Skip to main content

This page has been translated using TexTra by NICT. Please note that the translation may not be completely accurate.If you find any mistranslations, we appreciate your feedback on the "Request form for improving the automatic translation ".

Japanese Public Key Infrastructure (JPKI)

Last Updated:

The following is a summary of basic information (service features and certification mechanisms), service introduction examples, and useful information (introduction methods, procedures for introduction, Japanese Public Key Infrastructure usage fees, etc.) necessary for introducing Japanese Public Key Infrastructure (JPKI * 1) to local governments and private sector residents.

* 1 Japanese Public Key Infrastructure

What's New

Contents

1. About Japanese Public Key Infrastructure

Japanese Public Key Infrastructure is a safe and secure identity verification service that uses electronic certification (not My Number) installed in My Number Card's IC chips to publicly verify the identity of the user and that documents such as contracts have not been tampered with online. Japanese Public Key Infrastructure can be used not only by administrative agencies but also by introducing it into various private sector services.

The use of Japanese Public Key Infrastructure is expected to improve customer service and reduce administrative costs. For example, the cost and time required for customers to fill out and mail identity verification documents and application forms can be reduced. In addition, the workload required for private sector to receive and review documents can be reduced.

As of June 9, 2025, there were 736 private sector companies using Japanese Public Key Infrastructure. It is used in a variety of situations, such as opening a bank or securities account or making a loan contract.

This system is operated by Japan Agency for Local Authority Information Systems (hereinafter referred to as "J-LIS"), a corporation jointly managed by the national and local governments based on the Public Personal Authentication Act * 2, and has the highest level of security and reliability.

When private sector introduces a Japanese Public Key Infrastructure, there are two ways to use it. One is to become a certified business operator by obtaining certification from the competent minister based on the Public Personal Authentication Act, and the other is to entrust the signature verification service to a certified business operator. To become a certified business operator, it is necessary to have facilities and systems for information management in the signature verification service. The facilities can also be used in the cloud. On the other hand, by entrusting the signature verification service to a certified business operator, it is possible to introduce a Japanese Public Key Infrastructure without requiring each business operator to develop signature verification facilities.

Efforts * 3 to promote and expand the use of My Number Card, including Japanese Public Key Infrastructure, are being strongly promoted throughout the government, and My Number Card is becoming increasingly convenient and easy to use for citizens. At present, the number of valid applications * 4 for My Number Card has exceeded the number of driver's licenses issued as of January 2023, reaching two-thirds of the population (approximately 83 million).

* 2 Act on Certification Business of Japan Agency for Local Authority Information Systems Concerning Electronic Signatures, etc.

* 3 Please refer to the following for the roadmap of major initiatives.
Priority Plan Road Map for the Realization of a Digital Society (PDF / 2,015 kb)
Section on My Number Card
P7: (4) Promoting the spread and use of My Number Card
P24 to P25: Road map for digitalisation of various cards using My Number Card

* 4 The number of applications for issuance of My Number Card, excluding cases where there were deficiencies in documents and cases where applications were canceled. For the latest number of valid applications, please refer to the My Number Card Promotion Dashboard Japanese Public Key Infrastructure.

2. Service Features

Customer service can be improved by eliminating the need to fill out application forms with address, name, etc., and by reducing the time and effort required for mailing, while administrative costs can be reduced by eliminating the need to fill out application forms, and security can be strengthened.

2.1. Improving Customer Service

You can reduce the costs that your customers incur, such as preparing and filling out identity verification documents and applications, and mailing them.
For example, in the case of identity verification when opening a bank account, identity verification documents and application forms must be submitted. By using Japanese Public Key Infrastructure, identity verification and application can be made online. This reduces the cost of preparing, filling out, and mailing documents. In addition, by transcribing information from the four types of information (address, name, date of birth, and gender) recorded in the signature electronic certification, the burden and errors related to customer input can be reduced. In addition, since identity verification is completed online, it is possible to provide services that are not limited by time and place.

2. 2. Reducing administrative costs

It can reduce administrative costs borne by identity verification, such as the acceptance and examination of private sector documents and application forms, and the mailing of notifications to customers.
For example, in the case of identity verification at the time of opening a bank account, there used to be requests for re-submission of documents when identity verification documents and application forms were received or reviewed or incomplete entries were made. By using Japanese Public Key Infrastructure, identity verification and application can be made online, reducing the work load.

