification for user identification," and the conditions for invalidation are different for each.
For details of "electronic certification for signature" and "electronic certification for user identification", please refer to " 4.2 Type of electronic certification ".
Please refer to the following for details of the electronic certification expiration conditions.

5.1.2. electronic certification validation scheme

There are two types of electronic certification validation methods: the CRL provisioning method and the OCSP responder method.

(1) CRL Provision Method
CRL * 5 is a list of revocation information of electronic certification.

The CRL provision method is a method to provide a list of revocation information of a electronic certification periodically (once a day, etc.).

The CRL provided by the J-LIS is updated on a daily basis. The private sector downloads it locally and verifies the validity of the electronic certification by comparing it with the issuing number of the electronic certification of the service user.

A feature of the CRL provision method is that it can be checked offline.

* 5 Certification Revocation List

An illustration explaining the CRL provision method. private sector downloads locally the CRL provided by Japan Agency for Local Authority Information Systems, and verifies the validity of the CRL by checking the CRL against the electronic certification issue number transmitted from the service user, enabling the provision of the service.
Figure 2 CRL Provision Method

(2) OCSP Responder Method
OCSP * 6 is a communication protocol for confirming the validity of electronic certification.

The OCSP responder method is a method in which a response server called an "OCSP responder" responds individually to the validity inquiry of a specific electronic certification.

The OCSP responder stores revocation information and updates it every 15 minutes. The OCSP responder matches the revocation information with the issue number of the service-user's electronic certification and provides the validation results.

The OCSP responder method is characterized by real-time verification. On the other hand, it should be noted that the validity of the electronic certification cannot be verified offline.

* 6 Online Certification Status Protocol

Illustration explaining the OCSP responder method. When a service user sends a electronic certification, the OCSP responder in Japan Agency for Local Authority Information Systems checks the validity and sends the result back to private sector. private sector receives the result and can provide the service to the service user.
Figure 3 OCSP Responder Method

5.2. electronic certification type

There are two types of electronic certification, "electronic certification for signature" and "electronic certification for user identification".

5.2.1. electronic certification for signature

It is used when creating and sending electronic documents such as applications and contracts on the Internet, etc., and it can be confirmed that the electronic documents created and sent by the users are "authentic ones created by the users and sent by the users." Electronic signatures using electronic certification for signatures can be subject to Article 3 (Presumption of Authentic Establishment of Electronic Records) * 7 of Act on Electronic Signatures and Certification Business. In other words, an electronic document with an electronic signature that meets certain requirements by the Principal is presumed to be authentically established (created based on the intention of the Principal).

* 7 Quoted from Article 3 of Act on Electronic Signatures and Certification Business
An electronic or magnetic record prepared for the purpose of representing information (excluding one prepared by a public officer in the course of his / her duties) is presumed to be authentic if an electronic signature (limited to an electronic signature that can be performed only by the principal by appropriately managing the codes and materials necessary for performing the electronic signature) has been performed by the principal on the information recorded in the electronic or magnetic record.

5.2.2 electronic certification for User Identification

It is mainly used when logging in to Internet sites, etc., and can confirm that the person who logged in is the user himself.

Since the electronic certification for signatures and the electronic certification for user identification are used for different purposes, there are differences in the information held. The main difference is whether or not the basic four information (address, name, gender, date of birth) is held in the electronic certification. The basic four information is held in the electronic certification for signatures, which is used for electronic signatures at the time of application, etc., because it is necessary to confirm the accurate address, etc. of the applicant, etc. The basic four information is not held in the electronic certification for user identification, which is used for login of Internet sites, etc., as long as the identity of the applicant can be confirmed. electronic certification

Please refer to the following for details of "5.2 Types of electronic certification".

6. Functional expansion of Japanese Public Key Infrastructure

6.1. Service to provide the latest user information (4 information) (started on May 16, 2023)

Overview of the Services
This is a service that enables online inquiries of the latest four pieces of information (address, name, date of birth, and gender) of customers to the J-LIS (Japanese Public Key Infrastructure) at any time, on the premise that prior consent has been obtained from the person using Japan Agency for Local Authority Information Systems. This enables, for example, financial institutions to immediately confirm changes in the address of a customer.

The Service was launched on May 16, 2023 and is summarized below.

The details of this service are described in "5. Overview of the Service for Providing Latest User Information Based on Individual Consent (Basic 4)" below (pages 43 to 49).

Customer consent is required for private sector to provide the Services.
Such consent is required to be easy to understand for customers and must be obtained without fail. When obtaining consent, please check the following materials for points to note.

Procedures for using the Service
This service is an additional service to the Japanese Public Key Infrastructure, so you need to go through the procedure for using the Japanese Public Key Infrastructure at the private sector first.

After completing the procedures for Japanese Public Key Infrastructure, please complete the procedures for using this service.

For details of Japanese Public Key Infrastructure, please refer to electronic certification (for private sector) Electronic certification by Japanese Public Key Infrastructure (for private sector) Japanese Public Key Infrastructure.

The following procedures are required to use this service.

  1. Service provider businesses (businesses that use Japanese Public Key Infrastructure after entrusting the work of verifying signatures to platform businesses)
    The service provider can receive the information necessary for system support from the platform operator to whom the signature verification work is entrusted.
    The platform operators supporting this service are as follows.

