JP2003330892A - Password generating device, and authentication device, and password generating method and authentication method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To generate passwords corresponding to authenticated personnel by using common passwords held by users, and increase safety against theft on a communication route. <P>SOLUTION: This password generating device 300 for generating the passwords for authentication against the authenticated personnel comprises a common password authentication part 104 for authenticating the common passwords controlled by the users, an authenticated personnel key input part 102 for inputting authenticated personnel key for specifying the authenticated personnel, an authenticated personnel password storage part 106 for storing the passwords corresponding to the authenticated personnel in connection with the authenticated personnel keys, and an authenticated personnel password selection part 105 for selecting the passwords corresponding to the authenticated personnel from the authenticated personnel password storage part 106 based on the authenticated personnel keys inputted in the authenticated key input part 102. A random number generating part 404 is installed in the authentication device 400, and the passwords for authentication is calculated by using random numbers and passwords for registration. <P>COPYRIGHT: (C)2004,JPO

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to password authentication which is a part of user authentication.

[0002]

2. Description of the Related Art When using a cash card in a bank or using a computer system, it is necessary to confirm that the user is who he / she is.

Conventionally, personal authentication methods include (1) a method known only to the user (password, personal identification number, etc.), (2) a method owned by the user (card, token, key, etc.), ( 3) There is known a method of confirming a user's characteristic (fingerprint, voiceprint, signature, etc.).

Of these, the password is still the most used authentication means. Also, when using a key or a biometric system, it is generally used together with a password.

At present, it is becoming more common to use cards from multiple banks and card companies, and to have multiple accounts for computer systems. In these cases, it is desirable to use different passwords for each company for security. This is to minimize the damage caused by one password being stolen.

[0006]

However, as described above, when different passwords are used for each company, the number of passwords increases. In this case, it is necessary to store all passwords, but it is not easy for the user to store many passwords. For this reason, users often use only one or a small number of passwords without using different passwords for each company. However, in this case, it is desirable to use a plurality of passwords, because only one password being stolen may cause serious damage.

[0007] Therefore, there is a problem of a method of using a plurality of passwords and efficiently handling the passwords without storing them.

[0008]

In order to solve the above-mentioned problems, a password generating apparatus according to a first aspect of the present invention is a password generating apparatus for generating a password for authenticating a verifier, which is commonly managed by users. A common password authentication means for authenticating a password, a verifier key input means for inputting a verifier key for specifying the verifier, and a verifier password storage for storing a password corresponding to the verifier in association with the verifier key. And a verifier password selecting means for selecting a password corresponding to the verifier from the verifier password storage means based on the verifier key input by the verifier key input means. Characterize.

With the above configuration, the common password authenticating means authenticates the common password input by the user. The verifier password storage means stores the verifier key input from the verifier key input means and the password corresponding to the verifier in association with each other. The verifier password selection means is
A password corresponding to the verifier is selected from the verifier password storage means based on the entered verifier key.
As a result, different passwords can be generated corresponding to each verifier from the common password possessed by the user.

A password generating apparatus according to the second invention is
In a password generation device for generating a password for authenticating a verifier, a common password input means for inputting a common password managed by a user and a verifier key input means for inputting a verifier key for specifying the verifier. And a verifier password calculating means for calculating a password corresponding to the verifier from the common password and verifier key input by the common password input means and verifier key input means. To do.

With the above arrangement, the common password is inputted by the common password input means and the verifier key is inputted by the verifier key input means. Then, the verifier password calculation means calculates the password corresponding to the verifier from the common password and the verifier key. As a result, different passwords can be generated corresponding to each verifier from the common password possessed by the user.

A password generation device according to a third invention is
In the password generation device according to the first or second aspect of the invention, the verifier key input means inputs the verifier key sent from the verifier.

With the above configuration, the verifier itself generates and sends the verifier key, so that the user does not need to manage the verifier key. This improves the convenience of the user.

A password generation device according to a fourth invention is
In a password generation device that generates a password for authentication to a verifier, a different authentication password is given to each verifier each time based on the common password managed by the user and the random number received from each verifier. It is characterized in that it comprises an authentication password calculating means for calculating.

With the above configuration, the authentication password calculation means calculates the authentication password based on the random number generated by each verifier, so that the authentication password changes every time. As a result, a password corresponding to each verifier can be generated from the common password possessed by the user, and
The security against theft etc. on the communication path is significantly improved.

