JP2001119390A - Method and system for providing service with tamper resistant device and program recording medium for authentication device - Google Patents

Abstract

PROBLEM TO BE SOLVED: To construct a system, with which a lot of subjects can easily perform services respectively while utilizing the same tamper resistant device such as IC card. SOLUTION: When the utilization will of the IC card is received from an IC card owner by connecting an IC card 3 or the like to a service providing device 2, the service providing device 2 requests an IC card certification through a network to an authentication device 1. When the IC card certification request is received, the authentication device 1 performs authentication mutually with the IC card 3 connected to the service providing device 2, confirms the truth of the IC card 3, that the IC card 3 is a non-forged IC card without fail, prepares an IC card certificate for certifying it and transmits it to the service providing device 2. On the basis of the information of the received IC card certificate, the service providing device 2 performs the service corresponding to the IC card 3.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a service providing system using a tamper-resistant device such as an IC card. In particular, an authentication device for authenticating the tamper-resistant device authenticates the tamper-resistant device via a network. About the system.

[0002]

2. Description of the Related Art In a conventional IC card system, one entity manages and operates an IC card, a service providing device, and an authentication device for authenticating the IC card. Check the sex
The use of the information stored in the IC card has been performed by confirming secret information (access key) commonly owned by the IC card and the service providing apparatus. It is possible to set multiple access keys for one piece of information and manage access rights, but these access rights are set when the IC card is issued and cannot be changed after the IC card is issued. Also, since there is an upper limit to the number of access rights that can be set (seven in the case of IC cards currently widely distributed), a system in which a plurality of service providing devices are connected to a common IC card and used. It is necessary to share an access key between service providing apparatuses, that is, between service providing entities.

[0003] However, an access key is information that should be managed by an administrator limited by secret information.
By sharing an access key between multiple service providing devices, there is a possibility that a malicious service providing device may leak the access key, and multiple subjects may use the same IC.
This was an obstacle to providing services using cards. In addition, a technique for managing secret information of a plurality of IC cards and a high level of knowledge necessary for constructing an IC card system have made it difficult to introduce an IC card system.

[0004]

In a conventional IC card system, one entity manages and operates an IC card, a service providing device, and an authentication device for authenticating the IC card, and considers a plurality of service providing entities. The IC card system has not been used. Further, since the service provider directly deals with information stored in the IC card, it is difficult for the service provider who does not have advanced technology or knowledge about the IC card to construct an IC card system.

An object of the present invention is to provide an IC card system in which many entities can easily perform services using the same IC card.

[0006]

SUMMARY OF THE INVENTION The present invention provides an authentication apparatus for communicating with a tamper-resistant device (such as an IC card) which can be carried by an individual through a network. To be able to guarantee
The most important feature is to create and transmit a certificate of the tamper-resistant device. It differs from the conventional technology in that it has a means for notifying and guaranteeing the IC card certificate to a plurality of service providing devices connected via a network. Specifically, it is as follows.

In the present invention, when the IC card owner receives an intention to use the IC card, for example, by connecting the IC card, the service providing device issues an IC card certification request to the authentication device via the network.

[0008] When the authentication device receives the IC card certification request, the authentication device performs mutual authentication with the IC card through the IC card communication means of the service providing device, and the authenticity of the IC card that the IC card is certainly not a forged IC card. Check the nature. When the authenticity of the IC card can be confirmed, the authentication device reads the information stored in the IC card from the IC card. Here, the information stored in the IC card is, for example, a unique number (IC card ID) assigned to the non-rewritable IC card recorded when the IC card was issued.
And so on. When the authentication device checks the authenticity of the IC card and the information stored in the IC card, the authentication device checks the IC card.
An IC card certificate for certifying the authenticity of the card and the information stored in the IC card to the service providing device is created. The created IC card certificate is transmitted from the authentication device to the service providing device.

The service providing device obtains information on the IC card connected to the service providing device by confirming the authenticity of the IC card and the information stored in the IC card based on the received IC card certificate. In the service providing device, based on the information stored in the IC card,
Provides services to IC card owners.

In another aspect of the present invention, a service providing device that is connected to an IC card by an IC card owner to create an IC card certification request is different from a service providing device that receives an IC card certificate and actually performs a service. It may exist as a device and may be located at a remote location in a network. In this case, in the IC card certification request, the network position of the service providing apparatus that actually performs the service is specified. For convenience, in this specification I
When the service providing device to which the C card is connected is different from the service providing device that actually performs the service, the service providing device to which the IC card is connected is referred to as an IC card connecting device.

[0011] In another aspect of the present invention, the authentication device comprises:
It checks only the authenticity of the IC card, creates an IC card certificate that guarantees only the authenticity of the IC card, and transmits it to the service providing device. If necessary, the service providing device or the IC card connection device further creates and transmits an IC card certification request for requesting the authentication device to authenticate the information stored in the IC card. Further, an IC card certificate for certifying the information stored in the server is created and transmitted to the service providing apparatus.

In another aspect of the present invention, the information stored in the IC card is encrypted with information that can be known only by the IC card and the authentication device.

[0013] In another aspect of the present invention, the IC card certification request is attached with a signature using information that can be known only by the service providing apparatus.

In another embodiment of the present invention, the authentication device comprises:
The correct I to the IC card owner via the service providing device
Requests IC card owner authentication information that only the C card owner can know. As the IC card owner authentication information, a personal authentication number (PIN) is represented. Upon receiving the IC card owner authentication information, the authentication device checks the authenticity of the IC card, the information stored in the IC card, and the correct IC.
Issue an IC card certificate to prove that you are the card holder.

In another embodiment of the present invention, the authentication device comprises:
It has a function to request the IC card owner to connect the IC card to the service providing device via the service providing device.

In another embodiment of the present invention, the service providing device records and stores the transmitted IC card certification request.

In another aspect of the present invention, the service providing device records and stores the received IC card certificate.

In another embodiment of the present invention, the authentication device comprises:
The received IC card certification request is recorded and stored.

In another embodiment of the present invention, the authentication device comprises:
Record and save the transmitted IC card certificate.

In another embodiment of the present invention, a signature is attached to the IC card certificate by information that can be known only by the authentication device.

In another aspect of the present invention, the mutual authentication for confirming the authenticity of the IC card uses a cryptographic means which cannot be decrypted or imitated by a device other than the service providing device and the IC card. Do it.

In another embodiment of the present invention, the service providing device is configured such that the authentication device described in the IC card certificate is an IC card certificate.
Check the date and time when the card was authenticated.

In another embodiment of the present invention, the service providing device receives the IC card certificate, and further, the service providing device directly connects to the IC card to transfer the information stored in the IC card from the IC card. Read the I
The service corresponding to the presented IC card is performed based on the information described in the C card certificate and the directly read information.

[0024] In another aspect of the present invention, the authentication device guarantees the content guaranteed by the IC card certificate, an entity that creates an IC card certificate request, a service providing device, or an IC card connection device, or actually performs a service. Depending on the service provider or service provider,
change. For example, the IC card ID is changed to a different number depending on the service provider and the notification is made.

In another aspect of the present invention, the mutual authentication between the IC card and the authentication device is performed by a method in which the IC card does not authenticate the authentication device and only the authentication device authenticates the IC card.

In another embodiment of the present invention, the IC card is substituted by a mobile device including a tamper-resistant security application module (SAM).

[0027] In another embodiment of the present invention, the IC card is substituted by a tamper-resistant device other than the IC card and the device with a built-in SAM.

A program for realizing the above processing of the authentication device, the service providing device or the IC card connection device by a computer is stored in an appropriate recording medium such as a computer-readable portable medium memory, a semiconductor memory, and a hard disk. can do.

In the above description, the IC card certificate indicates whether the authentication device has authenticated the service providing device with respect to the authenticity of the IC card connected to the service providing device or the IC card connecting device or the information stored in the IC card. Means data that guarantees both. Also, I
The C card certification request is sent from the service providing device to the authenticating device.
This means data that requests creation of a C card certificate and transmission to the service providing device. In addition, the information stored in the IC card corresponds to all information that can be stored in the IC card, such as an IC card ID, personal information of an IC card owner, and point information for a point service.

[0030]

Embodiments of the present invention will be described below in detail with reference to the drawings. In the following description, an IC card will be described as an example of a typical tamper-resistant device. A tamper-resistant device is a device in which a third party cannot illegally read and write information in the device, and is not limited to an IC card, such as a device with a built-in tamper-resistant security application module (SAM) such as a built-in SAM. If the device is a tamper-resistant device, the present invention can be applied similarly to the case of an IC card described below.

[First Embodiment] FIG. 1 shows a flow when the service providing apparatus 2 having received an intention to use the IC card 3 by the IC card owner performs a customizing service for the IC card 3. Things. This example is an example of an IC card system in which the authentication device 1 notifies the service providing device 2 of the authenticity of the IC card 3 and the IC card ID, which is information stored in the IC card 3, and guarantees it.

