JP2004186913A - User authentication method, information terminal and information storage medium - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a method of individual authentication preventing authentication data from being eavesdropped during the authentication without the need of an additional device, and information terminal with excellent handleability without the need of inputting the authentication data many times. <P>SOLUTION: The information terminal is provided with an input means for receiving the authentication data of a user, a ciphering means for ciphering data inputted as the authentication data immediately by a prescribed procedure and abandoning original data, a ciphered data storage means for storing the ciphered data, and a control means for sending the data including newly ciphered data or valid ciphered data already stored in the ciphered data storage means to an information storage medium, receiving an authentication result in the medium and abandoning the ciphered data stored in the ciphered data storage means in the case that the authentication is a failure. <P>COPYRIGHT: (C)2004,JPO&NCIPI

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention relates to a method for storing owner authentication data in a medium such as a magnetic card, an IC card, a USB token, and the like. How to store data.
[0002]
[Prior art]
Conventionally, a personal identification number or the like is registered as personal authentication data for authenticating the owner of a medium such as a magnetic card, an IC card, or a USB token, and when the user uses the personal data, the authentication data is input and compared. When the results match, the user is authenticated.
[0003]
At this time, if authentication is required several times (when it is necessary to input authentication data on a regular basis) rather than ending with one authentication, the authentication data entered for the first time is stored in the terminal In addition, when authentication data is needed, authentication may be performed using stored data instead of having the user input the authentication data many times. Since the stored data is important data, when storing it, a method of encrypting and storing it is conceivable. However, the authentication data entered for the first authentication of the user is transmitted to the medium, and the value is stored. Only when the authentication has been performed, an apparatus or system has been put to practical use in which the medium can be used assuming that the user has been authenticated and the authentication data is stored for later authentication. In addition, there have been proposed various devices or systems provided with means for reducing the trouble of inputting authentication data by a user, or at the same time, preventing leakage of authentication data input by a user.
[0004]
Patent Literature 1 discloses a method of accessing a portable information storage medium, a user terminal, and a portable information storage medium that can omit a password input at the time of personal authentication as necessary and can prevent theft of a password. And a system are disclosed. Before inserting and using the IC card in the transaction terminal, the user can perform user authentication by selecting whether or not to omit the password input together with the password input by the holder-specific verification device, If the user selects to omit subsequent password entry, the IC card records a status flag indicating that the password has been verified in a portion of the nonvolatile memory area in the IC card, and the IC card is inserted into the transaction terminal to perform a transaction operation. When the transaction is started, the contents of this status flag are sent from the IC card to the transaction terminal to inform the transaction terminal whether it is necessary to request a password on the transaction terminal and the password input on the transaction terminal can be omitted. It is a system that did. Transaction processing can be performed on a transaction terminal without entering a password, which is convenient and prevents password information from being leaked through a transaction terminal that has been crafted for eavesdropping. This has the effect that it can be avoided.
[0005]
Patent Document 2 discloses a portable telephone equipped with an IC card and a personal computer keyboard provided with a terminal for connecting the portable telephone. The personal identification number is input by operating the number buttons of the telephone, the personal identification processing is performed inside the IC card, and only the signal indicating the authentication processing result is transmitted from the mobile phone to the personal computer, so that the personal identification number data is taken into the personal computer. A log-in system has been disclosed in which the security is enhanced by eliminating the possibility of unauthorized reading of personal identification number data at the time of personal authentication processing by preventing the identification number from being read.
[0006]
Patent Document 3 discloses an IC card that can communicate with a reader / writer in a contactless manner in order to simplify the authentication of the owner of the contactless IC card and to prevent leakage of the PIN caused by peeping by a third party when entering the PIN. , A non-contact IC card, and an authentication auxiliary device capable of non-contact communication, and the communication between the non-contact IC card and the authentication auxiliary device in response to an owner confirmation command from a reader / writer for the non-contact IC card. A non-contact IC card system which achieves the above-mentioned object by mutually authenticating with each other and returning an authentication result to a reader / writer is disclosed.
