JP2004320174A - Authentication system, authentication apparatus, and authentication method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To solve the problem that it is impossible to stop the illegitimate access which uses the leaked authentication information if the authentication information of a legitimate reception terminal is once leaked. <P>SOLUTION: A first session key storage means 110 and a second session key storage means 212 respectively store a first session key 109 and a second session key 211 generated when mutual authentication is established between a reception terminal 1 and a transmission terminal 2 until succeeding mutual authentication takes place, a first discrimination means 215 compares an encrypted third session key 111 stored in the first session key storage means 110 at the preceding mutual authentication with an encrypted fourth session key 213 stored in the second session key storage means 212 at the preceding mutual authentication and when both the values differ from each other, corresponding unique identification information 101 stored in an identification information searching means 204 is deleted. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention relates to an authentication system, an authentication method, and the like used for a system for transmitting and receiving contents via a communication network.
[0002]
[Prior art]
Conventional security devices for communication networks perform mutual authentication between a transmitting terminal that transmits content and a receiving terminal that receives content to confirm that they are legitimate terminals, and obtain a session key obtained at that time. In some cases, a content key used for encrypting the content is transmitted and received using the URL to distribute the content while maintaining security. (For example, see Patent Document 1).
[0003]
Hereinafter, a conventional security device for a communication network will be described with reference to the drawings.
[0004]
FIG. 4 is a block diagram of a conventional security device for a communication network.
[0005]
In FIG. 4, 41 is a receiving terminal, 410 is a first control means, 411 is a first mutual authentication means, 4101 is unique identification information, 4102 is a first unique encryption key, 4103 is a first random number generating means 4104 is a first encryption means, 4105 is a first comparison means, 4106 is a second encryption means, 4107 is a first arithmetic means, 4108 is a third encryption means, 4109 is a first session Key, 42 a transmitting terminal, 420 a second control means, 421 a second mutual authentication means, 421 a master key, 4202 a second unique encryption key, 4203 a fifth encryption means, 4205 a A sixth encryption unit, 4206 is a second random number generation unit, 4207 is a seventh encryption unit, 4208 is a second comparison unit, 4209 is a second calculation unit, 4210 is an eighth encryption unit, 4211 is the second set. Is a ® down key.
[0006]
The first control means 410 controls the authentication processing in the receiving terminal 41, and the first mutual authentication means 411 is constituted by means denoted by reference numerals 4103 to 4108, and executes the mutual authentication processing described in detail below. .
[0007]
The second control means 420 controls the authentication processing in the transmitting terminal 42, and the second mutual authentication means 421 is constituted by means denoted by reference numerals 4205 to 4210, and executes the mutual authentication processing described in detail below. .
[0008]
The receiving terminal 41 performs the following mutual authentication with the transmitting terminal 42 as shown in the time chart of FIG. 5 in order to obtain a decryption key for decrypting the encrypted content transmitted from the transmitting terminal 42, for example. .
[0009]
The receiving terminal 41 transmits the unique identification information 4101 held by the receiving terminal 41 to the transmitting terminal 42 (Step 501).
[0010]
The transmitting terminal 42 generates the second unique encryption key 4202 by encrypting the received unique identification information 4101 with the master key 4201 using the fifth encryption means 4203.
[0011]
Next, the receiving terminal 41 generates a random number RN1 by the first random number generating means 4103 and transmits the random number RN1 to the transmitting terminal 42 (step 502), and also encrypts the random number RN1 by the first encrypting means 4104 with the first unique encryption. A value RN1 'is generated by encryption with the key 4102. On the other hand, the transmitting terminal 42 uses the sixth encryption unit 4205 to encrypt the random number RN1 transmitted from the receiving terminal 41 with the second unique encryption key 4202 to generate a numerical value RN1 ″. When requesting the transmitting terminal 42 to transmit the generated numerical value RN1 ″ and receiving the transmission of the numerical value RN1 ″ (step 503), the first comparing unit 4105 generates the numerical value RN1 ″ transmitted from the transmitting terminal 42 in advance. The calculated numerical value RN1 'is compared.
[0012]
As a result of this comparison, when the numerical value RN1 'is equal to the numerical value RN1 ", the receiving terminal 41 determines that the first unique encryption key 4102 held by the receiving terminal 41 and the second unique encryption key 4202 generated by the transmitting terminal 42. Are equal, that is, the receiving terminal 41 and the transmitting terminal 42 share the unique encryption key.