2.3. Security Enhancements

Japanese Public Key Infrastructure uses a cryptographic technique called "public key cryptography" to ensure the security of communications.
Public-key cryptography uses two different keys (a private key and a public key) for encryption and decryption. A feature of public-key cryptography is that a key encrypted with one key can only be decrypted with the other key.
Also, the private key is recorded in the IC chip of the My Number Card.
There is no risk of theft of the private key because My Number Card takes countermeasures such as automatically deleting recorded information in IC chips when it is attempted to be illegally read.

For details of "Public Key Cryptography", please refer to the following.

3. How to Deploy Services

This chapter describes how to implement the service for a private sector that is interested in implementing Japanese Public Key Infrastructure.

3.1. Service Introduction Method

When using a Japanese Public Key Infrastructure, the service provider must confirm the validity of the electronic certification provided by the customer. There are two service introduction methods: one is to become a "platform provider" that carries out the validity confirmation by itself, and the other is to become a "service provider" that entrusts the validity confirmation to the platform provider.

3.1. 1. Becoming a Service Provider

A service provider (hereinafter referred to as "SP Operator") is a business that provides services for the use of Japanese Public Key Infrastructure by entrusting the validity confirmation of electronic certification to a PF Operator without establishing its own signature verification facilities.
Since the validity confirmation of the electronic certification is outsourced, it is possible to reduce the cost burden related to the maintenance and operation of the facility, shorten the period until the introduction of the service, and introduce the service inexpensively and quickly. The flow of the validity confirmation of the electronic certification in the case of the SP business operator is as shown in Fig. 1. In general, when using the service related to signature verification, a service usage fee specified by the PF business operator is incurred. The usage fee varies depending on the PF business operator.
For procedures to become an SP business operator and service usage fees, please contact " 7.2.4. Contact information for services provided by platform business operators" in .

An illustration explaining the flow of electronic certification validation in the case of the SP business operator. When the service user sends the electronic certification to the service provider business operator, the entrusted platform business operator confirms the validity of the electronic certification to the Japan Agency for Local Authority Information Systems. The platform business operator that received the confirmed result provides the result to the service provider business operator, and the service provider business operator that received the result provides the service after confirming the validity of the electronic certification.
Figure 1: Flow of electronic certification validation (SP companies)

3.1.2. Method of becoming a platform operator

When using a Japanese Public Key Infrastructure, a electronic certification that personally verifies the validity of the private sector with the J-LIS needs to develop signature verification equipment and become a "platform operator" (hereinafter referred to as a "PF operator") by obtaining the approval of the competent minister based on the Public Personal Authentication Act.

The PF operator can provide the function of electronic certification validity confirmation to other private sector as a platform.
The signature verification facility to be developed can also be introduced in a cloud-based format. This is expected to reduce the cost burden associated with the development and operation of the facility and shorten the time to service introduction.

When using the service, electronic certification verification fees are charged to the J-LIS. The fees are based on the number of confirmations, and are set at 20 yen per electronic certification for signatures and 2 yen per electronic certification for user certificates. From January 2023, these fees will be free for the time being.
For procedures to become a PF operator, please refer to " 3.2 Procedures to Become a Platform Operator ".

3.2. Procedures for becoming a platform operator

When introducing services as a PF business operator, it is necessary to obtain technical specifications, etc. from the J-LIS first, and then proceed with the certification procedure by the competent minister. After obtaining certification, it is necessary to develop a system environment for signature verification, etc.

It takes about six months to one year from the acquisition of the technical specifications to the certification by the competent minister. For an overview of the procedure, please refer to the guidelines published by Ministry of Internal Affairs and Communications and Digital Agency below.

See "C. Certification Procedures" on pages 39 to 41 for an overview of the procedures.

3.2.1. Obtaining Technical Specifications

After exchanging a pledge of confidentiality with the J-LIS, we will apply for the disclosure of technical specifications related to the Japanese Public Key Infrastructure. Although these documents are necessary for the certification procedure by the competent minister and the development of the system environment, they are also necessary for considering the introduction of services, so please make use of them from the consideration stage.

3.2. 2. Competent Minister Approval Procedures

Based on the technical specifications provided by the J-LIS, respond to the requirements specified in the certification standards, prepare documents to prove that the requirements are satisfied, and apply for certification examination to Digital Agency and Ministry of Internal Affairs and Communications.