A password generation device according to a fifth invention is
In the password generation device according to a fourth aspect of the present invention, a common password input means for inputting a common password managed by a user, a verifier key input means for inputting a verifier key for identifying the verifier, and the common A registration password calculating means for calculating a password corresponding to the verifier from the common password and the verifier key input by the password input means and the verifier key input means, and the registration password based on the common password It is characterized in that the authentication password calculation means calculates a different authentication password for each verifier each time based on the registration password calculated by the calculation means and the random number received from each verifier.

With the above configuration, the registration password calculation means is configured to register the registration password corresponding to the verifier from the common password input by the common password input means and the verifier key input by the verifier key input means. To calculate. This registration password is registered on the verifier side.
The authentication password calculation means calculates a different authentication password for each verifier each time based on the registration password and the random number received from each verifier. This allows
A password corresponding to each verifier can be generated from the common password owned by the user, and the security against theft on the communication path is significantly improved.

In the authentication apparatus according to the sixth aspect of the invention, a registration password storage means for storing a password previously registered by the user, a random number generation means for generating a random number, and the registration password storage means are stored. Verification password calculating means for calculating a verification password from the registration password and the random number generated by the random number generating means, the authentication password input from the password generating device according to the fourth or fifth aspect of the invention, and the verification password. And a verification password authenticating means for authenticating by comparing the verification passwords calculated by the password calculating means.

With the above configuration, the verification password calculation means calculates the verification password from the registration password stored in the registration password storage means and the random number generated by the random number generation means. The verification password authentication means authenticates by comparing the verification password input from the password generation device with the verification password calculated by the verification password calculation means. As a result, the security against theft and the like on the communication path is significantly improved.

Similarly, in the method using the apparatus according to the first to sixth inventions, the password corresponding to each verifier can be generated and the security against theft on the communication path can be obtained. Is greatly improved.

[0021]

BEST MODE FOR CARRYING OUT THE INVENTION Embodiments of the present invention will be described below with reference to the accompanying drawings. FIG. 1 is a configuration diagram showing a password generation device according to the first embodiment, FIG. 2 is a configuration diagram showing a password generation device according to the second embodiment, and FIG.
FIG. 4 is a configuration diagram showing a password generation device according to the embodiment, and FIG. 4 is a configuration diagram showing an authentication device according to the third embodiment.

[First Embodiment] In this embodiment, a common password managed by a user and a verifier key for identifying a verifier are input, and a password corresponding to each verifier is registered in advance. The passwords of a plurality of verifiers can be efficiently managed without being stored by selecting and outputting from the existing password string.

The personal authentication means of this embodiment authenticates the user based on the password generating device 100 which outputs the verifier password by the user inputting the common password and the verifier key, and the verifier password. It is composed of an authentication device (not shown). However, since the authentication apparatus uses a generally used apparatus, only the password generation apparatus 100 will be described here. The password generation device 100 may be configured as a small-sized device that can be carried by the user, or may be incorporated in the system on the verifier side.

FIG. 1 is a block diagram showing a password generation device 100. As shown, the password generation device 100 includes a common password input unit 101, a verifier key input unit 102, a verifier password input unit 103, a common password authentication unit 104, and a verifier password selection unit 10.
5, a verifier password storage unit 106, and a verifier password output unit 107. The password generation device 100 is set to authenticate the user with a common password.

The common password input unit 101 is for inputting a common password possessed by the user. The common password is a password for the password generation device 100 to authenticate the user. The common password input unit 101 passes the common password input for the user to be authenticated to the common password authentication unit 104.

The verifier key input unit 102 is for inputting a verifier key that is defined by the user and that identifies a verifier. This verifier key is a key for identifying the verifier and is composed of simple symbols. The verifier key is used when the user authenticates the verifier and the verifier password is stored in advance in the verifier password storage unit 106.
Enter when registering to. The verifier key input unit 102
The verifier key input by the user is passed to the verifier password selection unit 105 and the verifier password storage unit 106.

The verifier password input unit 103 is for inputting a verifier password. The user must enter the verifier password to authenticate the verifier.
It is input from the verifier password input unit 103 and stored in advance. The verifier password input unit 103 passes the verifier password input by the user to the verifier password storage unit 106.

The common password authentication unit 104 is for authenticating the common password received from the common password input unit 101. The common password authentication unit 104
The authentication result is passed to the verifier password selection unit 105.

