Skip to main content

This page has been translated using TexTra by NICT. Please note that the translation may not be completely accurate.If you find any mistranslations, we appreciate your feedback on the "Request form for improving the automatic translation ".

Japanese Public Key Infrastructure (JPKI)

Last Updated:

This section introduces basic information (service features and certification mechanism), service introduction examples, and useful information for service introduction (introduction method, procedure for introduction, Japanese Public Key Infrastructure usage fee, etc.) required for local governments and private sector residents to introduce Japanese Public Key Infrastructure (JPKI * 1).

* 1 Japanese Public Key Infrastructure

What's New

Table of

1. About Japanese Public Key Infrastructure

Japanese Public Key Infrastructure is a safe and secure identity verification service that uses the electronic certification installed in My Number Card's IC chips (not My Number) to officially authenticate users online and confirm that contracts and other documents have not been tampered with. Japanese Public Key Infrastructure can be used not only by government agencies but also by introducing it to various private sector services.

The use of Japanese Public Key Infrastructure is expected to improve customer service and reduce administrative costs. For example, it will reduce the cost and time for customers to fill out and mail identity verification documents and applications. It will also reduce the workload required for private sector to receive and examine documents.

As of July 31, 2025, there were 789 companies using Japanese Public Key Infrastructure. It is used in a variety of situations, such as opening bank and securities accounts and signing loan contracts. private sector

Based on the Public Personal Authentication Act * 2, this system is operated by the Japan Agency for Local Authority Information Systems (hereinafter referred to as "J-LIS"), a corporation jointly managed by the national and local governments, and has the highest level of security and reliability.

There are two ways in which private sector can introduce Japanese Public Key Infrastructure. One is to obtain the approval of the competent minister under the Public Personal Authentication Act and become an approved business operator, and the other is to entrust the signature verification service to the approved business operator. To become an approved business operator, facilities and systems for information management in the signature verification service are required. The facilities can also be used via the cloud. On the other hand, by entrusting the signature verification service to the approved business operator, Japanese Public Key Infrastructure can be introduced without the need for each business operator to develop signature verification facilities.

The entire government is strongly promoting efforts * 3 to spread and expand the use of My Number Card, including Japanese Public Key Infrastructure, and My Number Card is becoming more and more convenient and user-friendly for citizens. At present, the number of valid applications * 4 in My Number Card has exceeded the number of driver's licenses issued, reaching two-thirds of the population (about 83 million applications) as of January 2023.

* 2 Act on Japan Agency for Local Authority Information Systems's Certification Business in Relation to Electronic Signatures, etc.

* 3 Please refer to the following for the roadmap of major initiatives.
Priority Plan Roadmap Towards a Digital Society (PDF / 2,015 kb)
Places related to My Number Card
P7: (4) Promoting the Dissemination and Use of My Number Card
P24 to P25: Roadmap towards digitalisation, etc. of various cards, etc. utilizing My Number Card

* 4 Among My Number Card issuance applications, the number of cases in which documents were incomplete and cases in which applications were cancelled were removed. For the latest number of valid applications, please refer to the Dashboard on the Spread of My Number Card Japanese Public Key Infrastructure.

2. Service Features

"Customer service can be improved" by eliminating the need to enter names and addresses on application forms and reducing the time and effort required for mailing, etc., "administrative costs can be reduced" by reducing inadequacies caused by the lack of entries, and "security can be strengthened."

2.1. Customer service improvement

You can reduce the costs that customers are incurring such as preparing, filling out and mailing identity verification documents and applications.
For example, in order to make a identity verification when opening a bank account, it is necessary to submit identity verification documents and an application form. However, if you use Japanese Public Key Infrastructure, you can make a identity verification and apply online. This will reduce the costs required for document preparation, filling out, mailing, etc. In addition, by transcribing the information from the four types of information recorded in the electronic certification for signatures (address, name, date of birth, and gender), the burden and errors associated with customer input will be reduced. In addition, since the identity verification will be completed online, it will be possible to provide services without restrictions on time and place.

2. 2. Reduce administrative costs

You can reduce the administrative costs borne by private sector, such as the reception and examination of identity verification documents and applications, and the mailing of customer notifications.
For example, in the case of identity verification for opening a bank account, in the past, identity verification documents and application forms were received and examined, and requests for resending of documents were made in the event of incomplete entries. Using Japanese Public Key Infrastructure enables online identity verification and application, thereby reducing the workload.

