Skip to main content

This page has been translated using TexTra by NICT. Please note that the translation may not be completely accurate.If you find any mistranslations, we appreciate your feedback on the "Request form for improving the automatic translation ".

Japanese Public Key Infrastructure (JPKI)

Last Updated:

This section introduces basic information (service features and certification mechanism), service introduction examples, and useful information for service introduction (introduction method, procedure for introduction, Japanese Public Key Infrastructure usage fee, etc.) required for local governments and private sector residents to introduce Japanese Public Key Infrastructure (JPKI * 1).

* 1 Japanese Public Key Infrastructure

What's New

Table of Contents

1. About Japanese Public Key Infrastructure

Japanese Public Key Infrastructure is a safe and secure identity verification service that uses the electronic certificate installed in My Number Card's IC chips (not My Number) to officially authenticate users online and confirm that contracts and other documents have not been tampered with. Japanese Public Key Infrastructure can be used not only by government agencies but also by introducing it to various private sector services.

The use of Japanese Public Key Infrastructure is expected to improve customer service and reduce administrative costs. For example, it will reduce the cost and time for customers to fill out and mail identity verification documents and applications. It will also reduce the workload required for private sector to receive and examine documents.

Japanese Public Key Infrastructure is used by 877 companies (as of January 21, 2026). It is used in a variety of situations, such as opening bank and securities accounts and signing loans. private sector

Based on the Public Personal Authentication Act * 2, this system is operated by the Japan Agency for Local Authority Information Systems (hereinafter referred to as "J-LIS"), a corporation jointly managed by the national and local governments, and has the highest level of security and reliability.

There are two ways in which private sector can introduce Japanese Public Key Infrastructure. One is to obtain the approval of the competent minister under the Public Personal Authentication Act and become an approved business operator, and the other is to entrust the signature verification service to the approved business operator. To become an approved business operator, facilities and systems for information management in the signature verification service are required. The facilities can also be used via the cloud. On the other hand, by entrusting the signature verification service to the approved business operator, Japanese Public Key Infrastructure can be introduced without the need for each business operator to develop signature verification facilities.

The entire government is strongly promoting efforts * 3 to spread and expand the use of My Number Card, including Japanese Public Key Infrastructure, and My Number Card is becoming more and more convenient and user-friendly for citizens. At present, the number of valid applications * 4 in My Number Card has exceeded the number of driver's licenses issued, reaching two-thirds of the population (about 83 million applications) as of January 2023.

* 2 Act on Japan Agency for Local Authority Information Systems's Certification Business in Relation to Electronic Signatures, etc.

* 3 Please refer to the following for the roadmap of major initiatives.
Priority Plan Roadmap Towards a Digital Society (PDF / 2,015 kb)
Places related to My Number Card
P7: (4) Promoting the Dissemination and Use of My Number Card
P24 to P25: Roadmap towards digitalization, etc. of various cards, etc. utilizing My Number Card

* 4 Among My Number Card issuance applications, the number of cases in which documents were incomplete and cases in which applications were cancelled were removed. For the latest number of valid applications, please refer to the Dashboard on the Spread of My Number Card Japanese Public Key Infrastructure.

2. Service Features

"Customer service can be improved" by eliminating the need to enter names and addresses on application forms and reducing the time and effort required for mailing, etc., "administrative costs can be reduced" by reducing inadequacies caused by the lack of entries, and "security can be strengthened."

2.1. Customer service improvement

You can reduce the costs that customers are incurring such as preparing, filling out and mailing identity verification documents and applications.
For example, in order to make a identity verification when opening a bank account, it is necessary to submit identity verification documents and an application form. However, if you use Japanese Public Key Infrastructure, you can make a identity verification and apply online. This will reduce the costs required for document preparation, filling out, mailing, etc. In addition, by transcribing the information from the four types of information recorded in the electronic certificate for signatures (address, name, date of birth, gender), the burden and errors associated with customer input will be reduced. In addition, since the identity verification will be completed online, we will be able to provide services that are not limited by time or location.

2. 2. Reduce administrative costs

You can reduce the administrative costs borne by private sector, such as the reception and examination of identity verification documents and applications, and the mailing of customer notifications.
For example, in the case of identity verification for opening a bank account, in the past, identity verification documents and application forms were received and examined, and requests for resending of documents were made in the event of incomplete entries. Using Japanese Public Key Infrastructure enables online identity verification and application, thereby reducing the workload.