[0013]
Next, the receiving terminal 41 requests the transmitting terminal 42 to transmit the random number RN2 (step 504). In response to the request from the receiving terminal 41, the transmitting terminal 42 generates a random number RN2 by the second random number generating means 4206 and transmits it to the receiving terminal 41 (step 505). Encrypt with the second unique encryption key 4202 to generate a numerical value RN2 '.
[0014]
On the other hand, the receiving terminal 41 receives the random number RN2 transmitted from the transmitting terminal 42, encrypts the random number RN2 with the first unique encryption key 4102 by the second encryption means 4106, and generates a numerical value RN2 ″. By transmitting the generated numerical value RN2 ″ to the transmitting terminal 42 (step 506), the transmitting terminal 42 compares the numerical value RN2 ′ and the numerical value RN2 ′ with the numerical value RN2 ′ generated in advance by the second comparing means 4208. Are equal, the value of the first unique encryption key 4102 held by the receiving terminal 41 is equal to the value of the second unique encryption key 4202 generated by the sending terminal 2, that is, the unique encryption key is The transmission terminal 42 recognizes that it is shared.
[0015]
Mutual authentication is deemed to have been established upon mutual recognition that the unique encryption key has been shared. After the mutual authentication is established, the receiving terminal 41 performs a predetermined operation on the random numbers RN1 and RN2 by the first operation unit 4107, and outputs the operation result by the third encryption unit 4108 to the first unique The first session key 4109 is generated by encrypting with the encryption key 4102. Similarly, the transmitting terminal 42 performs the same operation as the first operation unit 4107 on the random number RN1 and the random number RN2 by the second operation unit 4209, and outputs the operation result by the eighth encryption unit 4210 to the second operation unit 4107. The second session key 4211 is generated by encrypting with the unique encryption key 4202.
[0016]
Using the two session keys generated as described above, for example, the content key for decrypting the encrypted content is encrypted with the second session key 4211 generated from the two random numbers, and the receiving terminal 41 Then, the content key can be received from the transmission terminal 42 more securely by decrypting it with the first session key 4109 at the reception terminal 41 (step 507).
[0017]
[Patent Document 1]
JP-A-10-79732
[0018]
[Problems to be solved by the invention]
However, if the unique identification information and the unique encryption key used for performing the mutual authentication are leaked, for example, if the unique identification information and the unique encryption key 4102 have the same unique identification information and unique encryption key as the formal unique identification information 4101 and the unique encryption key 4102, respectively. If there is a receiving terminal 41 ′ (not shown), the transmitting terminal 42 cannot distinguish between the receiving terminal 41 ′ and the legitimate transmitting terminal 41 by the above mutual authentication.
[0019]
Therefore, there is a possibility that the contents of the transmitting terminal 42 are accessed from the receiving terminal 41 '.
[0020]
The present invention solves the above-mentioned conventional problems. Even when a complete copy of all information including the unique identification information and the unique encryption key of the receiving terminal or the storage medium attached to the receiving terminal exists, Another object of the present invention is to provide an authentication system, an authentication method, and the like with a high security level that can prevent access from a receiving terminal having the unique identification information to a transmitting terminal.
[0021]
[Means for Solving the Problems]
In order to achieve the above object, a first aspect of the present invention is an authentication system in which a first device and a second device authenticate each other as communication partners,
A first data output unit that outputs data to the second device; a first data obtaining unit that obtains data output from the second device; and a first data obtaining unit that obtains data output from the second device. First data processing means for processing at least the data obtained by the means,
A second data output unit that outputs data to the first device; a second data acquisition unit that obtains data output from the first device; and a second data acquisition unit that acquires data output from the first device. Means for processing at least the data obtained by the means, and
As an authentication operation,
The first data output unit of the first device outputs authentication data for authenticating the second device as a communication partner, and the first data processing unit performs a first authentication based on at least the authentication data. Generate historical data,
The second data acquisition unit of the second device acquires the authentication data, and the second data processing unit performs a predetermined process on the authentication data to perform processed authentication data, and based on at least the authentication data. Generating second authentication history data, wherein the second data output means outputs the processed authentication data to the first device;
The first data acquisition unit of the first device acquires the processed authentication data, and the first data processing unit sets the second device as the communication partner based on at least the processed authentication data. Authenticate,
When the authentication operation is performed two or more times between the first device and the second device,
By comparing the second authentication history data in the past authentication with the first authentication history data, any one of the first device and / or the second device in the latest authentication is the first device in the past authentication. And / or to determine if it is the same as the second device,
If the result of the determination is the same, the first device and the second device in the latest authentication are finally authenticated as communication partners with each other.