The owner of the IC card is the service providing device 2
Connect the IC card 3 to the service providing device 2
Present your intention to receive the service using the card (S
11). Upon receiving the intention to use the IC card 3, the service providing device 2 requests the authentication device 1 for an IC card certificate that guarantees the authenticity of the IC card 3 and notifies the service providing device 2 of the ID of the IC card 3. Then, an IC card certification request is created (S12).

FIG. 2 shows an example of an IC card certificate request. Here, in the IC card certificate request, the service provider name, the IC card certificate request number, the creation date and time of the IC card certificate request, and the network address of the service providing device 2 are described. The service providing entity name has an effect of indicating the entity that requests the authentication device 1 for an IC card certification request. Also, by using the IC card certificate request number as an identifier used only once by the service provider,
The C card certificate request number and the creation date and time of the IC card certificate request have the effect of specifying the IC card certificate request.
The network address has the effect of notifying the location of the service providing device 2 on the network.

The service providing apparatus 2 adds an electronic signature to the IC card certificate request using information that only the service provider can know (S13), and sends the IC card certificate request to the authentication apparatus 1 via the network. (S1
4).

The authentication device 1 transmits the I
Upon receipt of the C card certificate request, the signature of the IC card certificate request is checked, and it is confirmed that the service provider that created the IC card certificate request and the IC card certificate request are not forged (S15). Next, the authentication device 1
Records and saves the IC card certificate request (S1).
6). The recorded IC card certificate request has an effect that it can be used as a post-trouble and evidence that the authentication device 1 has received the IC card certificate request.

Next, the authentication device 1 performs mutual authentication with the IC card 3 via the network based on the network address described in the IC card certificate request (S17,
S18). This mutual authentication is performed by a challenge-response method, and it is preferable to use a method that cannot be decrypted or imitated by, for example, the service providing device 2 other than the IC card 3 and the authentication device 1.

If the mutual authentication succeeds, the authentication device 1
It requests the C card 3 to transmit the IC card ID (S19). In response to this request, the IC card 3
IC card ID, which is information stored in IC card 3
Is encrypted with information that only the IC card 3 and the authentication device 1 can know (S20), and is notified to the authentication device 1 via the network (S21). Here, the IC card 3 is the authentication device 1
The IC card ID is transmitted only when the mutual authentication with the authentication has succeeded and the authentication device 1 has been authenticated. The authentication device 1
When the encrypted IC card ID is received from the IC card 3, the encrypted IC card ID is decrypted (S2).
2). The effect of this encryption is to prevent the IC card ID from being directly understood by, for example, the service providing device 2 other than the IC card 3 and the authentication device 1, thereby preventing the abuse of the IC card.

Next, the authentication device 1 creates an IC card certificate (S23). FIG. 3 shows an example of an IC card certificate. The IC card certificate includes the IC card certificate number,
IC card certificate request number corresponding to the IC card certificate, date and time when the IC card was authenticated, and IC card ID
And the name of the service provider to which the IC card certificate is issued.

The IC card certificate has the effect of guaranteeing the authenticity of the IC card and the information stored in the IC card.
The IC card certificate number has the effect of indicating the uniqueness of the issued IC card certificate, and the IC card certificate request number is the number between the IC card certificate and the IC card certificate request requested by the service providing apparatus 2. It has the effect of taking action, and IC
The date and time when the card was authenticated has the effect of indicating the time difference between the creation of the IC card certificate request and the actual authentication of the IC card, which has occurred due to the fact that the card has been passed through a network. The service provider name to which the IC card certificate is issued has the effect of indicating the authenticity of the IC card 3 and the partner of the partner who guarantees the information stored in the IC card 3. .

Next, the authentication device 1 adds an electronic signature to the IC card certificate using information that only the authentication device 1 can know (S24). Transmit to the service providing device 2 (S2
5). Upon receiving the IC card certificate, the service providing device 2 checks the signature of the IC card certificate, and confirms that the authentication device 1 created the IC card certificate (S26). Next, the service authentication device 2 obtains the IC card ID number (IC card ID) from the IC card certificate.
Is taken out (S27), and a customizing service for the ID number of the IC card is performed (S28). The service providing apparatus 2 records and stores the IC card certificate (S2).
9). The recorded IC card certificate has an effect that can be used as a certificate at the time of a trouble after the fact.

The customization service in this case means, for example, that the service provider prepares a kiosk terminal as the service providing device 2, displays information and advertisement screens corresponding to the respective IC cards 3 on the kiosk terminal, and owns the IC card. Service that provides information that suits the taste of the user, or Pointofof as the service providing device 2.
Using a cash register that is a Sales (POS) terminal device,
The cashier can check the past purchase history of the customer holding the IC card 3, and recommend a recommended product to each customer based on the purchase history.

According to the flow shown in FIG. 1, the service providing apparatus 2 operates the IC card 3 in response to the instruction of the authentication apparatus 1, but the service providing apparatus 2 takes the initiative in the IC card 3 , And there is no need for the service provider to manage the IC card.

Once the IC card is distributed, it is divided into multiple locations, and even if malicious at a certain point, the IC card is not known, and it is difficult to manage secret information related to the IC card. , A great IC for this management
The authentication entity manages all or a part of secret information (such as an IC card authentication key and a reference key for information stored in the IC card) relating to the card, and communicates information about the IC card to the service provider by means of a certificate. .

The effect is that the service provider is
No effort or cost is required to handle all or part of this confidential information, and the IC card certificate
The ability to engage in the service itself using the card ID. Also, if the service providing device can communicate with the authentication device via the network, the entity that manages it is IC
The entity that provides the card or the authentication device may be a different entity, and the plurality of service providers can share the plurality of IC cards issued by at least one entity that provides the IC card and the authentication device.

As is apparent from this result, as compared with the conventional technology in which one entity issues an IC card, an authentication device, and a service providing device, a large number of service providing entities use the same IC card, and each of the other service providing entities has a different IC card. Services can be freely constructed, added, and extended without being affected by the service provider.

Further, according to this method, the IC card is issued by the authentication entity, but the distribution of the IC card to the user can be freely performed by a plurality of service providers. In this method in which the authentication entity manages the secret information of the IC card, the service can be performed using the IC card distributed by another entity, and the labor and cost of distribution can be reduced.

The authentication device determines whether the IC card is being used by the IC card.
Since the information can be grasped at the time of card authentication, it is easy to charge or provide services to the service provider by the authentication device, such as collecting a fee from the service provider according to the use of the IC card.

[Second Embodiment] FIG. 4 shows an example of a basic system to which the present invention is applied.
This example is a configuration example of an IC card system in which the authentication device notifies the service providing device of the authenticity of the IC card and the IC card ID, which is information stored in the IC card, and guarantees it.

The authentication device 1 accepts an IC card certificate request and checks the signature of the service provider of the IC card certificate request, with the service providing device communication unit 11 communicating with the service providing device 2 via the network 9. An IC card authentication unit 12 for performing mutual authentication with the IC card 3; and an IC card management database (IC) for managing an encryption key for performing mutual authentication and IC card ID communication with the IC card 3.
Card management DB) 13, a service provider management database (service provider management DB) 14 for managing public key data of the service provider to confirm the signature of the service provider, and an IC card certification request. An IC card certificate request recording unit 15 to be saved, an IC card certificate creation unit 16 to create an IC card certificate, and a signature of the IC card certificate using a secret key that can be known only by the authentication entity that manages the authentication device 1 And an authentication subject signature unit 17 that performs the following.

The service providing device 2 includes an authentication device communication unit 21 for communicating with the authentication device 1 via the network 9,
An IC card communication unit 22 for communicating with the IC card 3;
IC card certificate request unit 2 for creating a C card certificate request
3, a service provider signing unit 24 for signing the IC card certificate request using a secret key known only to the service provider, accepting the IC card certificate, confirming the signature of the authenticator, and confirming the IC card owner's signature. Service providing unit 25 that provides a service corresponding to the IC card 3 owned by the user
And an IC card certificate recording unit 26 for recording and storing an IC card certificate, and an IC card use intention receiving unit 27 for receiving an IC card use intention from an IC card owner.

The IC card 3 includes a service providing device communication unit 31 for communicating with the service providing device 2, an authentication device authentication unit 32 for performing mutual authentication with the authentication device 1, and respective ICs.
It comprises an IC card ID holding unit 33 having a card-specific number (IC card ID) and an IC card ID encrypting unit 34 for encrypting the IC card ID.

The service providing device communication unit 11 in the authentication device 1 relays communication between the IC card authentication unit 12 and the IC card certificate creating unit 16 and the service providing device 2 via the network 9. The IC card authentication unit 12
IC card management DB13 and service provider management DB1
4, the IC card certification request recording unit 15, and the IC card certificate creation unit 16. IC card certificate creation unit 16
Communicates with the authentication subject signature unit 17 in addition to the above communication.