[0007]
In Patent Document 2 and Patent Document 3, the authentication process itself of a person who intends to use the system is performed by an authentication auxiliary device (in Patent Document 2, an IC card inserted into a mobile phone) storing authentication information of the owner. By sending only the authentication result as a signal to the system (reader / writer or personal computer) to be used, it is not necessary for the system to be used to temporarily capture the user's credential information. It is common to prevent leaks. The system disclosed in Patent Literature 1 also performs identity verification using a holder-specific verification device separately from the transaction terminal, and writes a flag that allows the holder-specific verification device to omit subsequent authentication, thereby providing a transaction terminal. There is a common feature in that the authentication data input described above is not required. In such a mechanism, there is a restriction that another device such as an authentication auxiliary device must be provided at the time of login.
[0008]
[Patent Document 1]
JP-A-9-259235 (page 2-7, FIG. 1-7)
[Patent Document 2]
JP-A-2002-175281 (pages 2-4, FIG. 1-2)
[Patent Document 3]
JP-A-2002-117378 (page 2-3, FIG. 1-2)
[0009]
[Problems to be solved by the invention]
While the authentication data input to the terminal is transmitted to the medium and the authentication is performed, the authentication data exists in the terminal. When the authentication is performed, the authentication data is encrypted and stored as a genuine one. When the authentication fails, the authentication data is wrong, so the data is deleted and the authentication data is input again. In other words, while the authentication data is being authenticated by the medium, the data before the encryption exists in the terminal, so that a malicious third party may eavesdrop.
[0010]
The present invention has been made in view of such a problem, and does not require an additional device, and does not eavesdrop on authentication data during authentication. It is an object to provide a user-friendly information terminal device that does not need to be performed.
[0011]
[Means for Solving the Problems]
The authentication data input to the terminal is encrypted and stored as soon as it is input.
Then, the authentication data is transmitted to the medium. As a result of verification on the medium, if the authentication data is correct, the authentication data is stored in an encrypted state as it is, and if incorrect, the encrypted authentication data is discarded and input again.
[0012]
According to a first aspect of the present invention, there is provided a portable information recording medium having a function of receiving authentication data from the outside and performing personal authentication by comparing the authentication data with the owner's authentication data stored inside the portable information recording medium. A method of user authentication in a terminal device that performs a required process using an information recording medium,
Upon receiving the user's authentication data input, the terminal device immediately encrypts the data in a predetermined procedure, discards the data input as the authentication data, and retains only the encrypted data in the terminal device. The encrypted data is sent to a portable information recording medium. In the portable information recording medium, the received data is decrypted by a predetermined procedure, and authentication is performed as to whether or not the owner is the owner. The gist of the present invention is to include a procedure for replying to the terminal device.
[0013]
Even if the authentication data is correct, if the authentication data is encrypted and stored immediately after the input, the possibility of eavesdropping during the verification of the authentication data on the medium is eliminated.
[0014]
According to a second aspect of the present invention, there is provided a portable information device having a function of receiving authentication data encrypted by a predetermined procedure from the outside and comparing the received authentication data with the authentication data of the owner stored in the inside to perform personal authentication. An information terminal device for performing a required process using a recording medium, wherein a first aspect of the information terminal device includes:
The information terminal device includes an input unit that receives authentication data of a user, an encryption unit that immediately encrypts data input as authentication data in a predetermined procedure and discards the original data, and a data including the encrypted data. Control means for sending the authentication data to the information storage medium and receiving the authentication result in the medium, when the user inputs the authentication data, the data input as the authentication data is discarded and the encrypted data is deleted. The authentication request command for the information storage medium is sent to a portable information recording medium.