3. 2.3. Production Ready

After obtaining certification, the system will be tested in a test environment in Japanese Public Key Infrastructure. If there are no problems, the J-LIS will submit a notification to receive the results of the validation of the electronic certification in accordance with the provisions of the Public Personal Authentication Act. Finally, the system will be tested in the production environment and the service will be started.

3. 3. Japanese Public Key Infrastructure Charges

In the use of Japanese Public Key Infrastructure, unlike in the case of general government licensed projects, there are no costs associated with obtaining or maintaining the certification of the competent minister. Only the electronic certification verification fee for J-LIS is required.

The Japanese Public Key Infrastructure usage fee is a pay-as-you-go system based on the number of validity confirmations. It is set at 20 yen per electronic certification for signature and 2 yen per electronic certification for user certificate.

These usage fees will be free for the time being from January 2023 * 8. The aim is to reduce service usage costs for PF operators and support the introduction of services. For details, please refer to the following.

* 8 The CRL method will be permanently free of charge, and the OCSP responder method will be free of charge for three years for the time being.

4. Service Case Studies

In this chapter, we introduce an example of the introduction of Japanese Public Key Infrastructure in private sector. We provide information that can be used as a reference, such as how it has been introduced in what industries and services, and what benefits it has for private sector and customers. We hope you will find it useful in your consideration of the introduction.
For example, in the banking and securities industry, Japanese Public Key Infrastructure is widely used for account opening, and its introduction has been recognized for its effectiveness. It eliminates the need to copy identity verification documents and fill out and mail application forms, which were necessary when opening an account. By using My Number Card electronic certification, it is possible to easily and accurately apply from smartphones, etc. This reduces administrative costs such as reception and screening, and improves customer convenience.

5. Authentication Mechanism

The Japanese Public Key Infrastructure uses a electronic certification mounted on the My Number Card's IC chip. The J-LIS, the issuer of the electronic certification, serves as the trust anchor (the point of trust) and proves its validity.

5.1. What is electronic certification effectiveness?

The electronic certification must verify the validity of the electronic certification submitted by the customer, as the private sector will lose its validity depending on the conditions.

5.1. 1. electronic certification Expiry Conditions

The conditions for revocation of a electronic certification include the expiration of the validity period of the electronic certification, a change in the four basic information (address, name, date of birth, gender) of the resident record, and the death of the person concerned. There are two types of electronic certification: "electronic certification for signature" and "electronic certification for user certificate", and the conditions for revocation are different for each type.
For details of "electronic certification for signature" and "electronic certification for user certificate", please refer to " 4.2 electronic certification type ".
Please refer to the following for details of electronic certification expiration conditions.

5.1.2. electronic certification validation scheme

There are two types of electronic certification validation methods: the CRL provision method and the OCSP responder method.

(1) CRL Provision Method
CRL * 5 is a list of revocation information for electronic certification.

The CRL provision method is a method of providing a list of electronic certification revocation information periodically (once a day, etc.).

The CRL provided by the J-LIS is updated on a daily basis. The private sector verifies the validity of the electronic certification by downloading it to local environments and matching it to the issuing number of the customer's electronic certification.

A feature of the CRL provision method is that it can be checked offline.

* 5 Certification Revocation List

An illustration explaining the CRL provision method. The private sector downloads the CRL provided by the Japan Agency for Local Authority Information Systems locally, and verifies the validity of the CRL by comparing it with the issuance number of the electronic certification sent from the service user, thereby enabling the provision of the service.
Figure 2: CRL Provision Method

(2) OCSP Responder Method
OCSP * 6 is a communications protocol used to check the validity of electronic certification.

The OCSP responder method is a method of individually responding to inquiries about the validity of a specific electronic certification from a server for response called an "OCSP responder".

The OCSP responder stores revocation information and updates it every 15 minutes. The OCSP responder matches the revocation information with the issue number of the service user's electronic certification and provides the validation result.

The OCSP responder method is characterized by real-time verification. On the other hand, it should be noted that the validity of the electronic certification cannot be verified offline.

* 6 Online Certification Status Protocol

An illustration explaining the OCSP responder method. When a service user sends a electronic certification, the OCSP responder in Japan Agency for Local Authority Information Systems checks the validity and sends the result back to private sector. private sector receives the result and can provide the service to the service user.
Figure 3 OCSP Responder Method

5.2. Types of electronic certification

There are two types of electronic certification: "electronic certification for signatures" and "electronic certification for user certificates".