Authentication device communication unit 21 of service providing device 2
Is a network 9 between the IC card certification request unit 23, the service providing unit 25, the IC card communication unit 22, and the authentication device 1.
Relay the communication via. The IC card communication unit 22
The communication between the authentication device 1 and the IC card 3 is relayed via the authentication device communication unit 21 if necessary. The IC card certification requesting unit 23 is a communication unit for the authentication device
1 and the service providing entity signature unit 24 and the IC card use intention receiving unit 27. The service providing unit 25 communicates with the authentication device communication unit 21 and the IC card certificate recording unit 26.

The service providing device communication unit 31 of the IC card 3 includes an authentication device authentication unit 32 and an IC card ID.
The communication between the holding unit 33 and the service providing device 2 is relayed. The IC card ID holding unit 33 communicates with the IC card ID encryption unit 34 and the service providing device communication unit 31.

Next, the operation of the present system will be described. First, when the IC card use intention receiving unit 27 receives notification of the intention to use the IC card 3 from the IC card owner, the use intention is transmitted to the IC card certification request unit 23. Thereby, the IC card certification request unit 23 creates an IC card certification request describing the service provider name, the IC card certification request number, the creation date and time of the IC card certification request, and the network address of the service providing apparatus 2. I do.
Here, the service providing entity name has an effect of indicating the entity that requests the authentication device 1 for an IC card certification request. In addition, IC
By making the card certificate request number an identifier used only once by the service provider, the IC card certificate request number and the creation date and time of the IC card certificate request are
This has the effect of specifying the IC card certificate request. The network address has the effect of notifying the location of the service providing device 2 on the network.

Next, the IC card certification request unit 23 transmits the IC card certification request to the service provider signature unit 24, and the service provider signature unit 24 adds the signature of the service provider to the IC card certificate request. When falsification and impersonation are prevented, an IC card certification request is returned to the IC card certification request unit 23. The IC card certification request unit 23
The information is transmitted to the IC card authentication unit 12 via the authentication device communication unit 21 and the service providing device communication unit 11.

The IC card authentication unit 12 confirms the service provider of the signature of the IC card certificate request using the public key managed in the service provider management DB 14,
The IC card request certificate is stored in the IC card certificate request recording unit 15
Send to The IC card certification request recording unit 15 records an IC card certification request. This record serves as evidence.

Next, based on the network address of the service providing apparatus 2 described in the IC card certification request, the IC card authentication section 12 communicates with the service providing apparatus communication section 11, the authentication apparatus communication section 21, and the IC card communication section. Mutual authentication is performed with the authentication device authentication unit 32 of the IC card 3 via the communication unit 22 and the service providing device communication unit 31. This mutual authentication is desirably protected from eavesdropping and impersonation in a communication path between the authenticating devices, as represented by a challenge response method. When the above mutual authentication is established,
The IC card authentication unit 12 includes a service providing device communication unit 11
It requests the IC card ID holding unit 33 to notify the IC card ID via the authentication device communication unit 21, the IC card communication unit 22, and the service providing device communication unit 31.

The IC card ID holding unit 33 encrypts the IC card ID unique to each IC card by the IC card ID encrypting unit 34, and then transmits the service providing device communication unit 31, the IC card communication unit 22, and the authentication device. The encrypted ID is transmitted to the IC card authentication unit 12 via the communication unit 21 and the service providing device communication unit 11. This encryption has the effect of preventing the IC card ID from being decrypted by anyone other than the IC card 3 and the authentication device 1.

The IC card authentication section 12 checks the encrypted I
The C card ID is decoded based on information managed in the IC card management DB 13. The IC card authentication unit 12 transmits the decrypted IC card ID to the IC card certificate creation unit 16. Upon receiving the IC card ID, the IC card certificate creation unit 16 stores the IC card certificate number and the corresponding IC card ID.
An IC card certificate that describes the card certificate request number, the date and time when the IC card was authenticated, the IC card ID, and the name of the service provider to which the IC card certificate is issued is created.

The IC card certificate has the effect of guaranteeing the authenticity of the IC card and the IC card ID stored in the IC card.
The C card certificate has the effect of indicating uniqueness, and the IC card certificate request number has the effect of associating the IC card certificate with the IC card certificate request requested by the service providing apparatus 2, and the IC card certificate The date and time of authentication has the effect of indicating the time difference between the creation of an IC card certificate request and the actual authentication of the IC card, which is caused by passing through a network. The IC card ID has the effect of being information stored in the IC card. Yes, the name of the service provider to which the IC card certificate is issued has the effect of indicating the authenticity of the IC card and the party of the other party who guarantees the information stored in the IC card.

The authentication subject signature unit 17 adds an electronic signature to the created IC card certificate using a secret key that can be known only by the authentication device 1, and sends the service providing unit 25 via the service providing device communication unit 11. Send to

When the service providing unit 25 confirms the signature of the IC card certificate with the public key of the authentication subject, the service providing unit 25 extracts the IC card ID from the IC card certificate, and
The service corresponding to D is performed. Next, the service providing unit 25
Transmits the IC card certificate to the IC card certificate recording unit 26, and the IC card certificate recording unit 26 records and stores the IC card certificate. This record serves as evidence.

According to the system shown in FIG. 4, access to the IC card 3 is performed by the IC card authentication unit 12 of the authentication device 1, and the service providing device 2 uses the authentication device communication unit 21 and the I
It is only necessary for the C card communication unit 22 to relay information for performing mutual authentication of the IC card and communication of the ID of the IC card.

Once the IC card is distributed, it is divided into multiple locations, and even if a malicious operation on the IC card occurs at a certain point, it is difficult to understand and it is difficult to manage secret information related to the IC card. , A great IC for this management
The authentication entity manages all or a part of secret information (such as an IC card authentication key and a reference key for information stored in the IC card) relating to the card, and communicates information about the IC card to the service provider by means of a certificate. .

The effect is as follows.
No effort or cost is required to handle all or part of this confidential information, and the IC card certificate
The ability to engage in the service itself using the card ID. Also, if the service providing device can communicate with the authentication device via the network, the entity that manages it is IC
The entity that provides the card or the authentication device may be a different entity, and the plurality of service providers can share the plurality of IC cards issued by at least one entity that provides the IC card and the authentication device.

As is apparent from this result, compared to the conventional technology in which one entity issues an IC card, an authentication device, and a service providing device, a large number of service providing entities use the same IC card, and each of the other service providing entities has a different IC card. Services can be freely constructed, added, and extended without being affected by the service provider.

Further, according to this method, the issuing of the IC card is performed by the authenticating entity, but the distribution of the IC card to the user can be freely performed by a plurality of service providing entities. In this method in which the authentication entity manages the secret information of the IC card, the service can be performed using the IC card distributed by another entity, and the labor and cost of distribution can be reduced.

The authentication device checks the usage status of the IC card
Since the information can be grasped at the time of card authentication, it is easy to charge or provide services to the service provider by the authentication device, such as collecting a fee from the service provider according to the use of the IC card.

[Third Embodiment] FIG. 5 shows a flow when the service providing apparatus 2 having received an intention to use the IC card 3 by the IC card owner performs a customizing service for the IC card. It is. This example is an example of an IC card system in which the authentication device 1 notifies the service providing device 2 of the authenticity of the IC card 3 and guarantees it.

The IC card owner has the service providing device 2
The IC card 3 is connected to the server and the intention to receive the service using the IC card 3 is presented (S31). Upon receiving the intention to use the IC card 3, the service providing device 2 creates an IC card certificate request requesting the authentication device 1 for an IC card certificate that guarantees the authenticity of the IC card 3 (S32).

Here, the IC card certificate request includes the service provider name, the IC card certificate request number,
Creation date and time of C card certificate request and service providing device 2
Is described. This service providing entity name has the effect of indicating the entity requesting the authentication device 1 for an IC card certification request. Also, by making the IC card certificate request number an identifier used only once by the service provider, the IC card certificate request number and the IC card
The creation date and time of the card certificate request has an effect of specifying the IC card certificate request. The above network address is
This has the effect of notifying the location of the service providing device 2 on the network.

The service providing apparatus 2 adds an electronic signature to the IC card certificate request using information that only the service provider can know (S33), and sends the IC card certificate request to the authentication apparatus 1 via the network. (S3
4).

The authentication device 1 sends a request from the service providing device 2
Upon receipt of the C card certificate request, the signature of the IC card certificate request is checked, and it is confirmed that the service provider that created the IC card certificate request and the IC card certificate request have not been forged (S35). Next, the authentication device 1
Records and saves the IC card certificate request (S3
6). The recorded IC card certificate request has the effect that it can be used as proof that a subsequent trouble or service has been provided.