[0022]
In a second aspect of the present invention, the first data acquisition unit of the first device acquires the second authentication history data in past authentication from the second device,
The first data processing means compares the first authentication history data of the first data processing means with the second authentication history data corresponding to the acquired data, and when both are the same, An authentication system according to a first aspect of the present invention for finally authenticating a second device as the communication partner.
[0023]
In a third aspect of the present invention, the second device is a plurality of devices each assigned a predetermined ID,
The first data processing means of the first device is an authentication system according to a second aspect of the present invention in which a specific device is identified from the plurality of second devices by the ID, and is a target of the authentication.
[0024]
In a fourth aspect of the present invention, the second data acquisition unit of the second device acquires the first authentication history data in past authentication from the first device,
The second data processing unit compares the second authentication history data of the second data processing unit with the first authentication history data corresponding to the acquired data, and when both are the same, An authentication system according to a first aspect of the present invention for finally authenticating a first device as the communication partner.
[0025]
In a fifth aspect of the present invention, the first device is a plurality of devices each assigned a predetermined ID,
The second data processing means of the second device is an authentication system according to a fourth aspect of the present invention in which a specific device is identified from the plurality of first devices by the ID, and is used as an authentication target.
[0026]
In a sixth aspect of the present invention, the authentication operation includes:
The second data output means of the second device outputs authentication data for authenticating the first device as a communication partner,
The first data acquisition unit of the first device acquires the authentication data, and the first data processing unit performs a predetermined process on the acquired authentication data to generate processed authentication data. And generating authentication history data based on the authentication data, the first data output means outputs the processed authentication data to the second device,
The second data acquisition unit of the second device acquires the processed authentication data, and the second data processing unit sets the first device as the communication partner based on at least the processed authentication data. Authenticate,
The authentication system according to any one of the first to fifth aspects of the present invention further including an operation.
[0027]
In a seventh aspect of the present invention, the first device and the second device have a common encryption key,
The first data processing means of the first device or the second data processing means of the second device generates the processed authentication data by encrypting the authentication data with the encryption key,
The first data processing unit of the first device or the second data processing unit of the second device encrypts the authentication data with the encryption key, and compares the processed data with the processed authentication data. The authentication system according to the first or sixth aspect of the present invention performs the authentication operation.
[0028]
Further, in the eighth invention, the first data processing means of the first device or the second data processing means of the second device may be configured to encrypt the authentication data with the encryption key, thereby obtaining the authentication history. It is a seventh authentication system of the present invention for generating data.
[0029]
In a ninth aspect of the present invention, after the completion of the final authentication, the first data output means of the first device can output predetermined contents to the second device. The authentication system according to any one of the sixth and seventh aspects of the present invention.
[0030]
According to a tenth aspect of the present invention, after the completion of the final authentication, the second data output means of the second device can output predetermined contents to the first device. The authentication system according to any one of the sixth and seventh aspects of the present invention.
[0031]
An eleventh invention is characterized in that the first data processing means of the first device or the second data processing means of the second device continuously generates the authentication history data having the same content, A second or fourth authentication system of the present invention in which the operation of generating the authentication history data is redone.
[0032]
A twelfth aspect of the present invention is the authentication system according to the third or fifth aspect of the present invention, wherein when the result of the determination is not the same, the ID is treated as invalid thereafter.
[0033]
A thirteenth invention is a first device for authenticating a predetermined second device as a communication partner,
First data output means for outputting data to the second device, first data acquisition means for acquiring data output from the second device, and data acquired by the first data acquisition means. A second data output unit that outputs data to the first device; and a second data output unit that obtains data output from the first device. 2 data acquisition means, and a second data processing means for processing at least the data acquired by the second data acquisition means,
As an authentication operation,
The first data output unit of the first device outputs authentication data for authenticating the second device as a communication partner, and the first data processing unit performs a first authentication based on at least the authentication data. Generate historical data,
The second data acquisition unit of the second device acquires the authentication data, and the second data processing unit performs a predetermined process on the authentication data to perform processed authentication data, and based on at least the authentication data. Generating second authentication history data, wherein the second data output means outputs the processed authentication data to the first device;
The first data acquisition unit of the first device acquires the processed authentication data, and the first data processing unit sets the second device as the communication partner based on at least the processed authentication data. Authenticate,
When the authentication operation is performed two or more times with the second device,
The first data acquisition unit acquires the second authentication history data in past authentication from the second device,
The first data processing means compares the first authentication history data of the first data processing means with the second authentication history data corresponding to the acquired data, and when both are the same, The first device that finally authenticates the second device as the communication partner.