The verifier password selection unit 105 is for selecting the verifier password stored in the verifier password storage unit 106. That is, the verifier password selection unit 105 receives the authentication result with the correct user in the common password authentication unit 104, and then verifier key input unit 10
This is for selecting the verifier password stored in the verifier password storage unit 106 based on the verifier key received from 2. The verifier password selection unit 105 selects the verifier password stored in the verifier password storage unit 106 based on the verifier key stored in association with the verifier password, and outputs the verifier password to the verifier password output device 107. hand over.

The verifier password storage unit 106 is for storing a plurality of verifier passwords in association with the corresponding verifier keys. The verifier password storage unit 106 receives the verifier password from the verifier password input unit 103 and the verifier key from the verifier key input unit 102 when the verifier password is entered and registered. The verifier key and the verifier password are stored in association with each other.

The verifier password output unit 107 is for transmitting the verifier password received from the verifier password selection unit 105 to the verifier. The verifier password output unit 107 may be configured by a display device such as a display and display the verifier password to the user, instead of connecting the code and transmitting the verifier password. In this case, the user notifies the verifier password to the verifier by using another means such as directly inputting the verifier password while looking at the display device.

[Operation] Next, the operation of the first embodiment will be described.

First, the user registers in advance verifier passwords for a plurality of verifiers. In particular,
The common password is input from the common password input unit 101 to allow the password generation device 100 to authenticate itself.
Then, the verifier password is input from the verifier password input unit 103. The entered verifier password is passed to the verifier password storage unit 106. At the same time, the verifier key is input from the verifier key input unit 102. The input verifier key is passed to the verifier password storage unit 106 together with the verifier password selection unit 105. In the verifier password storage unit 106, the verifier password and the verifier key are registered in association with each other.

As many verifier passwords and verifier keys as verifier password storage units 106 are used.
Register in. Furthermore, these verifier passwords are also registered in advance on each verifier side.

Next, when authenticating the verifier, the user inputs the common password from the common password input unit 101. The entered common password is passed to the common password authentication unit 104, and the common password authentication unit 104 authenticates whether or not the user is a correct user. If the common password authentication unit 104 authenticates the correct user, the information is verified.
Passed to 5.

Next, the user inputs the verifier key input unit 102.
Enter the verifier key from. The input verifier key is passed to the verifier password selection unit 105 and the verifier password storage unit 106. In the verifier password selection unit 105, the verifier password is stored in the verifier password storage unit 106 based on the verifier key received from the verifier key input unit 102 based on the authentication with the correct user by the common password authentication unit 104. select. Verifier password selection part 1
05 selects the verifier password associated with the verifier key in the verifier password storage unit 106 based on the passed verifier key, and passes the verifier password to the verifier password output device 107. Then, the verifier password output unit 107 transmits the verifier password to the verifier.

The verifier authenticates the user based on the verifier password transmitted from the password generation device 100.

[Effect] As described above, in this embodiment, the verifier password for a specific verifier can be generated using the common password and the verifier key possessed by the user. Thus, the user can generate different passwords for a plurality of verifiers by managing one common password and a simple verifier key corresponding to each verifier. That is, a plurality of passwords can be efficiently handled without being stored.

As a result, the user need only strictly manage one password. Thereby, even if one verifier password is stolen, the damage can be minimized.

[Second Embodiment] The personal authentication means of this embodiment is based on a password generation device 200 for outputting a verifier password from a common password and a verifier key input by a user, and a verifier password. And an authentication device for authenticating the user. In this embodiment as well, as in the first embodiment, the authentication device uses a device that is generally used. Therefore, here, the password generation device 2 is used.
Only 00 will be described.

Password generation device 20 according to the present embodiment
0 is the password generation device 100 of the first embodiment in which the verifier password generation part is changed. The password generation device 200 of the present embodiment uses the one-way function to generate a verifier password from the common password and the verifier key of the user.
A plurality of this verifier password is generated for each of a plurality of banks and card companies, and is registered in advance for each verifier side.

FIG. 2 is a block diagram showing the password generation device 200. As shown, the password generation device 200 includes a common password input unit 201, a verifier key input unit 202, a verifier password calculation unit 203, and a verifier password output unit 204.

The common password input unit 201 is the first password
Similar to the common password input unit 101 of the above embodiment, the common password input unit 101 is for inputting a common password held by the user. The common password input unit 201 passes the common password input by the user to the verifier password calculation unit 203.