[0015]
A preferred second aspect of the second invention for solving the problem is:
The information terminal device includes an input unit that receives user authentication data, an encryption unit that immediately encrypts data input as authentication data in a predetermined procedure and discards the original data, and an encryption unit that stores the encrypted data. The data storage means sends newly encrypted data or data including valid encrypted data already stored in the encrypted data storage means to the information storage medium, receives an authentication result in the medium, and fails in authentication. And control means for discarding the encrypted data stored in the encrypted data storage means, wherein once the valid authentication data is input, the subsequent input processing is unnecessary. Things.
[0016]
According to a third aspect of the present invention, an authentication data encrypted by a predetermined procedure is received from the outside, and after decrypting the authentication data, the authentication data is compared with the owner's authentication data stored therein to perform the personal authentication. It is a portable information recording medium having a function.
[0017]
BEST MODE FOR CARRYING OUT THE INVENTION
Hereinafter, embodiments of the present invention will be described with reference to the drawings. In the following description, an IC card is used as a portable information recording medium, an IC card reader / writer is connected, and a system in which an application program using the IC card is installed is used as the information terminal device 1 according to the present invention. One embodiment will be described. FIG. 1 is a diagram illustrating an overall configuration of an information terminal device 1 according to an embodiment of the present invention. The information terminal device 1 includes a personal computer 10 to which an IC card reader / writer 20 is connected, and a control unit 11 which is an application program for using the IC card 5 is provided.
[0018]
FIG. 3 is a diagram illustrating the internal structure of the IC card 5. The IC card 5 is configured such that an input / output interface 51, a CPU 52, a RAM 53, a ROM 54, and an EEPROM 55 which is a nonvolatile memory are integrated into one chip and fixed to a base substrate. The interface 51 may be a contact type or a non-contact type. In any case, the interface 51 is a circuit that receives an electric signal sent from an external device such as a personal computer and takes it into the CPU 52. The ROM 54 stores a program for executing functions provided in the IC card 5 as commands. When receiving the command from the external device, the CPU 52 calls the command from the ROM 54 and executes the command. Normally, the IC card 5 records important data such as personal authentication data and point data, and an external device sends a command such as a read command or an update command for rewriting data to the IC card. Use an IC card. Since access to the stored data of the IC card always takes the form of executing a command through the CPU 52, higher security is obtained as compared with a magnetic card or the like. The non-volatile memory 55 can store rewritable data that does not disappear even when power supply is cut off.
[0019]
FIG. 2 is a flowchart illustrating an operation when the control unit 11 performs an authentication process on an IC card. The operation of the control means 11 is shown on the left side of FIG. The right side shows the operation of the IC card. This will be described below with reference to FIG.
[0020]
When the IC card 5 is inserted into the card reader / writer 20 provided in the personal computer, the card reader / writer 20 supplies power to the IC card 5 and issues an interrupt signal indicating that the card has been inserted. The control means 11 transmits a reset signal to the card (S10). Upon receiving the reset signal, the CPU 52 of the IC card 5 performs necessary initialization and returns a reset response (S20). The reset response includes information on the type and operating characteristics of the card. Next, in order to send the authentication data to the card 5, the control means 11 displays a user interface for prompting the user to input the authentication data on a personal computer screen, and accepts data input by the operator from the keyboard or the like as the authentication data (S11). This data is immediately encrypted with a predetermined encryption method and a predetermined encryption key, and stored in a predetermined memory area in the personal computer 10 (S12). At the same time, the encrypted data is sent to the card 5 as authentication request data (S13). The CPU 52 decrypts the received encrypted data (S22). The encryption method is fixed, and the encryption key is determined in advance by an appropriate method. The CPU 52 compares the authentication information of the card recorded in a certain area of the nonvolatile memory 55 with the decrypted authentication data to verify whether valid authentication data has been sent (S23), and a result (OK or NG) Is returned to the personal computer 10 (S24).
[0021]
If the result is NG, the control means 11 discards the encrypted data stored in step S12 because the authentication data has an error and was not accepted by the card (S14), and again authenticates the operator. The process returns to step S11 to receive data input. On the other hand, the card 5 returns to the authentication data waiting state (S21) to receive the authentication data from the personal computer again.