Next, the authentication device 1 performs mutual authentication with the IC card 3 via the network based on the network address described in the IC card certificate request (S37,
S38). The mutual authentication is performed by a challenge response method, and a method that cannot be decrypted or imitated by, for example, the service providing device 2 other than the IC card 3 and the authentication device 1 is used.

Next, the authentication device 1 creates an IC card certificate (S39). The IC card certificate includes an IC card certificate number, an IC card certificate request number corresponding to the IC card certificate, the date and time when the IC card was authenticated,
The name of the service provider to which the C card certificate is issued is described.

Next, the authentication device 1 adds an electronic signature to the IC card certificate using information that only the authentication device 1 can know (S40), and transmits it to the service providing device 2 (S4).
1). The IC card certificate has the effect of guaranteeing the authenticity of the IC card, and the IC card certificate number has the effect of indicating the uniqueness of the issued IC card certificate.
The card certificate request number has an effect of associating the IC card certificate with the IC card certificate request requested by the service providing apparatus 2, and the date and time when the IC card was authenticated is determined by the date and time that the IC card was generated via the network. This has the effect of indicating the time difference from the creation of the card certificate request to the actual authentication of the IC card. The name of the service provider to which the IC card certificate is issued is determined by the authentication device 1 that the authenticity of the IC card and the I
This has the effect of indicating the subject of the partner who guarantees the information stored in the C card.

When the service providing device 2 receives the IC card certificate, it checks the signature of the IC card certificate,
It is confirmed that the authentication device 1 has created the IC card certificate (S42). Next, the service providing device 2
It requests the C card 3 to notify the IC card ID (S43). Upon receiving this request, the IC card 3
The service card 2 is notified of the C card ID (S4
4).

The service providing device 2 that has received the notification of the IC card ID performs a customizing service for the ID number of the IC card (S45). The service providing device 2
The IC card certificate is recorded and stored (S46). The recorded IC card certificate has an effect that can be used as a certificate at the time of a trouble after the fact. The customization service in this case is, for example, a service provider prepares a kiosk terminal as a service providing device, displays information and an advertisement screen corresponding to each IC card on the kiosk terminal, Service that provides information that matches the
Using a cash register, which is a point of sales (POS) terminal device, a cashier can check the past purchase history of a customer who has an IC card, and use the purchase history to select a recommended product for each customer. Recommendation.

According to the flow shown in FIG. 5, the following effects can be considered. Once an IC card is distributed, it is divided into multiple locations, and even if malicious at a certain point, the IC card is not known, and it is difficult to manage secret information related to the IC card. Hard IC
The authentication entity manages secret information (IC card authentication key) related to the card, and notifies the service provider of the authenticity of the IC card by means of a certificate.

The effect is as follows.
There is no need for labor or cost for handling the IC card authentication key, and the IC card I described in the IC card certificate is not required.
D can be engaged in the service itself. In addition, if the service providing device can communicate with the authentication device via the network, the authenticity of the IC card can be determined by another entity different from the entity that provides the IC card or the authentication device, and the IC card storage data area is divided. By things
A plurality of service providers can share a plurality of IC cards issued by at least one entity that provides an IC card and an authentication device.

Further, according to this method, the issuing of the IC card is performed by the authentication entity, but the distribution of the IC card to the user can be freely performed by a plurality of service providing entities. In this method in which the authentication entity manages the secret information of the IC card, the service can be performed using the IC card distributed by another entity, and the labor and cost of distribution can be reduced.

The authentication device checks the usage status of the IC card
Since the information can be grasped at the time of card authentication, it is easy to charge or provide services to the service provider by the authentication device, such as collecting a fee from the service provider according to the use of the IC card.

In the third embodiment, after the service providing apparatus 2 receives the IC card certificate from the authentication apparatus 1, it requests the IC card 3 for the IC card ID, and
The notification of the IC card ID is received directly from the C card 3.

As a modification of this embodiment, for example, after step S42 shown in FIG. 5, the service providing device 2 directly requests the IC card 3 for the information stored in the IC card 3. In the same manner as the creation of the IC card certificate request in step S32, a content certificate request for the IC card is created and transmitted to the authentication device 1.
The authentication device 1 obtains the encrypted data in the IC card 3 via the network and the service providing device 2, creates a content certificate of the IC card based on the encrypted data, and transmits the certificate to the service providing device 2. Thus, the service providing apparatus 2 can be configured to acquire information stored in the IC card from the content certificate of the IC card.

[Fourth Embodiment] FIG. 6 shows an IC card owner 8 who has received an intention to use the IC card 6.
The flow when the card connection device 7 specifies the service providing device 5 that actually performs the customization service for the IC card and the service providing device 5 that actually performs the service performs the service is shown. The difference from the first embodiment is that the IC card connection device 7 that receives the IC card 6 and the service providing device 5 that actually performs the service are located at different locations on a network. In this example, a point server that performs a point service is started up as a service providing device 5 that actually performs a service, and a point server that corresponds to an IC card 6 that is connected to an IC card connection device 7 that is located on a different network from the point server. This is an example of an IC card system in a case where the point server performs a point service.

The IC card owner 8 connects the IC card 6 to the IC card connection device 7 and presents an intention to receive the service using the IC card 6 to the IC card connection device 7 (S51). The IC card connection device 7 is an IC card 6
IC card certificate requesting an IC card certificate for assuring the authenticity of the IC card 6 to the authentication device 4 and notifying the ID of the IC card 6 to the service providing device 5 that actually performs the service Create a request form (S5
2). Here, the IC card certificate request includes the name of the IC card connecting device providing entity, the name of the service providing entity, the number of the IC card certificate request, the date and time of creation of the IC card certificate request, and the IC card 6. IC card connection device 7
And the network address of the service providing apparatus 5 that actually performs the service are described.

The subject of the IC card connection device providing subject in the IC card certification request has an effect of indicating the subject who requests the authentication device 4 for the IC card certification request. The service providing entity name has the effect of indicating the entity that actually provides the service.
Further, by making the IC card certificate request number an identifier used only once by the service provider, the IC card certificate request number and the creation date and time of the IC card certificate request have the effect of specifying the IC card certificate request. is there. The network address of the IC card connection device 7 to which the IC card is connected has an effect of specifying the location of the IC card connection device 7 on the network, and the network address of the service providing device 5 that actually performs the service is
This has the effect of specifying the location on the network of the service providing device 5 that actually provides the service.

The IC card connection device 7 adds an electronic signature to the IC card certificate request using information that only the service provider can know (S53), and sends the IC card certificate request to the authentication device 4 via the network. Send the letter (S
54).

When the authentication device 4 receives the IC card certificate request from the IC card connection device 7, the authentication device 4 checks the signature of the IC card certificate request, and checks with the service provider that created the IC card certificate request and the IC card certificate request. It is confirmed that the document is not forged (S55). Next, the authentication device 4
Records and saves the IC card certificate request (S5).
6). The recorded IC card certificate request has the effect that it can be used as proof that a subsequent trouble or service has been provided.

Next, the authentication device 4 performs mutual authentication with the IC card 6 via the network based on the network address of the IC card connection device 7 to which the IC card 6 described in the IC card certification request is connected. (S57, S5
8). This mutual authentication is performed by a challenge response method, and it is desirable to use a method that cannot be decrypted or imitated by, for example, the service providing device 5 other than the IC card 6 and the authentication device 4. If the mutual authentication succeeds, the authentication device 4 sends the IC card I to the IC card 6.
A request is made to transmit D (S59).

In response to this request, the IC card 6 encrypts the IC card ID number, which is information stored in the IC card 6, with information that can be known only by the IC card 6 and the authentication device 4 (S60). 4 is notified via the network (S61).

When receiving the encrypted IC card ID from the IC card 6, the authentication device 4 decrypts the encrypted IC card ID (S62). The effect of this encryption is
For example, the service providing device 5 and the IC card connecting device 7 other than the IC card 6 and the authentication device 4 cannot directly understand the IC card ID to prevent abuse of the IC card 6. Next, the authentication device 4 requests the personal identification number PIN from the IC card owner 8 via the IC card connection device 7 to which the IC card 6 is connected (S63). , PIN are returned to the authentication device 4 (S64).

Next, the authentication device 4 creates an IC card certificate (S65). The IC card certificate includes an IC card certificate number, an IC card certificate request number corresponding to the IC card certificate, the date and time when the IC card was authenticated, a card ID, and a destination for issuing the IC card certificate. Is described.