The verifier key input unit 202 is, like the verifier key input unit 102 of the first embodiment, for inputting a verifier key that is defined by the user and identifies the verifier. . When the user is authenticated by the verifier, the user inputs the verifier key that identifies the verifier. The verifier key input unit 202 passes the verifier key input by the user to the verifier password calculation unit 203.

The verifier password calculator 203 calculates the verifier password. That is, the verifier password calculation unit 203 receives the common password received from the common password input unit 201 and the verifier key input unit 202.
Calculate the verifier password for the verifier to authenticate the user based on the verifier key received from. A one-way function is used to calculate the verifier password. Thereby, the verifier password is uniquely calculated from the input common password and verifier key. The verifier password calculation unit 203 passes the calculated verifier password to the verifier password output unit 204.

The verifier password output unit 204, like the verifier password output unit 107 of the first embodiment, is for transmitting the verifier password calculated by the verifier password calculation unit 203 to the verifier. is there. The verifier password output unit 204 may be configured by a display device such as a display and only display the verifier password to the user. In this case, the user notifies the verifier password to the verifier by using another means such as directly inputting the verifier password while looking at the display device.

[Operation] Next, the operation of the second embodiment will be described.

First, a method of generating a password will be described.

To authenticate the verifier, the user inputs the common password in the common password input unit 201 and the verifier key in the verifier key input unit 202. The common password and the verifier key input to the common password input unit 201 and the verifier key input unit 202 are passed to the verifier password calculation unit 203. The verifier password calculation unit 203 calculates the verifier password from the input common password and verifier key by using the one-way function. The verifier password calculated by the verifier password calculation unit 203 is passed to the verifier password output unit 204. Then, the verifier password output unit 204 transmits the received verifier password to the verifier.

Next, user authentication will be described. First, the user generates in advance a plurality of passwords that correspond to the plurality of verifiers on a one-to-one basis and registers them in each verifier. Specifically, the common password owned by the user and the verifier key defined by the user for each verifier are input to the common password input unit 201 and the verifier key input unit 202, and the password corresponding to the verifier is entered. Is calculated by the above method. Then, the verifier password is transmitted to the target verifier and registered. Do this for each of the multiple verifiers. That is, a plurality of passwords that correspond to a plurality of verifiers on a one-to-one basis are calculated by the above method, and each verifier password is transmitted to each verifier and registered in advance.

At the time of authentication, the user generates a verifier password by the above method and sends it to the verifier. The verifier authenticates the user by comparing the verifier password transmitted from the password generation device 200 with the pre-registered verifier password.

[Effects] As described above, according to this embodiment, the following effects are obtained in addition to the effects of the first embodiment. That is, from the common password and the verifier key,
Since the verifier password is calculated each time, it is not necessary to register the verifier password in the password generation device 200 in advance.

Also, it is not necessary to authenticate the user with respect to the password generation device 200.

[Third Embodiment] This embodiment is a modification of the second embodiment, which is provided with a means for preventing the leakage of the password by an eavesdropper on the communication path.

In the third embodiment, the user generates the verifier's password from the common password and the verifier key (see FIG. 3), and the user is authenticated based on the verification password. Authentication device 400 (FIG. 4)
See) and. In addition, here, the authentication password in the password generation device 300 is set to the authentication device 4
00 is called a verification password.

FIG. 3 is a block diagram showing the password generating apparatus 300. As shown in the figure, the password generation device 300 includes a common password input unit 301, a verifier key input unit 302, a registration password calculation unit 303, and
Registration password output unit 304 and random number input unit 305
And an authentication password calculation unit 306 and an authentication password output unit 307.

The common password input unit 301 is the first password
Similar to the common password input unit 101 of the above embodiment, when the user is authenticated, the common password of the user is input. The common password input unit 301 uses the input common password as the registration password calculation unit 3
Pass to 03.

The verifier key input unit 302, like the verifier key input unit 102 of the first embodiment, stores verifier keys defined by the user to identify a plurality of verifiers. It is for inputting. The verifier key input unit 302 passes the input verifier key to the registration password calculation unit 303.

The registration password calculation unit 303 is for calculating a registration password that is the basis for the verifier to authenticate the user. The registration password calculation unit 303 calculates the registration password based on the common password received from the common password input unit 301 and the verifier key received from the verifier key input unit 302.
The above one-way function is used for the calculation of the registration password. The password generation device 300 passes the calculated registration password to the registration password output unit 304 and the verification password calculation unit 306.