5.2.1. electronic certification for signature

It is used when creating and sending electronic documents such as applications and contracts on the Internet, etc., and it is possible to confirm that the electronic documents created and sent by the users are "authentic documents created by the users and sent by the users." Electronic signatures using a signature electronic certification can be subject to Act on Electronic Signatures and Certification Business Article 3 (Presumption of Authentic Establishment of Electronic Records) * 7. In other words, an electronic document with an electronic signature that satisfies certain requirements by the Principal is presumed to be authentically established (created based on the Principal's intention).

* 7 Quoted from Article 3 of Act on Electronic Signatures and Certification Business
An electronic or magnetic record prepared for the purpose of representing information (excluding one prepared by a public officer in the course of his / her duties) is presumed to have been established authentically if the information recorded in the electronic or magnetic record has been digitally signed by the principal (limited to those that can be digitally signed only by the principal by properly managing the codes and objects necessary for digitally signing).

5.2.2 electronic certification for User Certificate

It is mainly used when logging in to Internet sites, etc., and it can confirm that the person who logged in is the user himself or herself.

There are differences in the information held between the electronic certification for signatures and the electronic certification for identification of users due to their different purposes. The main difference is whether or not to hold the Four Basic Information (address, name, gender, date of birth) in the electronic certification. The Four Basic Information is held in the electronic certification for signatures used for electronic signatures at the time of application, etc., since it is necessary to confirm the accurate address, etc. of the applicant, etc. The electronic certification for identification of users used for logging in to Internet sites, etc., does not hold the Four Basic Information as long as the identity of the applicant, etc. can be confirmed. electronic certification

Please refer to the following for details of "5.2 Types of electronic certification".

6. Expansion of Japanese Public Key Infrastructure functions

6.1. Updated user information (4 information) provision service (launched on May 16, 2023)

Service Overview
This is a service that allows customers to check the latest four pieces of information (address, name, date of birth, and gender) of their customers online at any time with the J-LIS (Japan Agency for Local Authority Information Systems) on the premise that they have given their consent in advance using the Japanese Public Key Infrastructure. This enables financial institutions, for example, to check changes in customer addresses immediately.

The Service was launched on May 16, 2023 and is outlined below.

The details of this service are described in "5. Overview of the Latest User Information (Basic 4) Provision Service Based on the Consent of the Principal (pages 43 to 49)" below.

Customer consent is required for private sector to provide the Services.
The consent is required to be easy to understand for customers and must be obtained without fail. Please check the following materials for the points to note in obtaining consent.

Procedures for using the Service
This service is an additional service to the Japanese Public Key Infrastructure, so you need to go through the procedure to use the Japanese Public Key Infrastructure at private sector first.

Please carry out the procedures for using this service after completing the procedures for Japanese Public Key Infrastructure.

For details of the Japanese Public Key Infrastructure, refer to the electronic certification (for private sector) Electronic certification by Japanese Public Key Infrastructure (to private sector) Japanese Public Key Infrastructure.

The following procedures are required to use this service.

  1. Service provider businesses (businesses that use Japanese Public Key Infrastructure after entrusting signature verification services to platform businesses)
    Service providers can receive information necessary for system support from platform operators to whom signature verification services are outsourced.
    The following platform operators support this service.
  1. Platform business operators (business operators that use Japanese Public Key Infrastructure with the approval of the competent minister)
    It is necessary to apply for the use of this service to J-LIS. Please contact the following contact information.
    Contact:
    After that, you need to sign a confidentiality agreement with the J-LIS and apply for the disclosure of technical specifications, etc.

6.1.1. On October 29, 2024, the "Support service for obtaining the consent of the person", which is necessary for the "Basic 4 information provision services", was launched using Mynaportal.

By using this service, private sector can obtain consent from customers necessary to use the "Latest User Information (4) Information Provision Service."
In the case of new customers, it is easy to obtain consent from the customer at the time of application. However, as a method to smoothly obtain consent from existing customers, we have launched a "Personal Consent Acquisition Support Service." For details, please refer to the following.