2.3. Security Enhancements

Japanese Public Key Infrastructure uses a cryptographic technology called "public-key cryptography" to ensure the security of communications.
Public key cryptography uses two different keys (a private key and a public key) for encryption and decryption. What is encrypted with one key can only be decrypted with the other key.
Also, a private key is recorded in My Number Card's IC chip.
In the event that recorded information in IC chips is illegally read, countermeasures such as automatic deletion are taken, so there is no risk of private keys being stolen by My Number Card.

For details of "public key cryptography", refer to the following.

3. Service Introduction Method

In this chapter, we will introduce how to introduce the service for private sector who is interested in introducing Japanese Public Key Infrastructure.

3.1. Service Deployment Methods

When using Japanese Public Key Infrastructure, service introduction business operators need to confirm the effectiveness of electronic certificate provided by customers. There are two service introduction methods: one is to become a "platform business operator" who personally carries out the effectiveness confirmation, and the other is to become a "service provider business operator" who entrusts the effectiveness confirmation to platform business operators.

3.1. 1. Becoming a Service Provider

When using Japanese Public Key Infrastructure, businesses that provide services by outsourcing the confirmation of the validity of electronic certificate to platform operator without developing their own signature-verification facilities are called service provider businesses (hereinafter referred to as "SP businesses").
Since electronic certificate validity verification is entrusted, it is possible to reduce the cost burden related to equipment maintenance and operation, etc., and to shorten the time required for service introduction. It can be introduced cheaply and quickly. The flow of electronic certificate validity verification in the case of SP business operators is as shown in Figure 1. In general, when using services related to signature verification, service usage fees specified by platform operator will be charged. Usage fees vary depending on the platform operator.
For procedures to become an SP operator and service usage fees, please contact " 7.2.5. Inquiries about services provided by platform operators ".

Illustration explaining the flow of electronic certificate validation in the case of an SP operator. When a service user sends a electronic certificate to a service provider operator, the entrusted platform operator verifies the validity of the electronic certificate with Japan Agency for Local Authority Information Systems. Upon receiving the verification result, the platform operator provides the result to the service provider operator. Upon receiving the result, the service provider operator provides the service after verifying the validity of the electronic certificate.
Figure 1: Flow of electronic certificate effectiveness confirmation (SP operators)

3.1.2. How to Become a Platform Operator

When using Japanese Public Key Infrastructure, private sector, which confirms the validity of the electronic certificate with J-LIS, is required to establish a signature-verification facility and become a "Platform Business Operator" (hereinafter referred to as "platform operator") by obtaining approval from the competent minister based on the Public Personal Authentication Act.

It is possible for platform operator to provide electronic certificate's function of validation to other private sector as a platform.
Note that the signature verification equipment to be installed can also be deployed in a cloud-based environment, which is expected to reduce the cost burden of facility installation and operation and shorten the time to service introduction.

Electronic certificate verification fees for J-LIS will be charged when using the service. The fees are based on a pay-as-you-go system and are ¥ 20 per electronic certificate for signatures and ¥ 2 per electronic certificate for user identification. From January 2023, these fees will be waived for the time being.
For procedures to become a platform operator, please refer to " 3.2 Procedures to Become a Platform Operator ".

3.2. Procedures for becoming a platform operator

When introducing services as a platform operator, it is necessary to first obtain technical specifications, etc. from J-LIS and proceed with the competent minister approval procedure. After obtaining approval, it is necessary to prepare a system environment for signature verification, etc.

It takes about six months to one year from the acquisition of technical specifications to the acquisition of the competent minister's approval. For an overview of the procedure, please refer to the guidelines published by Ministry of Internal Affairs and Communications and Digital Agency below.

The section on the overall picture of the procedure is described in "c. Certification procedures" on pages 39 to 41.

3.2.1. Acquisition of Technical Specifications, etc.

After signing a confidentiality agreement with J-LIS, the applicant applies for disclosure of technical specifications, etc. related to the Japanese Public Key Infrastructure. These documents are necessary for the competent minister's approval procedures and system environment development, but they are also necessary for considering the introduction of services. Please use them from the consideration stage.