Next, the authentication device 4 adds a digital signature to the IC card certificate using information that only the authentication device 4 can know (S66), and the service providing device 5 that actually performs the service.
(S67). This IC card certificate is
This has the effect of guaranteeing the authenticity of the card and the information stored in the IC card to the service provider who actually provides the service, and the IC card certificate number has the effect of indicating the uniqueness of the issued IC card certificate. The IC card certificate request number has the effect of associating the IC card certificate with the IC card certificate request requested by the IC card connection device 7, and the date and time when the IC card was authenticated is determined by, for example, passing through a network. The IC card ID has the effect of indicating the time difference from the generation of the generated IC card certificate request to the actual IC card authentication. The IC card ID has the effect of being information stored in the IC card 6, and the IC card certificate issuance destination. The service providing entity name has the effect of indicating the authenticity of the IC card 6 and the partner entity that guarantees the information stored in the IC card 6 by the authentication device 4.

Service providing device 5 for actually providing services
Receives the IC card certificate, checks the signature of the IC card certificate, and confirms that the authentication device 4 created the IC card certificate (S68). Next, the service providing device 5 that actually performs the service extracts the ID number of the IC card from the IC card certificate (S69),
A point service is performed for the ID number of the IC card (S70). Further, the service providing apparatus 5 that actually performs the service records and stores the IC card certificate (S7).
1). The recorded IC card certificate has an effect that can be used as a certificate at the time of a trouble after the fact.

According to the flow shown in FIG.
The service providing device 5 that actually provides services to the IC card connection device 7 to which the IC card 6 is connected may be separated from the network, and there are a plurality of IC card connection devices 7 to which the IC card 6 is connected. It is possible to construct a system in which there is at least one service providing apparatus 5 to perform. Further, the IC card connection device 7 may operate the IC card 6 in response to a command from the authentication device 4, but does not operate the IC card 6 mainly by the service providing device 5.

Once distributed, the IC card is divided into multiple locations, and even if malicious at a certain point, the IC card is not known, and it is difficult to manage secret information related to the IC card. , A great IC for this management
The authentication entity manages all or a part of secret information (such as an IC card authentication key and a reference key for information stored in the IC card) relating to the card, and communicates information about the IC card to the service provider by means of a certificate. .

The effect is that the provider of the IC card connection device and the provider of the service do not need labor or cost for handling all or a part of the secret information.
The ability to engage in the service itself using the IC card ID described in the IC card certificate. If the service providing device and the IC card connection device can communicate with the authentication device via the network, the entity that manages the device may be different from the entity that provides the IC card or the authentication device. A plurality of ICs issued by at least one entity that provides an IC card and an authentication device
Cards can be shared.

As is apparent from this result, as compared with the conventional technology in which a single entity issues an IC card, an authentication device, a service providing device, and an IC card connecting device, a large number of service providing entities have the same IC card. Thus, services can be freely constructed, added, and extended without being affected by other service providers.

Further, according to this method, the issuing of the IC card is performed by the authentication entity, but the distribution of the IC card to the user can be freely performed by a plurality of service providing entities. In this method in which the authentication entity manages the secret information of the IC card, the service can be performed using the IC card distributed by another entity, and the labor and cost of distribution can be reduced.

The authentication device checks the usage status of the IC card.
Since the information can be grasped at the time of card authentication, it is easy to charge or provide services to the service provider by the authentication device, such as collecting a fee from the service provider according to the use of the IC card.

Also, the case where the service providing entity that operates the IC card connecting device to which the IC card is connected is the same as the service providing entity that operates the service providing device that actually performs the service, and the other embodiments described above Clearly, variations are within the scope of the invention.

[Fifth Embodiment] FIG. 7 shows an example of a basic system to which the present invention is applied.
In this example, the authentication card 4 receives an IC card certification request from the IC card connection device 7 to which the IC card 6 is connected, and the authentication device 4 determines the authenticity of the IC card 6 and the IC card 6. IC card I, which is information stored in the
This is an example of an IC card system that notifies and assures D to a service providing apparatus 5 that actually performs a service.

The authentication device 4 includes an external communication unit 41 for communicating with the service providing device 5 and the IC card connection device 7 via the network 9 and an IC card connection device for receiving an IC card certificate request and sending the IC card certificate request. An IC card authentication unit 42 for checking the signature of the provider and performing mutual authentication with the IC card 6;
An IC card management database (IC card management DB) 43 for managing an encryption key for performing communication of the card ID;
To confirm the signature of the IC card connection device provider,
I that manages the public key data of the provider of the C card connection device
C card connection device providing entity management database (IC card connection device providing entity management DB) 44, and an IC card certificate request recording unit 45 for recording and storing an IC card certificate request
And an IC card certificate creation unit 46 for creating an IC card certificate, and an authentication entity signature unit 47 for signing the IC card certificate using a secret key that can be known only by the authentication entity that manages the authentication device 4. It is configured with.

The service providing device 5 includes an authentication device communication unit 51 for communicating with the authentication device 4 via the network 9,
Accepts the IC card certificate, confirms the signature of the authenticating entity,
The system is provided with a service providing unit 52 for providing a service corresponding to the IC card owned by the IC card owner and an IC card certificate recording unit 53 for recording and storing the IC card certificate.

The IC card connection device 7 is an authentication device communication section 71 for communicating with the authentication device 4 via the network 9.
And an IC card communication unit 72 for communicating with the IC card 6
And an IC card certification requesting unit 73 for preparing an IC card certification request, and an I / C for signing the IC card certification request using a secret key that can be known only by the provider of the IC card connection device.
It comprises a C card connection device providing entity signature unit 74 and an IC card use intention receiving unit 75 that receives an IC card use intention from the IC card owner.

The IC card 6 includes an IC card connection device communication unit 61 for communicating with the IC card connection device 7, an authentication device authentication unit 62 for performing mutual authentication with the authentication device 4, and a unique number for each IC card ( IC with IC card ID)
A card ID holding unit 63 and an IC for encrypting the ID
A card ID encryption unit 64 is provided.

The external communication unit 41 of the authentication device 4 is provided with a communication between the IC card authentication unit 42 and the IC card connection device 7 via the network 9 and a service providing device via the IC card certificate creation unit 46 and the network 9. 5 is relayed. The IC card authentication unit 42 performs IC card management D
B43 and IC card connection device providing entity management DB 44 and I
It communicates with the C card certification request recording section 45 and the IC card certificate creation section 46. The IC card certificate creation unit 46 communicates with the authentication subject signature unit 47 in addition to the above communication.

The authentication device communication unit 71 relays communication between the IC card certification request unit 73, the IC card communication unit 72, and the authentication device 4 via the network 9. The IC card communication unit 72 performs communication with the IC card 6 and, if necessary, relays communication between the authentication device 4 and the IC card 6 via the authentication device communication unit 71. The IC card certification request unit 73 includes an authentication device communication unit 71 and an IC card connection device providing subject signature unit 74.
And the IC card use intention receiving unit 75.

The authentication device communication unit 51 includes the service providing unit 5
2 and the authentication device 4 via the network 9 are relayed. The service providing unit 52 communicates with the authentication device communication unit 51
The communication with the C card certificate recording unit 53 is performed.

The IC card connection device communication unit 61 in the IC card 6 relays communication between the authentication device authentication unit 62, the IC card ID holding unit 63, and the IC card connection device 7. IC
The card ID holding unit 63 includes an IC card ID encrypting unit 64
And the IC card connection device communication section 61.

Next, the operation of the present system will be described. First,
When the IC card use intention receiving unit 75 receives a notification of the intention to use the IC card 6 from the IC card owner, the use intention is transmitted to the IC card certification requesting unit 73. Then I
The C card certification request unit 73 creates an IC card certification request. Here, the IC card certification request includes the name of the IC card connecting device providing entity, the name of the service providing entity, and the IC
The card certificate request number, the date and time of creation of the IC card certificate request, the network address of the IC card connection device 7 to which the IC card 6 is connected, and the network address of the service providing device 5 that actually performs the service are described. You.

The IC card connection device providing subject name has the effect of indicating the subject who requests the authentication device 4 for an IC card certification request. The service providing entity name has the effect of indicating the entity that actually provides the service. Further, by making the IC card certificate request number an identifier used only once by the service provider, the IC card certificate request number and the creation date and time of the IC card certificate request have the effect of specifying the IC card certificate request. is there. IC to which the above IC card is connected
The network address of the card connection device 7 has an effect of specifying the location of the IC card connection device 7 on the network, and the network address of the service providing device 5 that actually performs the service is the service providing device 5 that actually performs the service. This has the effect of identifying the location on the network.

Next, the IC card certification requesting section 73 converts the IC card certification request into the IC card connection device providing entity signature section 7.
4 and the IC card connection device providing entity signature unit 74
When adding the signature of the IC card connection device provider to the IC card certificate request to prevent tampering and spoofing,
The IC card certification request is returned to the C card certification request unit 73. The IC card certification requesting unit 73 includes an authentication device communication unit 71
To the IC card authentication unit 42 via the external communication unit 41.