Benefits of using this service
  • Benefits for the business operator
    • It will be easier to obtain consent from existing customers.
    • The system development cost for obtaining consent is reduced.
    • After obtaining consent, administrative costs for procedures for changing the four basic types of information, such as address, will be reduced.
    • Customer information can be updated at all times by preventing erroneous input of customer change documents.
  • Benefits to the public
    • You can go through the procedure easily by using Mynaportal.
    • When there is a change in address, etc. due to moving, etc., necessary procedures are not required.
Examples of E-mail Guidance to Customers

Please refer to the following for guidance on the consent procedure. Text data of the email sample will be distributed when the specifications are disclosed.

Contact Information

For inquiries about this service, please contact:
Forms: [Digital Agency] My Number Card (Japanese Public Key Infrastructure) Usage Inquiry Form
*Please select "Basics 4 Information Provision Services" in the question "5. Please select the details of your inquiry" in the form.

6.2. Installation of My Number Card functions (electronic certification) on smartphones (starting May 11, 2023)

By incorporating the functions of the My Number Card electronic certification into a smartphone, it is now possible to apply for and use various My Number Card services anytime and anywhere with just one smartphone, without having to carry My Number Card.

Details are provided below. Please refer to them when considering the use of this service. We will continue to expand the information in the future.

7. Inquiries

7.1. Frequently Asked Questions

Please refer to the following page for Frequently Asked Questions (FAQ).

7.2. Contact

7.2.1. My Number Card in general

For inquiries about My Number Card in general, please check the inquiry about My Number System.

7.2. 2. Introduction of Japanese Public Key Infrastructure

For the introduction of the Japanese Public Key Infrastructure, please inquire from the [Digital Agency] My Number Card (Japanese Public Key Infrastructure) Usage Inquiry Form .
We also accept inquiries from people who want to hold explanatory meetings for groups or have questions. At the explanatory meetings, we hold explanatory meetings for groups so that Japanese Public Key Infrastructure can be used in many private sector. We introduce information useful for considering the introduction of Japanese Public Key Infrastructure, such as an overview of My Number Card and Japanese Public Key Infrastructure, examples of use, the latest trends, and an overview of Mynaportal.

7.2.3. Certification by the competent minister in Japanese Public Key Infrastructure

Please send an e-mail to the following address.
When you send an e-mail, please fill in the two e-mail addresses, Digital Agency and Ministry of Internal Affairs and Communications, and send the e-mail.

  • Send To
    To prevent spam mail, "@" is displayed as " _ atmark _ ". When you send mail, please change " _ atmark _ " to "@" (half pitch).
    • Email address (Digital Agency): mynumber _ team _ atmark _ digital. go. jp
    • E-mail address (Ministry of Internal Affairs and Communications): kouteki-kojin _ atmark _ soumu. go. jp
  • Sent Content
    • Email Subject
      • Enter "Inquiries about the PF business operator system, etc. (name of business operator / group)"
    • Message body
      • Name of business / organization, name of department, name of person in charge, contact information (email address & phone number)

7.2.4. Other Services

For other services, please check each service site.

7.2.5. Contact information for inquiries about services provided by platform operators

If you would like to know more information about the services provided by PF Operators to their customers or SP Operators, please contact the following PF Operators.

When sending mail, please change " _ atmark _ " to "@" (one byte). To prevent spam mail, "@" is displayed as " _ atmark _ ".

Only PFs whose contact information has been approved for publication are listed above.
In addition, some PF operators do not provide the function of electronic certification validation for SP operators as a platform.

8. Related Documents

8.1. Guidelines for Japanese Public Key Infrastructure Use for private sector

This is a guideline published by private sector for the purpose of supporting the consideration of using Japanese Public Key Infrastructure in Ministry of Internal Affairs and Communications and explaining the introduction procedures. It summarizes the outline and benefits of the service, and a guide to using the service (information system facilities required on the private sector side, certification standards and procedures for the competent minister, electronic certification verification fees).

Please refer to this document for detailed and comprehensive information when considering the introduction of the service.

Please refer to the following website of Ministry of Internal Affairs and Communications where this document is posted.

8.2. Procedure Flow for Provision of Revocation Information to Signature Verifiers (private sector)

J-LIS introduces the procedures, workflow, and documents necessary for the verification of signatures when private sector introduces Japanese Public Key Infrastructure as a PF operator.

Please refer to the following documents to confirm the necessary procedures with the J-LIS.

Please refer to the following J-LIS website for more information.