[0034]
The fourteenth invention is a first device for authenticating a predetermined second device as a communication partner,
First data output means for outputting data to the second device, first data acquisition means for acquiring data output from the second device, and data acquired by the first data acquisition means. A second data output unit that outputs data to the first device; and a second data output unit that obtains data output from the first device. 2 data acquisition means, and a second data processing means for processing at least the data acquired by the second data acquisition means,
As an authentication operation,
The second data output means of the second device outputs authentication data for authenticating the first device as a communication partner,
The first data acquisition unit of the first device acquires the authentication data, and the first data processing unit performs a predetermined process on the acquired authentication data to generate processed authentication data. And generating authentication history data based on the authentication data, the first data output means outputs the processed authentication data to the second device,
The second data acquisition unit of the second device acquires the processed authentication data, and the second data processing unit sets the first device as the communication partner based on at least the processed authentication data. Authenticate,
When the authentication operation is performed two or more times with the second device,
The first data acquisition unit acquires the second authentication history data in past authentication from the second device,
The first data processing means compares the first authentication history data of the first data processing means with the second authentication history data corresponding to the acquired data, and when both are the same, The first device that finally authenticates the second device as the communication partner.
[0035]
In a fifteenth aspect of the present invention, the second device is a plurality of devices each assigned a predetermined ID,
The first data processing means is a first device according to a thirteenth or fourteenth aspect of the present invention, in which a specific one is identified from the plurality of second devices by the ID, and the authentication target is the target.
[0036]
Further, a sixteenth aspect of the present invention has a common encryption key with the second device,
The first data processing means generates the processed authentication data by encrypting the authentication data with the encryption key, and encrypts the authentication data with the encryption key. A thirteenth or fourteenth first device of the present invention that performs the authentication operation by collating with processed authentication data.
[0037]
A seventeenth aspect of the present invention is the first apparatus according to the thirteenth or fourteenth aspect, wherein the first data processing means generates the authentication history data by encrypting the authentication data with the encryption key. It is.
[0038]
An eighteenth aspect of the present invention is the device according to the thirteenth or fourteenth aspect of the present invention, wherein after the completion of the final authentication, the first data output means can output predetermined content to the second device. The first device.
[0039]
In a nineteenth aspect of the present invention, the first data processing means, when the authentication history data having the same content is continuously generated, repeats the operation of generating the authentication history data in the thirteenth or fourteenth book. 1 is a first device of the present invention.
[0040]
In a twentieth aspect of the present invention, when the result of the determination is not the same, the data processing means sets the ID of the second device to be invalid thereafter in the first device of the fifteenth aspect of the present invention. is there.
[0041]
Also, in a twenty-first aspect of the present invention, the first device outputs authentication data for authenticating the second device as a communication partner, and generates first authentication history data based on at least the authentication data.
The second device acquires the authentication data, performs a predetermined process on the acquired authentication data, outputs the processed data to the first device as processed authentication data, and generates second authentication history data based at least on the authentication data. Process and
A step in which the first device authenticates the second device as the communication partner based on at least the processed authentication data;
When authentication is performed two or more times between the first device and the second device,
By comparing the second authentication history data in the past authentication with the first authentication history data, any one of the first device and / or the second device in the latest authentication is the first device in the past authentication. And / or determining whether the device is the same as the device,
When the result of the determination is the same, the first device and the second device in the latest authentication are authentication methods in which the first device and the second device are mutually authenticated as communication partners.
[0042]
In a twenty-second aspect of the present invention, the second device outputs authentication data for authenticating the first device as a communication partner,
The first device acquires the authentication data, performs a predetermined process on the acquired authentication data to generate processed authentication data, and generates authentication history data based on the authentication data; Outputting data to the second device;
The authentication method according to a twenty-first aspect of the present invention, further comprising the step of the second device acquiring the processed authentication data and authenticating the first device as the communication partner based on at least the processed authentication data. .
[0043]
Also, in a twenty-third aspect of the present invention, the first device acquires the second authentication history data in the past authentication from the second device, and the first device owns the second authentication history data corresponding to the acquired data. The authentication method according to the present invention is a twenty-first or twenty-second authentication method of authenticating the second device as the communication partner if the two are the same as compared with the first authentication history data.
[0044]
In a twenty-fourth aspect of the present invention, the second device is a plurality of devices each assigned a predetermined ID,
The first device is an authentication method according to a twenty-third aspect of the present invention, in which a specific device is identified from the plurality of second devices by the ID, and is used as the authentication target.