When the IC card authentication unit 42 confirms the IC card connection device providing entity of the signature of the IC card certificate request using the public key managed by the IC card connection device providing entity management DB 44, the IC card request certificate The certificate is transmitted to the IC card certification request recording unit 45. The IC card certification request recording unit 45 records and stores an IC card certification request. This record serves as evidence.

Next, based on the network address of the IC card connection device 7 described in the IC card certificate request, the IC card authentication unit 42, the external communication unit 41, the authentication device communication unit 71, and the IC card communication unit 72 Mutual authentication is performed with the authentication device authentication unit 62 via the communication unit 61 and the IC card connection device communication unit 61. This mutual authentication is desirably protected from eavesdropping and impersonation in a communication path between the authenticating devices, as represented by a challenge response method.

When the mutual authentication is established, the IC card authentication section 42 communicates with the external communication section 41, the authentication device communication section 71, and the I
Via the C card communication unit 72 and the IC card connection device communication unit 61, the IC card ID holding unit 63 is requested to notify the IC card ID. The IC card ID holding unit 63 stores an IC card ID unique to each IC card.
Is encrypted by the IC card ID encryption unit 64,
Via the C card connection device communication unit 61, the IC card communication unit 72, the authentication device communication unit 71, and the external communication unit 41, the IC
The encrypted ID is transmitted to the card authentication unit 42. This encryption has the effect of preventing the IC card ID from being decrypted by anyone other than the IC card 6 and the authentication device 4.

[0119] The IC card authentication unit 42 determines whether the encrypted I
The C card ID is decoded based on information managed in the IC card management DB 43. The IC card authentication unit 42 transmits the decrypted IC card ID to the IC card certificate creation unit 46. The IC card certificate creation unit 46 that has received the IC card ID creates an IC card certificate. This IC
The card certificate includes an IC card certificate number, an IC card certificate request number corresponding to the IC card certificate, and an IC card certificate.
The date and time when the card was authenticated, the card ID, and the name of the service provider to which the IC card certificate was issued are described.

This IC card certificate has the effect of guaranteeing the authenticity of the IC card and the information stored in the IC card to the service provider who actually performs the service. This has the effect of showing the uniqueness of the card certificate.
There is an effect of associating the card certificate with the IC card certification request requested by the IC card connection device 7, and the date and time when the IC card was authenticated is calculated from the IC card certification request created by passing through a network or the like. Has the effect of indicating the time difference until the IC card is authenticated.
D has the effect of becoming information stored in the IC card,
The service provider name to which the IC card certificate is issued has the effect of indicating the other party whose authentication device 4 guarantees the authenticity of the IC card and the information stored in the IC card.

The authentication subject signature unit 47 adds an electronic signature to the created IC card certificate using a secret key that only the authentication device 4 can know, and transmits the IC card certificate to the service providing unit 52 via the external communication unit 41. I do. When the service providing unit 52 confirms the signature of the IC card certificate with the public key of the authentication subject, the service providing unit 52
Take out the IC card ID from the C card certificate,
A service corresponding to the C card ID is performed.

Next, the service providing unit 52 transmits the IC card certificate to the IC card certificate recording unit 53, and the IC card certificate recording unit 53 records and stores the IC card certificate. This record serves as evidence.

According to the system shown in FIG. 7, the IC card 6 is accessed by the IC card authentication unit 42 of the authentication device 4, and the IC card connection device 7 is connected to the authentication device communication unit 71 and the IC card communication unit 72. Is the mutual authentication of IC cards and IC
It is only necessary to relay information for communicating the ID of the card. Similarly, the service providing device 5 that actually provides the service does not need to communicate with the IC card 6.

The IC card is distributed to multiple points once distributed, and it is difficult to manage the secret information related to the IC card, even if the IC card is malicious at a certain point. , A great IC for this management
The authentication entity manages all or a part of secret information (such as an IC card authentication key and a reference key for information stored in the IC card) relating to the card, and communicates information about the IC card to the service provider by means of a certificate. .

As an effect, the subject of providing the IC card connection device and the subject of providing the service do not require labor or cost for handling all or a part of the secret information.
The ability to engage in the service itself using the IC card ID described in the IC card certificate. If the service providing device and the IC card connection device can communicate with the authentication device via the network, the entity that manages the device may be different from the entity that provides the IC card or the authentication device. A plurality of I cards issued by at least one entity that provides the IC card 6 and the authentication device
C card can be shared.

As is apparent from this result, as compared with the conventional technology in which a single entity issues an IC card, an authentication device, a service providing device, and an IC card connecting device, a large number of service providing entities have the same IC card. Thus, services can be freely constructed, added, and extended without being affected by other service providers.

Further, according to this method, the issuing of the IC card is performed by the authentication entity, but the distribution of the IC card to the user can be freely performed by a plurality of service providing entities. It is obvious that in the present system in which the authentication entity manages the secret information of the IC card, the service can be performed using the IC card distributed by another entity, and the labor and cost of distribution can be reduced.

The authentication device checks the usage status of the IC card.
Since the information can be grasped at the time of card authentication, it is easy to charge or provide services to the service provider by the authentication device, such as collecting a fee from the service provider according to the use of the IC card.

The features of the various embodiments of the present invention described above are enumerated below.

(1) A service providing device is provided by an IC card system comprising a plurality of IC cards, a plurality of service providing devices, and at least one authentication device, wherein the service providing device and the authentication device are connected to each other by a network. Is a method of providing a service, wherein the service providing apparatus, to which an IC card owner has connected an arbitrary IC card among the IC cards, performs the authentication so as to prove the authenticity of the IC card to the service providing apparatus. An IC card certification request for the device is configured, and the IC card certification request is transmitted to the authentication device via a network, and the authentication device communicates with the IC card connected to the service providing device via the network. The authentication device performs authentication on the IC card connected to the service providing device. The service providing device, and sends the IC card certificate to the service providing device via the network. The service providing device then sends the IC card certificate based on the information of the IC card certificate. An IC card service providing method including a step of performing a service corresponding to the IC card presented to the service providing apparatus.

(2) It comprises a plurality of IC cards, at least one IC card connection device, at least one service providing device, and at least one authentication device.
A method in which a service providing device provides a service by an IC card system in which a C card connection device, the service providing device, and the authentication device are connected to each other by a network, wherein an IC card owner is arbitrarily selected from among the IC cards. The IC card connection device to which the card is connected notifies the authentication device of information for specifying the network position of the service providing device that actually performs the service, and checks the authenticity of the IC card for the service that actually performs the service. An IC card certification request for making a request to certify to the providing device is constituted, and the IC card connection device to which the IC card is connected by the IC card owner transmits the IC card certification request to the authentication device through a network, and The authentication device is an IC card connected to the IC card connection device via a network. The authentication device configures an IC card certificate that guarantees the authenticity of the IC card connected to the IC card connection device to the service providing device that actually provides the service, and The IC card certificate is transmitted to the service providing apparatus that actually performs the service through the network, and the service providing apparatus that actually performs the service responds to the IC card presented based on the information of the IC card certificate. IC card service providing method comprising a step of providing a service.

(3) A method in which after authenticating the authenticity of the IC card by the method of (1), the authentication device guarantees the information stored in the IC card if necessary. That is, in the method of the above (1), the service providing device
An IC card certification request for requesting the authentication device to certify the information stored in the C card to the service providing device is further configured, and the IC card certification request is transmitted to the authentication device via a network. , The authentication device reads information stored in the IC card connected to the service providing device via a network, and the authentication device stores the information in the IC card connected to the service providing device. An IC card certificate for assuring the information provided to the service providing apparatus, transmitting the IC card certificate to the service providing apparatus through a network, and the service providing apparatus transmits the information of the IC card certificate to the service providing apparatus. Providing a service corresponding to the IC card presented to the service providing apparatus based on the IC card service.

(4) A method in which after authenticating the authenticity of the IC card by the method of (2), if necessary, the authentication device guarantees the information stored in the IC card. That is, in the method of (2), the IC card connection device requests the authentication device to certify the information stored in the IC card to the service providing device.
A card certification request is further configured, and the IC card certification request is transmitted to the authentication device via a network, wherein the authentication device is stored in the IC card connected to the IC card connection device via the network. The authentication device reads the information, and configures an IC card certificate for assuring the information stored in the IC card connected to the IC card connection device to the service providing device.
Transmitting a C card certificate to the service providing apparatus via a network, and performing a service corresponding to the IC card presented to the service providing apparatus based on the information of the IC card certificate; IC consisting of
Card service provision method.