3.2. 2. Procedures for authorization by the competent minister

Based on the technical specifications provided by J-LIS, JICS prepares documents certifying that the requirements specified in the accreditation standards have been met. JICS uses these documents to apply to Digital Agency and Ministry of Internal Affairs and Communications for accreditation.
For inquiries about the application, please refer to " 7.2.3. Competent Minister's Approval in Japanese Public Key Infrastructure ".

3. 2.3. Production Readiness

After obtaining certification, we will check the operation in the test environment of Japanese Public Key Infrastructure. If there are no problems, we will submit a notification to receive the results of the effectiveness check of electronic certificate from J-LIS in accordance with the provisions of the Public Personal Authentication Act. Finally, we will check the operation in the production environment and start using the service.

3. 3. Japanese Public Key Infrastructure usage fees

For the use of Japanese Public Key Infrastructure, there are no expenses related to the acquisition and maintenance of the competent minister's approval, unlike general government approval and licensing projects, and only electronic certificate verification fees for J-LIS are required.

A usage-based fee is charged according to the number of validity checks performed. The fee is ¥ 20 per Japanese Public Key Infrastructure for signatures and ¥ 2 per electronic certificate for user identification. electronic certificate

These usage fees will be free for the time being from January 2023 * 8. The aim is to lower the cost of using platform operator's services and support the introduction of services. Please refer to the following for details.

* 8 The CRL method will be free for all time, and the OCSP responder method will be free for the next three years.

4. Service Introduction Examples

In this chapter, we will introduce case studies in private sector, where Japanese Public Key Infrastructure is currently being introduced. We will provide reference information on how it is being introduced to what industries and services, what benefits it has for private sector and customers, etc. We hope you will find it useful when considering its introduction.
For example, in the banking and securities industries, Japanese Public Key Infrastructure is often used to open accounts, and its introduction has been recognized as effective. It eliminates the need for copying identity verification documents and filling out and mailing application forms, which were required when opening an account. By using My Number Card's electronic certificate, applications can be made easily and accurately from smartphones, etc. This leads to reduced clerical costs such as reception and screening, and improved customer convenience.

5. Authentication Mechanism

For Japanese Public Key Infrastructure, electronic certificate installed in IC chips of My Number Card is used. As the issuer of electronic certificate, J-LIS becomes a trust anchor (base of trust) and proves its validity.

5.1. What is the effectiveness of electronic certificate?

Private sector is required to confirm the validity of a electronic certificate submitted by a customer because a electronic certificate ceases to have effect subject to conditions.

5.1. 1. electronic certificate Lapse Conditions

The conditions for invalidating a electronic certificate include the expiry of the validity period of the electronic certificate, changes in basic four information (address, name, date of birth, gender) on the certificate of residence, the death of the applicant, etc. There are two types of electronic certificate, the "electronic certificate for signing" and the "electronic certificate for user identification," and the conditions for invalidating each are different.
For details of "electronic certificate for signature" and "electronic certificate for user identification", please refer to " 5.2 Types of electronic certificate ".
Please refer to the following for details of electronic certificate's expiration conditions.

5.1.2. Method of electronic certificate validation

There are two methods of electronic certificate validation: the "CRL provision method" and the "OCSP responder method".

(1) CRL Provision Method
CRLs * 5 are a list of electronic certificate revocation information.

The CRL providing method is a method for providing a list of electronic certificate revocation information periodically (once a day, etc.).

The CRL provided by the J-LIS is updated on a daily basis. The private sector downloads it locally and checks the validity of the electronic certificate by comparing it with the electronic certificate's issue number.

A feature of the CRL provision method is that it can be checked offline.

* 5 Certification Revocation List

An illustration that explains how CRLs are provided. Japan Agency for Local Authority Information Systems downloads CRLs provided by private sector locally and checks the CRL against electronic certificate's issue number sent by the service consumer to verify validity and enable service provision.
Figure 2: CRL Provision Method

(2) OCSP Responder Method
OCSP * 6 is a communications protocol for verifying the validity of a electronic certificate.

The OCSP responder method is a method in which an inquiry about the validity of a specific electronic certificate is answered individually by a response server called an "OCSP responder".

The OCSP responder stores revocation information and updates it every 15 minutes. The OCSP responder checks the revocation information against the issue number of the electronic certificate of the service user and provides a validity check result.

While the OCSP responder method is characterized by real-time confirmation, it should be noted that the validity of the electronic certificate cannot be confirmed offline.