  2. Platform business operators (business operators using Japanese Public Key Infrastructure that have been certified by the competent minister)
    You need to apply for the use of this service to J-LIS. Please contact the following inquiries.
    Contact:
    After that, it is necessary to make a pledge of confidentiality with J-LIS and apply for disclosure of technical specifications, etc.

"6.1.1. On October 29, 2024, the" "Principal Consent Acquisition Support Service," "which is necessary for the" "Basic Four Information Provision Services," "was launched using Mynaportal."

By using this service, private sector can obtain consent from customers required to use the "Latest User Information (4 information) Provision Service."
For new customers, it is easy to obtain consent from customers at the time of application. However, we have started a "Principal Consent Acquisition Support Service" as a method to smoothly obtain the principal's consent for existing customers. Please check the details below.

Benefits of using this service
  • Merits for the business operator
    • It is easier to obtain the consent of existing customers.
    • The system development cost for obtaining consent is reduced.
    • After obtaining consent, administrative costs associated with procedures for changing basic 4 information such as address will be reduced.
    • It is possible to prevent erroneous input of a change document of a customer and to always update the customer information.
  • Benefits to the public
    • It is easy to take the procedure by using Mynaportal.
    • When there is a change in address, etc. due to moving, etc., the necessary procedures become unnecessary.
Examples of e-mails to customers

Please refer to the following for information on the consent procedure. The text data of the e-mail sample will be distributed when the specifications are disclosed.

Inquiries

For inquiries regarding this service, please contact:
Forms: regarding the use of
*Please select "Basic 4 Information Provision Services" in the question "5. Please select the content of your inquiry" in the form.

6.2. Installation of the My Number Card function (electronic certification) on smartphones (started on May 11, 2023)

By incorporating the functions of electronic certification in My Number Card into a smartphone, it has become possible to apply for and use various My Number Card services anytime and anywhere on a single smartphone without having to carry a My Number Card.

Details are provided below. Please refer to it when considering the use of this service. We will continue to expand the information gradually.

7. Inquiries

7.1. Frequently Asked Questions

For frequently asked questions (FAQ), please refer to the following pages:

7.2. Inquiries

7.2.1. My Number Card in general

For inquiries about My Number Card in general, please check Inquiries about My Number System .

7.2. 2. Introduction of Japanese Public Key Infrastructure

For the introduction of Japanese Public Key Infrastructure, please contact us from the inquiry form regarding the use of [Digital Agency] My Number Card (Japanese Public Key Infrastructure).
We also accept inquiries from people who wish to hold a briefing session for groups or have questions. At the briefing session, we hold a briefing session for groups so that Japanese Public Key Infrastructure can be used in many private sector. We introduce useful information for considering the introduction of Mynaportal, such as an overview of My Number Card and Japanese Public Key Infrastructure, usage examples, the latest trends, and an overview of Japanese Public Key Infrastructure.

7.2.3. Certification by the competent minister in Japanese Public Key Infrastructure

Please contact us by e-mail at the following address.
When you send an e-mail, please send it to the two e-mail addresses of Digital Agency and Ministry of Internal Affairs and Communications listed in the delivery address, with the matters listed in the delivery content.

  • Send To
    To prevent spam mail, "@" is displayed as " _ atmark _ ". When sending mail, please change " _ atmark _ " to "@" (one byte).
    • E-mail (Digital Agency): mynumber _ team _ atmark _ digital. go. jp
    • Email address (Ministry of Internal Affairs and Communications): kouteki-kojin _ atmark _ soumu. go. jp
  • Contents of the delivery
    • Mail Subject
      • Enter "Inquiries about the PF Business Operator System (name of business operator / organization)"
    • Mail text
      • Name of business / organization, name of department, name of person in charge, contact information (e-mail address & phone number)

7.2.4. Other Services

For other services, please check each service site.

7.2.5. Inquiries about the services provided by platform operators

For further information on the services provided by PF service providers to their customers or SP service providers, please contact the following PF service providers.

When sending mail, please change " _ atmark _ " to "@" (one byte). To prevent unwanted mail, "@" is displayed as " _ atmark _ ".

The above information is provided only for PF business operators that have obtained approval to provide contact information.
Also, some PF operators do not provide the function of confirming the effectiveness of electronic certification for SP operators as a platform.

8. Related Documents

8.1. private sector Guidelines for Japanese Public Key Infrastructure Use

This is a guideline published by private sector for the purpose of supporting the consideration of the use of Japanese Public Key Infrastructure in Ministry of Internal Affairs and Communications and explaining the introduction procedure. It summarizes the outline and merits of the service, and the guide to the use of the service (information systems necessary for private sector, certification standards and procedures by the competent minister, electronic certification verification fees).

Please refer to this document for detailed and comprehensive information when considering the introduction of services.

Please refer to the following Ministry of Internal Affairs and Communications website, which also contains this report.

8.2. Procedure Flow for Provision of Expired Information by Signature Verifier, etc. (private sector)

J-LIS introduces the procedures for verifying signatures, the work flow, and documents required for the procedures when private sector introduces Japanese Public Key Infrastructure as a PF business operator.

Please refer to the following documents when confirming the necessary procedures with J-LIS.

Please refer to the following J-LIS website for reference.