(5) A service providing device is provided by an IC card system comprising a plurality of IC cards, a plurality of service providing devices, and at least one authentication device, wherein the service providing device and the authentication device are connected to each other by a network. Is a service providing method, wherein the service providing apparatus to which the IC card owner has connected an arbitrary IC card, transmits the authenticity of the IC card and the information stored in the IC card to the service providing apparatus. Constructing an IC card certification request for the authentication device to certify, transmitting the IC card certification request to the authentication device via a network, and connecting to the service providing device via the network. Performs mutual authentication with the IC card, and reads out information stored in the IC card. The authentication device constitutes an IC card certificate for guaranteeing the authenticity of the IC card connected to the service providing device and the information stored in the IC card to the service providing device, Transmitting a certificate to the service providing apparatus via the network, and the service providing apparatus performs a service corresponding to the IC card presented to the service providing apparatus based on the information of the IC card certificate. IC card service providing method.

(6) An IC card system including a plurality of IC cards, a plurality of service providing devices, and at least one authentication device, wherein the service providing device and the authentication device are connected to each other via a network. The service providing device, to which the card holder has connected an arbitrary IC card among the IC cards, provides the authentication device with the authenticity of the IC card and information stored in the IC card. A means for composing an IC card certification request to certify the device, and transmitting the IC card certification request to the authentication device via a network, wherein the authentication device transmits the request to the service providing device via the network. It has means for performing mutual authentication with the connected IC card and reading information stored in the IC card. Authentication device ensures the information stored in the service authenticity of the connected the IC card to provide apparatus and the IC in the card to the service providing apparatus I
The service providing apparatus has means for composing a C card certificate and transmitting the IC card certificate to the service providing apparatus via a network, and the service providing apparatus uses the service providing apparatus based on the information of the IC card certificate. An IC card service system having means for performing a service corresponding to the IC card presented in (1).

(7) A plurality of IC cards, at least one IC card connection device, at least one service providing device, and at least one authentication device, wherein the IC card connection device, the service providing device, and the authentication device Is an IC card system connected to each other by a network, and the IC card connecting device, to which the IC card owner has connected an arbitrary IC card among the IC cards, sends an authenticity of the IC card to the authentication device. Requesting to certify the information stored in the IC card to the service providing apparatus that actually provides the service.
A means for composing a C card certification request and transmitting the IC card certification request to the authentication device via a network, wherein the authentication device interacts with an IC card connected to the IC card connection device via the network; The authentication device has means for performing authentication and reading information stored in the IC card. The authentication device is configured to verify the authenticity of the IC card connected to the IC card connection device and to store information stored in the IC card. IC card certificate for assuring the information provided to the service providing apparatus that actually provides the service,
Means for transmitting a C card certificate to the service providing apparatus via a network, wherein the service providing apparatus responds to the IC card presented to the service providing apparatus based on the information of the IC card certificate. An IC card service system having means for providing a service.

(8) To realize an IC card system having a plurality of IC cards, a plurality of service providing devices, and at least one authentication device, wherein the service providing device and the authentication device are connected to each other by a network. A computer-readable recording medium on which a program for the service providing device of the present invention is recorded, wherein the service providing device to which an IC card owner has connected any of the IC cards is connected to the authentication device. On the other hand, the IC
An IC card certification request for requesting the service providing device to certify the authenticity of the card and the information stored in the IC card is formed, and the IC card certification request is transmitted to the authentication device via a network. In response to the IC card certification request, the service providing device performs a process of performing a service corresponding to the IC card presented to the service providing device based on information of the IC card certificate received from the authentication device. A recording medium on which a program to be executed by a computer is recorded.

(9) An IC card system having a plurality of IC cards, a plurality of service providing devices, and at least one authentication device, wherein the service providing device and the authentication device are connected to each other by a network. A computer-readable recording medium on which a program for the authentication device is recorded, wherein the authentication device receives an IC card certification request from the service providing device, and is connected to the service providing device via a network. IC
While performing mutual authentication with the card, the information stored in the IC card is read out, and the authenticity of the IC card connected to the service providing device and the information stored in the IC card are determined. I to guarantee to the service providing device
A process of configuring a C card certificate and transmitting the IC card certificate to the service providing device via a network is described below.
A recording medium on which a program to be executed by a computer is recorded.

(10) Consisting of a plurality of IC cards, at least one IC card connection device, at least one service providing device, and at least one authentication device, the IC card connection device, the service providing device, and the authentication device Is a computer-readable recording medium in which a program for an IC card connection device for realizing an IC card system connected to each other by a network is recorded, and the IC card owner connects an arbitrary IC card. The provided IC card connection device provides information for specifying the network location of the service providing device that actually provides service to the authentication device, and stores the authenticity of the IC card and the information stored in the IC card. An IC for making a request to certify information to a service providing device that actually performs the service
A recording medium storing a program for forming a card certification request and causing a computer to execute a process of transmitting the IC card certification request to the authentication device via a network.

(11) Consisting of a plurality of IC cards, at least one IC card connection device, at least one service providing device, and at least one authentication device, the IC card connection device, the service providing device, and the authentication device And a computer-readable recording medium on which a program for an authentication device for realizing an IC card system connected to each other by a network is recorded.
When a card certification request is received, mutual authentication is performed with an IC card connected to the IC card connection device via a network, information stored in the IC card is read, and connection to the IC card connection device is performed. The IC
An IC card certificate for assuring the authenticity of the card and the information stored in the IC card to the service providing device that actually provides the service, and the service for actually providing the IC card certificate A recording medium in which a program for causing a computer to execute a process of transmitting to a providing device via a network is recorded.

(12) Consisting of a plurality of IC cards, at least one IC card connection device, at least one service providing device, and at least one authentication device, the IC card connection device, the service providing device, and the authentication device Is a computer-readable recording medium in which a program for a service providing apparatus for realizing an IC card system connected to each other by a network is recorded. When receiving from the authentication device an IC card certificate that guarantees the authenticity of the IC card connected to the IC card connection device and the information stored in the IC card,
A recording medium in which a program for causing a computer to execute a process for performing a service corresponding to the IC card presented based on the information of the IC card certificate is recorded.

(13) In the above method, the IC card service providing method includes a step of encrypting information stored in the IC card and notifying the information to an authentication device.

(14) In the above method, the service providing device or the IC card connecting device signs and attaches the IC card certification request using information that only the service providing device or the IC card connecting device can know. An IC card service providing method including a step.

(15) In the above method, the authentication device receives, from the IC card owner, IC card owner authentication information that only the correct IC card owner can know from the IC card owner via the service providing device or the IC card connection device. A method of providing an IC card service, wherein the authentication device comprises the IC card certificate that further assures an IC card owner.

(16) In the above method, the authentication device connects an IC card to an IC card owner via the service providing device or the IC card connecting device to the service providing device or the IC card connecting device. And providing the IC card service.

(17) In the above method, the service providing device or the IC card connection device generates an IC card certification request and then stores information including the IC card certification request in a recording medium. Service delivery method.

(18) In the above method, after the service providing device receives the IC card certificate from the authentication device, the service providing device stores the information including the IC card certificate in a recording medium. Method (19) The method of providing an IC card service according to the above method, further comprising the step of, after creating the IC card certificate, storing the information including the IC card certificate in a recording medium.

(20) An IC card service providing method according to the above method, further comprising the step of, after receiving the IC card certification request, storing the information including the IC card certification request in a recording medium.

(21) In the above method, the IC card certificate is provided with a signature using information that can be known only by the authentication device.

(22) A method of providing an IC card service, wherein the mutual authentication performed by the authentication device and the IC card is performed by encryption.

(23) In the above method, the authentication device further writes, in the IC card certificate, the date and time when the IC card was authenticated and the date and time when the information stored in the IC card was read out. An IC card service providing method including a step of performing a service after confirming the date and time described in a card certificate.

(24) In the above method, the service providing device further connects to the IC card, reads information stored in the IC card from the IC card, and reads information certified by the IC card certificate. And the I
An IC card service providing method comprising a step of performing a service corresponding to an IC card presented based on information read from a C card.

(25) In the above-mentioned method, the authentication device may verify the content guaranteed by the IC card certificate by an entity that creates an IC card certificate request, a service providing device, an IC card connection device, or a service that actually performs a service. An IC card service providing method including a step of changing by an providing subject or a service providing device.

(26) In the above method, in the mutual authentication, the IC card does not authenticate the authentication device, and only the authentication device authenticates the IC card.

(27) In the above method, in place of the IC card, a tamper-resistant security application that can store information that can be known only by the authenticating entity.
A method for providing an IC card service using a device having a built-in module (SAM).

(28) In the above method, an IC card service providing method using a tamper-resistant device other than the IC card, in which a third party cannot illegally read and write information in the device, instead of the IC card.

[0157]

As described above, according to the present invention,
The service providing entity and the authentication entity that issues and authenticates the card can be different entities. As a result, a plurality of service providers can provide services using the same IC card issued by one authentication subject. Also, the service provider does not need to directly handle the IC card requiring special knowledge, and can concentrate on providing the service itself.