[0022]
If the result is OK, the card 5 changes the state of the IC card to a state in which subsequent application operations can be executed. That is, the key is unlocked for the application by changing a status bit indicating the open / closed state of the key recorded and held in a specific area of the memory area in the IC card (S25). Then, it is in a state of waiting for an application command (S26). On the other hand, if the result is OK, the control means 11 starts the processing of the application program executed on the personal computer. Among them, by sending a command to the IC card 5, it is possible to refer to and update the data recorded on the IC card, or to send input data to use the function of the IC card and to receive the conversion result. In such a case, the IC card 5 may again request the authentication data of the operator in order to ensure safety. In this case, the control unit 11 can resend the encrypted data stored in step S12 without requesting the operator to input the authentication data again.
[0023]
【The invention's effect】
As described above in detail, according to the present invention, since the input authentication data is immediately encrypted and stored irrespective of whether the data is valid or not, the leakage of important authentication data can be prevented. It works. In addition, since no special device is required for this purpose, it is possible to provide a special effect that high security can be provided at low cost. Further, when the authentication is successful, the encrypted authentication data is stored in the memory, so that it is not necessary for the user to input the authentication data many times.
[Brief description of the drawings]
FIG. 1 is a diagram illustrating an overall configuration of an information terminal device 1 according to an embodiment of the present invention.
FIG. 2 is a flowchart illustrating an operation when performing authentication processing on an IC card.
FIG. 3 is an explanatory diagram of a configuration of an IC card 5;
[Explanation of symbols]
5 IC card 10 Personal computer body 11 Control means 20 IC card reader / writer 51 Input / output interface 52 CPU
53 RAM
54 ROM
55 EEPROM

Claims (4)

Accepts authentication data from the outside, compares it with the owner's authentication data stored inside, and compares it with a portable information recording medium equipped with a function to perform personal authentication, and accepts the authentication data from the outside with the owner's authentication data stored inside A method of user authentication in a terminal device that performs required processing using a portable information recording medium having a function of performing personal authentication,
Upon receiving the user's authentication data input, the terminal device immediately encrypts the data in a predetermined procedure, discards the data input as the authentication data, and retains only the encrypted data in the terminal device. The encrypted data is sent to a portable information recording medium. In the portable information recording medium, the received data is decrypted by a predetermined procedure, and authentication is performed as to whether or not the owner is the owner. A method of user authentication, comprising a step of replying to the terminal device. Information for performing required processing using a portable information recording medium having a function of receiving authentication data encrypted according to a predetermined procedure from the outside and authenticating the personal data by comparing the authentication data with the owner's authentication data stored inside. A terminal device,
The information terminal device includes an input unit that receives authentication data of a user, an encryption unit that immediately encrypts data input as authentication data in a predetermined procedure and discards the original data, and a data including the encrypted data. And control means for sending the authentication data to the information storage medium and receiving the authentication result in the medium. When the user inputs the authentication data, the data input as the authentication data is discarded and the encrypted data is transferred to the portable device. An information terminal device for sending to a possible information recording medium. Information for performing required processing using a portable information recording medium having a function of receiving authentication data encrypted according to a predetermined procedure from the outside and authenticating the personal data by comparing the authentication data with the owner's authentication data stored inside. A terminal device,
The information terminal device includes an input unit that receives user authentication data, an encryption unit that immediately encrypts data input as authentication data in a predetermined procedure and discards the original data, and an encryption unit that stores the encrypted data. The data storage means sends newly encrypted data or data including valid encrypted data already stored in the encrypted data storage means to the information storage medium, receives an authentication result in the medium, and fails in authentication. And control means for discarding the encrypted data stored in the encrypted data storage means, wherein once the valid authentication data is input, the subsequent input processing is unnecessary. Information terminal device. A portable information recording medium having a function of receiving authentication data encrypted by a predetermined procedure from the outside, decrypting the decrypted authentication data, and comparing the decrypted authentication data with the owner's authentication data stored therein to perform personal authentication.

Images