The registration password output unit 304 is for transmitting the registration password calculated by the registration password calculation unit 303 to the verifier. Note that the registration password output unit 304 may be configured by a display device such as a display, like the verifier password output unit 204 of the first embodiment, and only display the registration password to the user. In this case, the user notifies the verifier of the registration password by using another means such as directly inputting the registration password while looking at the display device.

The random number input unit 305 is for inputting a random number to be transmitted when the verifier authenticates the user. The random number input unit 305 passes the input random number to the authentication password calculation unit 306. The random number may be received directly from the verifier, or the value shown by the verifier may be
The user may manually input.

The authentication password calculator 306 is for generating an authentication password for authenticating the user. The authentication password calculation unit 306 performs calculation for generating an authentication password based on the registration password calculated by the registration password calculation unit 303 and the random number input by the random number input unit 305. A one-way function is used to calculate the authentication password. The authentication password calculation unit 306 passes the calculated authentication password to the authentication password output unit 307.

The authentication password output unit 307 is for transmitting the authentication password calculated by the authentication password calculation unit 306 to the verifier. The authentication password output unit 307 is also the registration password output unit 3 described above.
Similar to 04, it may be configured by a display device such as a display and only display the authentication password to the user. The user transmits the authentication password to the verifier by using another means such as directly inputting the authentication password while looking at the display device.

FIG. 4 is a block diagram showing the authentication device 400. The authentication device 400 includes a verification password input unit 401 and a registration password input unit 40 as shown in the figure.
2, a registration password storage unit 403, and a random number generation unit 4
04, a random number output unit 405, a verification password calculation unit 406, a verification password authentication unit 407, and an authentication result output unit 408.

The verification password input section 401 is for inputting the verification password (authentication password) transmitted from the password generating apparatus 300 and the user ID information when the user is authenticated. . The entered verification password is input to the verification password authentication unit 407,
In addition, the user ID information is registered in the password storage unit 403
Pass to.

The registration password input section 402 is for inputting the registration password transmitted from the password generating apparatus 300 and the user ID information when registering the registration password of the user. The registration password input unit 402 stores the input registration password and user ID information in the registration password storage unit 403.
Pass to.

The registration password storage unit 403 is for storing the registration password received from the registration password input unit 402 in association with the ID information.
Further, when the user is authenticated, the registration password corresponding to the ID information of the user received from the verification password input unit 401 is passed to the verification password calculation unit 406.

The random number generator 404 is for generating random numbers. The random number generation unit 404 passes the generated random number to the random number output unit 405 and the verification password calculation unit 406.

The random number output unit 405 is for transmitting the random number received from the random number generation unit 404 to the random number input unit 305 of the password generation device 300. Like the registration password output unit 304, the random number output unit 405 may be configured by a display device such as a display and only display the random number. The random number may be displayed to the user, and the user may input it to the password generation device 300 using another means.

The verification password calculation unit 406 calculates the verification password by the one-way function from the registration password registered in advance in the registration password storage unit 403 and the random number received from the random number generation unit 404. It is for. Verification password calculation unit 406
Passes the calculated verification password to the verification password authentication unit 407. The verification password calculation unit 406
Has the same function as the authentication password calculation unit 306 of the password generation device 300, and calculates a password based on the same random number received from the random number generation unit 404.

The verification password authentication unit 407 compares the verification password received from the verification password input unit 401 with the verification password received from the verification password calculation unit 406 to determine whether the user is correct. It is for verifying whether or not. The verification password authentication unit 407 passes the result to the authentication result output unit 408.

The authentication result output unit 408 notifies the user of the authentication result received from the verification password authentication unit 407. Note that the authentication result output unit 408 may be configured by a display device such as a display and only display the authentication result to the user. Further, the authentication result may be transmitted to a third party requesting user authentication.

[Operation] Next, operations of the password generation device 300 and the authentication device 400 of the third embodiment will be described.

First, the user uses the password generation device 30.
By using 0, a registration password for authentication is generated in advance and registered on the verifier side.

To generate a registration password, enter the common password from the common password input section 301,
The verifier key is input from the verifier key input unit 302. The registration password calculation unit 303 calculates the registration password from the common password and the verifier key by using the one-way function. The calculated registration password is transmitted from the registration password output unit 304 to the authentication device 400.