This is due to the present invention that allows the service providing subject and the authentication subject to be different subjects. These advantages are particularly effective in constructing a system in a place where multiple subjects gather at one place, such as shopping malls, complex buildings, and general amusement parks, or a system that can be used by many subjects in a wide area. It is.

[Brief description of the drawings]

FIG. 1 is a diagram illustrating a flow of a process according to a first embodiment.

FIG. 2 is a diagram illustrating an example of an IC card certification request.

FIG. 3 is a diagram showing an example of an IC card certificate.

FIG. 4 is a diagram illustrating a configuration example of a system according to a second embodiment;

FIG. 5 is a diagram illustrating a flow of processing according to a third embodiment.

FIG. 6 is a diagram illustrating a flow of processing according to a fourth embodiment.

FIG. 7 is a diagram illustrating a configuration example of a system according to a fifth embodiment.

[Explanation of symbols]

 Reference Signs List 1 authentication device 2 service providing device 3 IC card

Continued on the front page (51) Int.Cl. ⁷ Identification symbol FI Theme coat II (Reference) G06K 19/10 G09C 1/00 640B 9A001 G09C 1/00 640 H04L 9/00 675D G06F 15/21 340B 340C H04L 9/10 G06K 19/00 R H04L 9/00 621Z (72) Inventor Nobuo Mutoh 2-3-1 Otemachi, Chiyoda-ku, Tokyo F-term in Nippon Telegraph and Telephone Corporation (reference) 5B035 AA13 BB09 5B049 AA05 BB11 BB49 CC05 CC31 CC39 DD04 DD05 EE05 EE09 EE22 EE23 EE28 FF08 FF09 GG01 GG04 GG07 GG10 5B058 KA05 KA11 KA35 5B085 AE12 AE23 5J104 AA07 AA09 EA05 EA22 KA02 LA03 LA06 MA03 MA06 NA05 NA27 NA38 NA03 NA37 NA38 NA03 NA37 NA38

Claims (10)

[Claims] 1. A system comprising a plurality of tamper-resistant devices, a plurality of service providing devices, and at least one authentication device, wherein the service providing device and the authentication device are connected to each other by a network. A method in which a providing device performs a service, wherein the service providing device, upon receiving an intention to use the tamper-resistant device, verifies the authenticity of the tamper-resistant device to the service providing device. And sends the certification request to the authentication device via the network, and the authentication device authenticates the tamper-resistant device connected to the service providing device via the network. Composing a certificate for guaranteeing the authenticity of the tamper-resistant device, transmitting the certificate to the service providing device via a network, A service providing method by a tamper-resistant device, wherein the service providing device performs a service corresponding to the tamper-resistant device presented to the service providing device based on the information of the certificate. 2. The tamper-resistant device connection device, comprising: a plurality of tamper-resistant devices, at least one tamper-resistant device connection device, at least one service providing device, and at least one authentication device. A method in which the service providing device performs a service in a system in which the service providing device and the authentication device are connected to each other via a network, wherein the tamper-resistant device connecting device includes:
When receiving an intention to use the tamper-resistant device, a certification request is issued to the authentication device for certifying the authenticity of the tamper-resistant device to at least one of the service providing devices that actually perform the service. Transmitting the certification request to the authentication device via a network, and the authentication device
Authenticates the tamper-resistant device connected to the tamper-resistant device connection device via the network, constructs a certificate for guaranteeing the authenticity of the tamper-resistant device, and actually provides the certificate with a service. The service providing apparatus, which transmits the service to the service providing apparatus via a network and actually performs the service, performs a service corresponding to the tamper-resistant apparatus presented based on the information of the certificate. A service providing method using a tamper device. 3. The service providing method by a tamper-resistant device according to claim 1 or 2, wherein the authentication device requests the certification request or further guarantee the information stored in the tamper-resistant device. In response to the certification request, the information stored in the tamper-resistant device pertaining to the certification request is read out, and the information stored in the tamper-resistant device is verified together with the guarantee of the authenticity of the tamper-resistant device. A certificate for assuring the information stored in the tamper-resistant device to the service providing device separately from a certificate for guaranteeing the service providing device or a certificate for guaranteeing the authenticity of the tamper-resistant device. And transmitting the certificate to the service providing apparatus via a network. 4. The tamper-resistant apparatus according to claim 1, wherein said tamper-resistant apparatus includes an IC card or a security application module having tamper resistance. A service providing method using a tamper-resistant device. 5. A service providing system comprising a plurality of tamper-resistant devices, a plurality of service providing devices, and at least one authentication device, wherein the service providing device and the authentication device are mutually connected by a network. So,
The service providing device includes: means for receiving an intention to use the tamper-resistant device;
Means for composing a certification request to the authentication device so as to prove the authenticity of the tamper-resistant device, and transmitting the certification request to the authentication device via a network; Means for performing a service corresponding to the tamper-resistant device presented to the service providing device based on information of a certificate for guaranteeing authenticity of the tamper-resistant device transmitted from the device; The authentication device receives the certification request from the service providing device, authenticates the tamper-resistant device connected to the service providing device via a network, and authenticates the tamper-resistant device by the authentication. Means for constructing a certificate for guaranteeing operability and transmitting the certificate to the service providing apparatus via a network. Test system. 6. A tamper-resistant device, at least one tamper-resistant device connection device, at least one service providing device, and at least one authentication device,
A service providing system in which the tamper-resistant device connection device, the service providing device, and the authentication device are connected to each other via a network, wherein the tamper-resistant device connection device accepts an intention to use the tamper-resistant device. Means, and a certification request for making a request for certifying the authenticity of the tamper-resistant device to at least one of the service providing devices that actually provide a service to the authentication device,
Means for transmitting the certification request to the authentication device via a network, wherein the authentication device receives the certification request from the tamper-resistant device connection device, and is connected to the tamper-resistant device connection device via the network. Means for authenticating the tamper-resistant device, and a certificate for assuring the authenticity of the tamper-resistant device as a result of the authentication, and transmitting the certificate to the service providing device for actually providing the service to the network. Means for transmitting, through the service providing device, the service providing device, based on the information of the certificate that guarantees the authenticity of the tamper-resistant device transmitted from the authentication device,
A service providing system using a tamper-resistant device, comprising means for performing a service corresponding to the tamper-resistant device presented to the service providing device. 7. The service providing system using a tamper-resistant device according to claim 5 or 6, wherein the authentication device requests the certification request or further guarantee the information stored in the tamper-resistant device. In response to the certification request, the information stored in the tamper-resistant device pertaining to the certification request is read out, and the information stored in the tamper-resistant device is verified together with the guarantee of the authenticity of the tamper-resistant device. A certificate for assuring the information stored in the tamper-resistant device to the service providing device separately from a certificate for guaranteeing the service providing device or a certificate for guaranteeing the authenticity of the tamper-resistant device. And a means for transmitting the certificate to the service providing apparatus via a network. 8. An authentication device connected to a plurality of service providing devices via a network, and for one of the service providing devices, an authentication device for certifying the authenticity of the tamper-resistant device connected to the service providing device. A recording medium on which a program for realizing the program is recorded, wherein a process for receiving a certification request for certifying the authenticity of the tamper-resistant device connected to the service providing device from the service providing device, and receiving the certification request In this case, a process for authenticating the tamper-resistant device connected to the service providing device via the network and a certificate for assuring the service providing device of the authenticity of the tamper-resistant device by the authentication are configured. And a process of transmitting the certificate to the service providing device via the network by a computer. A program recording medium for the device. 9. A service connection device connected to at least one tamper-resistant device connection device and at least one service provision device via a network.
A recording medium for recording a program for realizing an authentication device for certifying the authenticity of the tamper-resistant device connected to the tamper-resistant device connecting device, wherein the tamper-resistant device connecting device includes A process of receiving a certification request for certifying the authenticity of the tamper-resistant device connected to the device connection device; and, when the certification request is received, the process of receiving the certification request connected to the tamper-resistant device connection device via a network. A process for performing authentication of the tamper-resistant device; and, as a result of the authentication, configuring a certificate for assuring the authenticity of the tamper-resistant device to the service providing device that actually provides the service. A program recording medium for an authentication device, wherein a program for causing a computer to execute a process of transmitting to the service providing device through the computer is recorded. 10. The program recording medium of an authentication device according to claim 8, wherein the program is:
In response to the certification request or a certification request requesting that the information stored in the tamper resistant device be guaranteed, the information stored in the tamper resistant device according to the certification request is read, and the tamper resistant device is read. Along with the assurance of the authenticity of the device, apart from the certificate for assuring the information stored in the tamper-resistant device to the service providing device or the certificate for assuring the authenticity of the tamper-resistant device, Authentication comprising a program for configuring a certificate for assuring the information stored in the tamper-resistant device to the service providing device and transmitting the certificate to the service providing device via a network. A program recording medium for the device.