2.3. Security Enhancements

Japanese Public Key Infrastructure uses a cryptographic technology called "public-key cryptography" to ensure the security of communications.
Public key cryptography uses two different keys (a private key and a public key) for encryption and decryption. What is encrypted with one key can only be decrypted with the other key.
Also, a private key is recorded in My Number Card's IC chip.
In the event that recorded information in IC chips is illegally read, countermeasures such as automatic deletion are taken, so there is no risk of private keys being stolen by My Number Card.

For details of "public key cryptography", refer to the following.

3. Service Introduction Method

In this chapter, we will introduce how to introduce the service for private sector who is interested in introducing Japanese Public Key Infrastructure.

3.1. Service Deployment Methods

When using Japanese Public Key Infrastructure, service introduction business operators need to confirm the effectiveness of electronic certification provided by customers. There are two service introduction methods: one is to become a "platform business operator" who personally carries out the effectiveness confirmation, and the other is to become a "service provider business operator" who entrusts the effectiveness confirmation to platform business operators.

3.1. 1. Becoming a Service Provider

Service Provider Businesses (hereinafter referred to as "SP Businesses") are businesses that provide services by entrusting the validation of Japanese Public Key Infrastructure to PF Businesses without developing their own signature-verification facilities for the use of electronic certification.
Since the verification of the validity of the electronic certification is entrusted, it is possible to reduce the cost burden related to the maintenance and operation of the equipment, etc., and to shorten the period until the introduction of the service, so it can be introduced cheaply and quickly. The flow of the verification of the validity of the electronic certification in the case of an SP business operator is as shown in Fig. 1. In general, service usage fees specified by the PF business operator are charged for the use of services related to signature verification. Usage fees vary depending on the PF business operator.
For procedures to become an SP operator and service usage fees, please contact " 7.2.4. Inquiries about services provided by platform operators ".

Illustration explaining the flow of electronic certification validation in the case of an SP operator. When a service user sends a electronic certification to a service provider operator, the entrusted platform operator verifies the validity of the electronic certification with Japan Agency for Local Authority Information Systems. Upon receiving the verification result, the platform operator provides the result to the service provider operator. Upon receiving the result, the service provider operator provides the service after verifying the validity of the electronic certification.
Figure 1: Flow of electronic certification effectiveness confirmation (SP operators)

3.1.2. How to Become a Platform Operator

When using Japanese Public Key Infrastructure, private sector, which confirms the validity of the electronic certification with J-LIS by itself, is required to establish a signature-verification facility and become a "platform business operator (hereinafter referred to as" PF business operator ") by obtaining approval from the competent minister based on the Public Personal Authentication Act.

It is possible for PF operators to provide the function of electronic certification validity confirmation to another private sector as a platform.
Note that the signature verification equipment to be installed can also be deployed in a cloud-based environment, which is expected to reduce the cost burden of facility installation and operation and shorten the time to service introduction.

Electronic certification verification fees for J-LIS will be charged when using the service. The fees are based on a pay-as-you-go system and are ¥ 20 per electronic certification for signatures and ¥ 2 per electronic certification for user identification. From January 2023, these fees will be waived for the time being.
For procedures to become a PF Business operator, please refer to " 3.2 Procedures to become a Platform Business Operator ".

3.2. Procedures for becoming a platform operator

When introducing services as a PF operator, it is necessary to first obtain technical specifications, etc. from J-LIS and proceed with the competent minister approval procedure. After obtaining approval, it is necessary to prepare a system environment for signature verification, etc.

It takes about six months to one year from the acquisition of technical specifications to the acquisition of the competent minister's approval. For an overview of the procedure, please refer to the guidelines published by Ministry of Internal Affairs and Communications and Digital Agency below.

The section on the overall picture of the procedure is described in "c. Certification procedures" on pages 39 to 41.

3.2.1. Acquisition of Technical Specifications, etc.

After signing a confidentiality agreement with J-LIS, the applicant applies for disclosure of technical specifications, etc. related to the Japanese Public Key Infrastructure. These documents are necessary for the competent minister's approval procedures and system environment development, but they are also necessary for considering the introduction of services. Please use them from the consideration stage.