In the authentication device 400, the registration password from the registration password output unit 304 is input to the registration password input unit 402 and registered in the registration password storage unit 403 in association with the ID information.

When receiving the authentication, the operation is as follows.

In the authentication device 400, the random number generation unit 404 generates a random number and transmits it to the password generation device 300 via the random number output unit 405.

In the password generation device 300, the random number from the random number output unit 405 is input to the random number input unit 305,
It is passed to the authentication password calculation unit 306.

On the other hand, the user has the common password input unit 3
The common password is input from 01 and the verifier key is input from the verifier key input unit 302. The registration password calculation unit 303 calculates the registration password from the common password and the verifier key, and passes it to the authentication password calculation unit 306.

The authentication password calculation unit 306 calculates the authentication password from the registration password and the received random number, and transmits it to the authentication device 400 via the authentication password output unit 307.

In the authentication device 400, the verification password (authentication password) is the verification password input section 401.
To enter. The verification password input unit 401 passes the ID information input together with the verification password to the registration password storage unit 403, and also passes the verification password to the verification password authentication unit 407. In the registration password storage unit 403, the registration password corresponding to the ID information is selected and passed to the verification password calculation unit 406.

On the other hand, in the random number generation unit 404, the random number is transmitted to the password generation device 300 via the random number output unit 405, and at the same time passed to the verification password calculation unit 406. Upon receiving the random number, the verification password calculation unit 406 calculates the verification password from the registration password from the registration password storage unit 403 and the random number from the random number generation unit 404, and passes it to the verification password authentication unit 407.

Then, the verification password authentication unit 407.
Then, the verification password passed from the verification password input unit 401 and the verification password passed from the verification password calculation unit 406 are compared to determine whether or not the user is correct. At this time, the verification password passed from the verification password calculation unit 406 is calculated by the verification password calculation unit 406 based on the registration password registered in advance by the user, and is a legitimate password. is there. Then, the verification password passed from the verification password input unit 401 is a password that should have been directly transmitted from a legitimate user unless there is any particular problem. Therefore, the verification passwords are compared with each other, and if they match with each other, the user is determined to be an authorized user.

The authentication result of the verification password authentication unit 407 is passed to the authentication result output unit 408 and displayed.

[Effect] According to the present embodiment, the registration password calculation unit 303 performs the first-step conversion based on the common password and the verifier key managed by the user, and further, the registration password and the random number. Since the authentication password calculation unit 306 performs the second-stage conversion based on the above and transmits it to the authentication device 400, it is almost impossible to determine the common password and the verifier key from the authentication password. Furthermore, since the authentication password changes every time with a random number,
Even if the authentication password is stolen on the communication path, the authentication password cannot be used as it is. Since the authentication password is transformed by a random number and changes every time, it is almost impossible to restore it. As a result, the security against theft and the like on the communication path is significantly improved.

[Modification] In each of the above embodiments, the verifier key input section may be connected to the verifier side to input the verifier key sent from the verifier side. As a result, the verifier itself generates and sends the verifier key, so that the user does not need to manage the verifier key and convenience is improved.

[0088]

As described above, according to the password generation device and the authentication device, the password generation method and the authentication method according to the present invention,
A password corresponding to each verifier can be generated, and the security against theft on the communication path is significantly improved.

[Brief description of drawings]

FIG. 1 is a configuration diagram showing a password generation device according to a first embodiment of the present invention.

FIG. 2 is a configuration diagram showing a password generation device according to a second embodiment of the present invention.

FIG. 3 is a configuration diagram showing a password generation device according to a third embodiment of the present invention.

FIG. 4 is a configuration diagram showing an authentication device according to a third embodiment of the present invention.