* 6 Online Certification Status Protocol

Illustration to explain the OCSP responder method. When a service user sends a electronic certificate, the OCSP responder in Japan Agency for Local Authority Information Systems checks the validity and returns the result to private sector. After receiving the result, private sector can provide the service to the service user.
Figure 3 OCSP Responder Method

5.2. electronic certificate types

There are two types of electronic certificate: "electronic certificate for signatures" and "electronic certificate for user identification."

5.2.1. electronic certificate for Signatures

It is used when creating and sending electronic documents such as applications and contracts on the Internet, etc., and it is possible to confirm that the electronic documents created and sent by the users are "authentic documents created and sent by users." Electronic signatures using electronic certificate for signature can be subject to Article 3 of Act on Electronic Signatures and Certification Business (Presumption of Authenticity of Electronic Records) * 7. In other words, electronic documents with electronic signatures that meet certain requirements by the Principal are presumed to be authentic (created based on the intention of the Principal).

* 7 Cited from Article 3 of Act on Electronic Signatures and Certification Business
Any electromagnetic record which is prepared in order to represent information (excluding those prepared by public officer in the course of his / her duties) shall be presumed to be established authentically if an electronic signature (limited to those that can be performed by the principal through appropriate management of codes and properties necessary to perform this) is performed by the principal with respect to information recorded in such electromagnetic record.

5.2.2 electronic certificate for User Identification

This is mainly used when logging in to Internet sites, etc., and it is possible to verify that the person who has logged in is the user.

Please note that there are differences in the information to be retained between the electronic certificate for signing and the electronic certificate for user identification because their purposes are different. The main difference is whether or not the basic four information (address, name, gender, and date of birth) is retained in electronic certificate. The electronic certificate for signing used for electronic signatures at the time of application, etc. is retained in electronic certificate because it is necessary to confirm the accurate address, etc. of the applicant, etc. The electronic certificate for user identification used for login to the Internet site, etc. is not retained because it is sufficient to confirm the identity. basic four information basic four information

"Please refer to the following for details of" "5.2 Types of electronic certificate" "."

6. Expansion of function in Japanese Public Key Infrastructure

6.1. Service for providing the latest user information (4 types of information) (launched on May 16, 2023)

Overview of the Service
This is a service that allows customers to check the latest four pieces of information (address, name, date of birth, and gender) online at any time with J-LIS (Japan Agency for Local Authority Information Systems), provided that the customer's prior consent is obtained using Japanese Public Key Infrastructure. This enables financial institutions, for example, to immediately check changes in the customer's address, etc.

This service was launched on May 16, 2023. An overview is shown below.

The details of this service are described in "5. Overview of the latest Users' Information (basic four information) Provision Service Based on Personal Consent (pages 43 to 49)" below.

The Customer's consent is required when private sector provides the Services.
The consent is required to be easily understood by customers, and it is necessary to obtain it without fail. When obtaining consent, please check the following materials, as they contain points to note.

Procedures for using this service
This service is an additional service to the Japanese Public Key Infrastructure, so you need to go through a procedure to use the Japanese Public Key Infrastructure in private sector.

Please carry out the procedures for using this service after completing the procedures for Japanese Public Key Infrastructure.

For details of the Japanese Public Key Infrastructure, please refer to electronic certificate (for private sector) Electronic certificate by Japanese Public Key Infrastructure (for private sector) Japanese Public Key Infrastructure.

The necessary procedures for using this service are as follows.

  1. Service provider businesses (businesses that use Japanese Public Key Infrastructure after entrusting the verification of signatures to platform businesses)
    Service Provider Businesses can receive information necessary for system implementation from Platform Businesses to whom signature verification services are entrusted.
    The platform operators supporting this service are as follows.
  1. Platform business operators (business operators that have received competent minister approval and use Japanese Public Key Infrastructure)
    It is necessary to apply for the use of this service to J-LIS. Please contact the following.
    Contact:
    After that, it is necessary to sign a confidentiality agreement with J-LIS and apply for disclosure of technical specifications, etc.

6.1.1. On October 29, 2024, the Support Service for Obtaining Consent of the Person, which is required for the basic four information Provision Service, was launched using Mynaportal.

By using this service, private sector can obtain consent from customers, which is necessary to use the "Latest User Information (4 Information) Provision Service".
In the case of new customers, it is easy to obtain consent from the customer at the time of application. For existing customers, we have launched a "Consent Acquisition Support Service" as a way to smoothly obtain consent from the customer. Please check the following for details.