3.2. 2. Procedures for authorization by the competent minister

Based on the technical specifications provided by J-LIS, JICS prepares documents certifying that the requirements specified in the accreditation standards have been met. JICS uses these documents to apply to Digital Agency and Ministry of Internal Affairs and Communications for accreditation.

3. 2.3. Production Readiness

After obtaining certification, we will check the operation in the test environment of Japanese Public Key Infrastructure. If there are no problems, we will submit a notification to receive the results of the effectiveness check of electronic certification from J-LIS in accordance with the provisions of the Public Personal Authentication Act. Finally, we will check the operation in the production environment and start using the service.

3. 3. Japanese Public Key Infrastructure usage fees

For the use of Japanese Public Key Infrastructure, there are no expenses related to the acquisition and maintenance of the competent minister's approval, unlike general government approval and licensing projects, and only electronic certification verification fees for J-LIS are required.

A usage-based fee is charged according to the number of validity checks performed. The fee is ¥ 20 per Japanese Public Key Infrastructure for signatures and ¥ 2 per electronic certification for user identification. electronic certification

These usage fees will be free for the time being from January 2023 * 8. The aim is to lower the cost of using the service for PF operators and support the introduction of the service. Please refer to the following for details.

* 8 The CRL method will be free for all time, and the OCSP responder method will be free for the next three years.

4. Service Introduction Examples

In this chapter, we will introduce case studies in private sector, where Japanese Public Key Infrastructure is currently being introduced. We will provide reference information on how it is being introduced to what industries and services, what benefits it has for private sector and customers, etc. We hope you will find it useful when considering its introduction.
For example, in the banking and securities industries, Japanese Public Key Infrastructure is often used to open accounts, and its introduction has been recognized as effective. It eliminates the need for copying identity verification documents and filling out and mailing application forms, which were required when opening an account. By using My Number Card's electronic certification, applications can be made easily and accurately from smartphones, etc. This leads to reduced clerical costs such as reception and screening, and improved customer convenience.

5. Authentication Mechanism

For Japanese Public Key Infrastructure, electronic certification installed in IC chips of My Number Card is used. As the issuer of electronic certification, J-LIS becomes a trust anchor (base of trust) and proves its validity.

5.1. What is the effectiveness of electronic certification?

Private sector is required to confirm the validity of a electronic certification submitted by a customer because a electronic certification ceases to have effect subject to conditions.

5.1. 1. electronic certification Lapse Conditions

The conditions for revocation of a electronic certification include the expiry of the validity period of the electronic certification, changes to the four basic pieces of information on the resident record (address, name, date of birth, sex), the death of the person concerned, etc. There are two types of electronic certification, a "signing electronic certification" and a "user identification electronic certification," and the conditions for revocation differ for each.
For details of "electronic certification for signature" and "electronic certification for user identification", please refer to " 5.2 Types of electronic certification ".
Please refer to the following for details of electronic certification's expiration conditions.

5.1.2. Method of electronic certification validation

There are two methods of electronic certification validation: the "CRL provision method" and the "OCSP responder method".

(1) CRL Provision Method
CRLs * 5 are a list of electronic certification revocation information.

The CRL providing method is a method for providing a list of electronic certification revocation information periodically (once a day, etc.).

The CRL provided by the J-LIS is updated on a daily basis. The private sector downloads it locally and checks the validity of the electronic certification by comparing it with the electronic certification's issue number.

A feature of the CRL provision method is that it can be checked offline.

* 5 Certification Revocation List

An illustration that explains how CRLs are provided. Japan Agency for Local Authority Information Systems downloads CRLs provided by private sector locally and checks the CRL against electronic certification's issue number sent by the service consumer to verify validity and enable service provision.
Figure 2: CRL Provision Method

(2) OCSP Responder Method
OCSP * 6 is a communications protocol for verifying the validity of a electronic certification.

The OCSP responder method is a method in which an inquiry about the validity of a specific electronic certification is answered individually by a response server called an "OCSP responder".

The OCSP responder stores revocation information and updates it every 15 minutes. The OCSP responder checks the revocation information against the issue number of the electronic certification of the service user and provides a validity check result.

While the OCSP responder method is characterized by real-time confirmation, it should be noted that the validity of the electronic certification cannot be confirmed offline.

* 6 Online Certification Status Protocol

Illustration to explain the OCSP responder method. When a service user sends a electronic certification, the OCSP responder in Japan Agency for Local Authority Information Systems checks the validity and returns the result to private sector. After receiving the result, private sector can provide the service to the service user.
Figure 3 OCSP Responder Method

5.2. electronic certification types

There are two types of electronic certification: "electronic certification for signatures" and "electronic certification for user identification."