[Explanation of symbols]

100: Password generation device 101: Common password input section 102: Verifier key input section 103: Verifier password input section 104: Common password authentication part 105: Verifier password selection unit 106: Verifier password storage unit 107: Verifier password output section 200: Password generation device 201: Common password input section 202: Verifier key input section 203: Verifier password calculator 204: Verifier password output section 300: Password generation device 301: Common password input part 302: Verifier key input section 303: Password calculator for registration 304: Password output section for registration 305: Random number input section 306: Authentication password calculation unit 307: Authentication password output section 400: Authentication device 401: Verification password input section 402: Password input section for registration 403: Registration password storage unit 404: Random number generator 405: Random number output unit 406: Verification password calculation unit 407: Verification password authentication unit 408: Authentication result output unit

   ─────────────────────────────────────────────────── ─── Continued front page    (72) Inventor Shigeru Fukunaga             1-7-12 Toranomon, Minato-ku, Tokyo Oki Electric             Industry Co., Ltd. F-term (reference) 5B085 AE03 AE08 BA06 BG02                 5J104 AA07 KA01 KA21 NA05 PA07

Claims (12)

[Claims] 1. A password generating device for generating a password for authenticating a verifier, wherein a common password authenticating means for authenticating a common password managed by a user and a verifier key for specifying the verifier are input. Verifier key input means, verifier password storage means for storing the password corresponding to the verifier in association with the verifier key, and the verifier based on the verifier key input by the verifier key input means And a verifier password selecting means for selecting a password corresponding to the above from the verifier password storing means. 2. A password generating device for generating a password for authenticating a verifier, a common password input means for inputting a common password managed by a user, and a verifier key for specifying the verifier. It is provided with verifier key input means and verifier password calculation means for calculating a password corresponding to the verifier from the common password and verifier key input by the common password input means and verifier key input means. A password generation device characterized by the above. 3. The password generation device according to claim 1, wherein the verifier key input means inputs a verifier key sent from a verifier. 4. A password generation device for generating a password for authenticating a verifier, each time for each verifier based on a common password managed by the user and a random number received from each verifier. A password generation device comprising an authentication password calculation means for calculating different authentication passwords. 5. The password generation device according to claim 4, wherein a common password input means for inputting a common password managed by a user and a verifier key input for inputting a verifier key for specifying the verifier. Means and a registration password calculation means for calculating a password corresponding to the verifier from the common password and verifier key input by the common password input means and verifier key input means, based on the common password Based on the registration password calculated by the registration password calculation means and the random number received from each verifier, the authentication password calculation means calculates a different authentication password for each verifier each time. Password generation device characterized by. 6. A registration password storage means for storing a password previously registered by a user, a random number generation means for generating a random number, a registration password stored in the registration password storage means, and the random number generation means. A verification password calculation means for calculating a verification password from the random number generated in step 6, an authentication password input from the password generation device according to claim 4 or 5, and a verification password calculated by the verification password calculation means. An authentication device comprising a verification password authentication means for comparing and authenticating. 7. A password generation method for generating a password for authentication to a verifier, wherein a common password authentication step of authenticating a common password managed by a user and a verifier key for specifying the verifier are input. A verifier key input step, a verifier password storage step of storing a password corresponding to the verifier in association with the verifier key, and the verifier based on the verifier key input by the verifier key input means. A verifier password selecting step of selecting a password corresponding to the verifier from the verifier password storage means, and generating a password corresponding to each verifier from a common password possessed by the user. 8. A password generation method for generating a password for authenticating a verifier, a common password input step of inputting a common password managed by a user, and a verifier key for specifying the verifier. The user includes a verifier key input step and a verifier password calculation step of calculating a password corresponding to the verifier from the common password and verifier key input by the common password input means and the verifier key input means described above. A password generation method characterized by generating a password corresponding to each verifier from the common password possessed by. 9. The password generation method according to claim 7, wherein the verifier key input step inputs a verifier key sent from a verifier. 10. A password generation method for generating a password for authentication to a verifier, wherein each verifier is executed every time based on a common password managed by the user and a random number received from each verifier. A password generation method comprising an authentication password calculation step of calculating different authentication passwords. 11. The password generation method according to claim 10, wherein a common password input step of inputting a common password managed by the user, and a verifier key input of inputting a verifier key identifying the verifier. And a registration password calculating step of calculating a password corresponding to the verifier from the common password and the verifier key input by the common password input means and the verifier key input means, based on the common password. Based on the registration password calculated in the registration password calculation step and the random number received from each verifier, a different authentication password is calculated for each verifier in the authentication password calculation step each time. Password generation method characterized by. 12. A registration password storing step of storing a password previously registered by a user, a random number generating step of generating a random number, a registration password stored in the registration password storing step, and the random number generating step. A verification password calculation step of calculating a verification password from the random number generated in step 5, an authentication password generated by the password generation method according to the tenth or eleventh invention, and a verification password calculated in the verification password calculation step. An authentication method comprising: a verification password authentication step of comparing passwords for authentication.