Benefits of using this service
  • Advantages for Business Operators
    • It is easier to obtain the consent of existing customers.
    • The system development cost for obtaining consent is reduced.
    • After obtaining consent, administrative costs for procedures to change basic four information such as address will be reduced.
    • It is possible to prevent an erroneous input of a change document of a customer or the like and always update customer information.
  • Merits to the general public
    • The procedure can be done easily by using Mynaportal.
    • When there is a change in address due to moving, etc., the necessary procedures are not required.
Examples of guidance e-mails to customers

Please refer to the following for information on the consent procedure. The text data of the e-mail sample will be distributed when the specifications are disclosed.

Contact Information

For inquiries about this service, please contact:
Forms: Contact form for using via the inquiry form for the use of the
*Please select "basic four information Provision Service" in the question of "5. Please select the inquiry content" in the form.

6.2. My Number Card's installation in function (electronic certificate) smartphones (started on May 11, 2023)

By installing the function of My Number Card's electronic certificate on smartphones, users can subscribe to and use a variety of My Number Card services anytime and anywhere with just one smartphone, without having to carry the My Number Card with them.

Details are listed below. Please refer to them when considering the use of this service. We will continue to expand the information in the future.

7. Inquiry

7.1. Frequently Asked Questions

Please refer to the following pages for frequently asked questions.

7.2. Inquiries

7.2.1. My Number Card in general

For inquiries about My Number Card in general, please visit for inquiries about My Number System.

7.2. 2. Introduction of Japanese Public Key Infrastructure

For information on the introduction of the Japanese Public Key Infrastructure, please contact via the inquiry form for the use of the [Digital Agency] My Number Card (Japanese Public Key Infrastructure).
In addition, we also accept inquiries from those who wish to hold briefing sessions for groups or have consultations. Briefing sessions for groups are held so that Japanese Public Key Infrastructure can be used by as many private sector as possible. They introduce useful information for considering the introduction of Mynaportal, such as an overview of My Number Card and Japanese Public Key Infrastructure, use cases, the latest trends, and an overview of Japanese Public Key Infrastructure.

7.2.3. Approval by the competent minister for Japanese Public Key Infrastructure

Please send an inquiry to the following address.
When you send an e-mail to us, please send it to the two e-mail addresses in Digital Agency and Ministry of Internal Affairs and Communications which are written in the e-mail contents.

  • Send To
    "@" is displayed as " _ atmark _ " to prevent spam mail. When you send mail, please change " _ atmark _ " to "@" (one byte).
    • Email (Digital Agency): jpki-daijinnintei _ atmark _ digital. go. jp
    • E-mail address (Ministry of Internal Affairs and Communications): kouteki-kojin _ atmark _ soumu. go. jp
  • Contents to be sent
    • Email Subject
      • Enter "Inquiry about platform operator System (Name of Business / Organization)"
    • Body of the mail
      • Name of the business / organization, department name, name of the person in charge, contact information (e-mail address & telephone number)

7.2.4. Other Services

For other services, please check each service site.

7.2.5. Contact information for services provided by platform operators

To learn more about the services platform operator offers to its customers or to SP operators, please contact platform operator at:

When sending e-mail, please change " _ atmark _ " to "@" (one byte). To prevent spam, "@" is displayed as " _ atmark _ ".

The above is a list of platform operator companies that have agreed to provide the contact information.
In addition, some platform operator operators do not provide function as a platform to confirm the effectiveness of electronic certificate for SP operators.

8. Related Documents

8.1. Guidelines for private sector for the Use of Japanese Public Key Infrastructure

This is a guideline published by private sector for the purpose of supporting the consideration of the use of Japanese Public Key Infrastructure in Ministry of Internal Affairs and Communications and explaining the introduction procedures. It summarizes the outline and benefits of the service and the guide for using the service (information system facilities necessary for private sector, certification standards and procedures for the competent minister, electronic certificate verification fees).

Please refer to this document for detailed and comprehensive information when considering the introduction of services.

8.2. Procedure flow for providing information on revocation of signatures by verifiers, etc. (private sector)

The J-LIS introduces the procedures, work flow, and documents required for verifying signatures when private sector introduces Japanese Public Key Infrastructure as a platform operator.

Please refer to the following documents when checking the necessary procedures with J-LIS.

Please also refer to the J-LIS website for more information.