5.2.1. electronic certification for Signatures

It is used when creating and sending electronic documents such as applications and contracts on the Internet, etc., and it is possible to confirm that the electronic documents created and sent by the users are "authentic documents created and sent by users." Electronic signatures using electronic certification for signature can be subject to Article 3 of Act on Electronic Signatures and Certification Business (Presumption of Authenticity of Electronic Records) * 7. In other words, electronic documents with electronic signatures that meet certain requirements by the Principal are presumed to be authentic (created based on the intention of the Principal).

* 7 Cited from Article 3 of Act on Electronic Signatures and Certification Business
Any electromagnetic record which is prepared in order to represent information (excluding those prepared by public officer in the course of his / her duties) shall be presumed to be established authentically if an electronic signature (limited to those that can be performed by the principal through appropriate management of codes and properties necessary to perform this) is performed by the principal with respect to information recorded in such electromagnetic record.

5.2.2 electronic certification for User Identification

This is mainly used when logging in to Internet sites, etc., and it is possible to verify that the person who has logged in is the user.

Please note that there are differences in the information to be retained between the electronic certification for signatures and the electronic certification for user identification because their uses are different. The main difference is whether or not the four basic types of information (address, name, gender, and date of birth) are retained in the electronic certification. The four basic types of information are retained in the electronic certification for signatures used for electronic signatures at the time of application, etc., because it is necessary to confirm the accurate address, etc. of the applicant, etc. The four basic types of information are not retained in the electronic certification for user identification electronic certification used for login to Internet sites, etc., because it is sufficient to confirm the identity.

"Please refer to the following for details of" "5.2 Types of electronic certification" "."

6. Expansion of Japanese Public Key Infrastructure functions

6.1. Service for providing the latest user information (4 types of information) (launched on May 16, 2023)

Overview of the Service
This is a service that enables customers to check the latest four pieces of information (address, name, date of birth, and gender) online at any time with J-LIS (Japanese Public Key Infrastructure), provided that the customer's prior consent is obtained using Japan Agency for Local Authority Information Systems. This enables financial institutions, for example, to immediately check changes in the customer's address, etc.

This service was launched on May 16, 2023. An overview is shown below.

The details of this service are described in "5. Overview of the Latest User Information Based on Personal Consent (Basic 4 Information) Provision Service (pages 43 to 49)" below.

The Customer's consent is required when private sector provides the Services.
The consent is required to be easily understood by customers, and it is necessary to obtain it without fail. When obtaining consent, please check the following materials, as they contain points to note.

Procedures for using this service
This service is an additional service to the Japanese Public Key Infrastructure, so you need to go through a procedure to use the Japanese Public Key Infrastructure in private sector.

Please carry out the procedures for using this service after completing the procedures for Japanese Public Key Infrastructure.

For details of the Japanese Public Key Infrastructure, please refer to electronic certification (for private sector) Electronic certification by Japanese Public Key Infrastructure (for private sector) Japanese Public Key Infrastructure.

The necessary procedures for using this service are as follows.

  1. Service provider businesses (businesses that use Japanese Public Key Infrastructure after entrusting the verification of signatures to platform businesses)
    Service Provider Businesses can receive information necessary for system implementation from Platform Businesses to whom signature verification services are entrusted.
    The platform operators supporting this service are as follows.
  1. Platform business operators (business operators that have received competent minister approval and use Japanese Public Key Infrastructure)
    It is necessary to apply for the use of this service to J-LIS. Please contact the following.
    Contact:
    After that, it is necessary to sign a confidentiality agreement with J-LIS and apply for disclosure of technical specifications, etc.

6.1.1. The Support Service for Obtaining Consent of the Person, which is required for the Basic Four Information Provision Services, was launched on October 29, 2024 using Mynaportal.

By using this service, private sector can obtain consent from customers, which is necessary to use the "Latest User Information (4 Information) Provision Service".
In the case of new customers, it is easy to obtain consent from the customer at the time of application. For existing customers, we have launched a "Consent Acquisition Support Service" as a way to smoothly obtain consent from the customer. Please check the following for details.