[0045]
According to a twenty-fifth aspect of the present invention, the second device acquires the first authentication history data in the past authentication from the first device, and corresponds to the acquired first authentication history data corresponding to the acquired data. The authentication method according to the present invention is the authentication method according to the twenty-first or twenty-second aspect of the present invention, wherein the first device is authenticated as the communication partner if the two are the same as compared with the second authentication history data.
[0046]
In a twenty-sixth aspect of the present invention, the first device is a plurality of devices each assigned a predetermined ID,
The second device is an authentication method according to a twenty-fifth aspect of the present invention in which a specific device is identified from the plurality of first devices by the ID, and is used as the authentication target.
[0047]
According to a twenty-seventh aspect of the present invention, in the first device of the thirteenth aspect, a first data output means for outputting data to the second device, and acquiring data output from the second device. A program for causing a computer to function as a first data acquisition unit and a first data processing unit that processes at least the data acquired by the first data acquisition unit.
[0048]
In a twenty-eighth aspect of the present invention, in the first device according to the fourteenth aspect, a first data output unit that outputs data to the second device, and acquires data output from the second device. A program for causing a computer to function as a first data acquisition unit and a first data processing unit that processes at least the data acquired by the first data acquisition unit.
[0049]
A twenty-ninth aspect of the present invention is a recording medium carrying the program of the thirteenth or fourteenth aspect of the present invention, which is a recording medium that can be processed by a computer.
[0050]
BEST MODE FOR CARRYING OUT THE INVENTION
Hereinafter, embodiments of the present invention will be described with reference to the drawings.
[0051]
(Embodiment 1)
FIG. 1 is a configuration diagram of a communication network security device according to Embodiment 1 of the present invention.
[0052]
In FIG. 1, 1 is a receiving terminal, 10 is first control means, 11 is first mutual authentication means, 101 is unique identification information, 102 is a first unique encryption key, and 103 is first random number generating means. , 104 is a first encryption unit, 105 is a first comparison unit, 106 is a second encryption unit, 107 is a first calculation unit, 108 is a third encryption unit, and 109 is a first session. Key, 110 is a first session key storage means, 111 is a third session key, 112 is a fourth encryption means, 2 is a transmitting terminal, 20 is a second control means, and 21 is a second mutual authentication means. , 201 is a master key, 202 is a second unique encryption key, 203 is a fifth encryption unit, 204 is an identification information search unit, 205 is a sixth encryption unit, 206 is a second random number generation unit, 207 is a seventh encryption means, 208 is a second comparison means, 2 9 is a second operation means, 210 is an eighth encryption means, 211 is a second session key, 212 is a second session key storage means, 213 is a fourth session key, 214 is a ninth encryption key Means 215 is a first determination means.
[0053]
The first control means 10 controls the authentication processing in the receiving terminal 1, and the first mutual authentication means 11 is constituted by means denoted by reference numerals 103 to 108, and executes the mutual authentication processing described in detail below. .
[0054]
The second control means 20 controls the authentication processing in the transmitting terminal 2, and the second mutual authentication means 21 is constituted by means denoted by reference numerals 205 to 210, and executes the mutual authentication processing described in detail below. . The means for transmitting and receiving data between the receiving terminal 1 and the transmitting terminal 2 is a well-known technique, and is not shown in the drawings. However, such means is not limited to the first and second data of the present invention as described later. The output unit corresponds to the first and second data acquisition units.
[0055]
The operation of the communication network security device of the present embodiment having the above-described configuration will be described below with reference to the time chart of FIG. 2, and the authentication method of the present invention, the first device, An embodiment of the operation of the second device will be described.
[0056]
The receiving terminal 1 performs the following mutual authentication with the transmitting terminal 2 in order to obtain a decryption key for decrypting the encrypted content transmitted from the transmitting terminal 2, for example.
[0057]
The receiving terminal 1 transmits its own unique identification information 101 to the transmitting terminal 2 (step 301). The transmitting terminal 2 uses the identification information searching means 204 to search whether the unique identification information 101 transmitted from the receiving terminal 1 is registered in advance in order to permit the reception of the content. As a result of the search, if the unique identification number 101 transmitted from the receiving terminal 1 is not registered, the subsequent processing is stopped. As a result of the search, if the unique identification number 101 is registered, the subsequent processing is continued.