Benefits of using this service
  • Advantages for Business Operators
    • It is easier to obtain the consent of existing customers.
    • The system development cost for obtaining consent is reduced.
    • After obtaining consent, administrative costs for procedures to change the four basic types of information such as address will be reduced.
    • It is possible to prevent an erroneous input of a change document of a customer or the like and always update customer information.
  • Merits to the general public
    • The procedure can be done easily by using Mynaportal.
    • When there is a change in address due to moving, etc., the necessary procedures are not required.
Examples of guidance e-mails to customers

Please refer to the following for information on the consent procedure. The text data of the e-mail sample will be distributed when the specifications are disclosed.

Contact Information

For inquiries about this service, please contact:
Forms: Contact form for using via the inquiry form for the use of the
*Please select "Basic 4 Information Provision Services" in the question of "5. Please select the inquiry content" in the form.

6.2. Equipping smartphones with the My Number Card function (electronic certification) (started on May 11, 2023)

By installing My Number Card electronic certification functions on smartphones, users can subscribe to and use a variety of My Number Card services anytime and anywhere with just one smartphone, without having to carry a My Number Card.

Details are listed below. Please refer to them when considering the use of this service. We will continue to expand the information in the future.

7. Inquiry

7.1. Frequently Asked Questions

Please refer to the following pages for frequently asked questions.

7.2. Inquiries

7.2.1. My Number Card in general

For inquiries about My Number Card in general, please visit for inquiries about My Number System.

7.2. 2. Introduction of Japanese Public Key Infrastructure

For information on the introduction of the Japanese Public Key Infrastructure, please contact via the inquiry form for the use of the [Digital Agency] My Number Card (Japanese Public Key Infrastructure).
In addition, we also accept inquiries from those who wish to hold briefing sessions for groups or have consultations. Briefing sessions for groups are held so that Japanese Public Key Infrastructure can be used by as many private sector as possible. They introduce useful information for considering the introduction of Mynaportal, such as an overview of My Number Card and Japanese Public Key Infrastructure, use cases, the latest trends, and an overview of Japanese Public Key Infrastructure.

7.2.3. Approval by the competent minister for Japanese Public Key Infrastructure

Please send an inquiry to the following address.
When you send an e-mail to us, please send it to the two e-mail addresses in Digital Agency and Ministry of Internal Affairs and Communications which are written in the e-mail contents.

  • Send To
    "@" is displayed as " _ atmark _ " to prevent spam mail. When you send mail, please change " _ atmark _ " to "@" (one byte).
    • Email (Digital Agency): mynumber _ team _ atmark _ digital. go. jp
    • E-mail address (Ministry of Internal Affairs and Communications): kouteki-kojin _ atmark _ soumu. go. jp
  • Contents to be sent
    • Email Subject
      • Enter "Inquiry about PF Operator System, etc. (Name of operator / organization)"
    • Body of the mail
      • Name of the business / organization, department name, name of the person in charge, contact information (e-mail address & telephone number)

7.2.4. Other Services

For other services, please check each service site.

7.2.5. Contact information for services provided by platform operators

If you would like to know more information about the services provided by PF Business for customers or for SP Business, please contact PF Business below.

When sending e-mail, please change " _ atmark _ " to "@" (one byte). To prevent spam, "@" is displayed as " _ atmark _ ".

Only project planning companies that have agreed to provide the contact information are listed above.
In addition, some PF operators do not provide the function of confirming the effectiveness of electronic certification as a platform for SP operators.

8. Related Documents

8.1. Guidelines for private sector for the Use of Japanese Public Key Infrastructure

This is a guideline published by private sector for the purpose of supporting the consideration of the use of Japanese Public Key Infrastructure in Ministry of Internal Affairs and Communications and explaining the introduction procedures. It summarizes the outline and benefits of the service and the guide for using the service (information system facilities necessary for private sector, certification standards and procedures for the competent minister, electronic certification verification fees).

Please refer to this document for detailed and comprehensive information when considering the introduction of services.

Please also refer to the Ministry of Internal Affairs and Communications website where this document is posted.

8.2. Procedure flow for providing information on revocation of signatures by verifiers, etc. (private sector)

J-LIS introduces the procedures, work flow, and necessary documents related to signature verification when private sector introduces Japanese Public Key Infrastructure as a PF operator.

Please refer to the following documents when checking the necessary procedures with J-LIS.

Please also refer to the J-LIS website for more information.