[0058]
The transmitting terminal 2 generates the second unique encryption key 202 by encrypting the received unique identification information 101 with the master key 201 using the fifth encryption means 203.
[0059]
Next, the receiving terminal 1 generates a random number RN1 by the first random number generating means 103 and transmits the random number RN1 to the transmitting terminal 2 (step 302). Encrypted with the key 102 to generate a numerical value RN1 '. On the other hand, the transmitting terminal 2 uses the sixth encryption unit 205 to encrypt the random number RN1 transmitted from the receiving terminal 1 with the second unique encryption key 202, and generates a numerical value RN1 ″.
[0060]
The receiving terminal 1 requests the transmitting terminal 2 to transmit the generated numerical value RN1 ″. When the transmitting terminal 2 transmits the numerical value RN1 ″ (step 303), the transmitting terminal 2 transmits the numerical value RN1 ″ by the first comparing unit 105. The numerical value RN1 ″ is compared with a numerical value RN1 ′ generated in advance.
[0061]
As a result of the comparison, when the numerical value RN1 'is equal to the numerical value RN1 ", the receiving terminal 1 determines that the first unique encryption key 102 held by the receiving terminal 1 is equal to the second unique encryption key 202 generated by the sending terminal 2. Are equal, that is, the receiving terminal 1 and the transmitting terminal 2 share the unique encryption key.
[0062]
Next, the receiving terminal 1 requests the transmitting terminal 2 to transmit the random number RN2 (Step 304). In response to the request from the receiving terminal 1, the transmitting terminal 2 generates a random number RN2 by the second random number generating means 206 and transmits it to the receiving terminal 1 (step 305). It encrypts with the second unique encryption key 202 to generate a numerical value RN2 '. On the other hand, the receiving terminal 1 receives the random number RN2 transmitted from the transmitting terminal 2, encrypts the random number RN2 with the first unique encryption key 102 by the second encryption means 106, and generates a numerical value RN2 ″. By transmitting the generated numerical value RN2 ″ to the transmitting terminal 2 (step 306), the transmitting terminal 2 compares the numerical value RN2 ′ and the numerical value RN2 ′ with the numerical value RN2 ′ generated in advance by the second comparing means 208. Are equal, the value of the first unique encryption key 102 held by the receiving terminal 1 and the value of the second unique encryption key 202 generated by the sending terminal 2 are equal, that is, the unique encryption key is The transmitting terminal 2 recognizes that it is shared.
[0063]
The two parties recognize that the above-mentioned unique encryption key is shared, and it is assumed that the mutual authentication has been temporarily established.
[0064]
The operation including the above steps 301 to 306 is the same as the conventional example, but the present embodiment further performs the subsequent operation.
[0065]
The receiving terminal 1 performs a predetermined operation using the random number RN1 and the random number RN2 by the first operation unit 107, and encrypts the operation result with the first unique encryption key 102 by the third encryption unit 108. Then, the first session key 109 is generated and stored in the first session key storage unit 110.
[0066]
On the other hand, the transmitting terminal 2 performs a predetermined operation using the random number RN1 and the random number RN2 by the second operation unit 209, and then transmits the operation result to the second unique encryption key 202 by the eighth encryption unit 210. To generate a second session key 211 and store it in the second session key storage unit 212.
[0067]
The first session key 109 and the second session key 211 are used for, for example, further encrypting and decrypting the content key used for encrypting the content in the transmitting terminal 2 in order to securely transmit the content key to the receiving terminal 1. Used for
[0068]
Next, when the unique identification information 101 transmitted from the receiving terminal 1 is used for the first time, the transmitting terminal 2 determines that all the authentications have been established, and obtains a content key for decrypting the encrypted content, for example. To give permission.
[0069]
On the other hand, if the unique identification information 101 transmitted from the receiving terminal 1 in step 301 has been used in the past, the transmitting terminal 2 generates the first Request transmission of the third session key 111 stored in the session key storage means 110 (step 307).
[0070]
The receiving terminal 1 extracts the third session key 111 from the first session key storage unit 110 and encrypts the third session key 111 with the first unique encryption key 102 by the fourth encryption unit 112. "To the transmitting terminal 2 (step 308).
[0071]
The transmitting terminal 2 extracts the fourth session key 213 generated at the time of the previous mutual authentication performed by the unique identification information 101 of the receiving terminal 1 from the second session key storing unit 212, and the ninth encrypting unit 214 Then, a session key Ks2 ″ generated by encrypting with the second unique encryption key 202 is generated, and compared with the session key Ks1 ″ transmitted from the receiving terminal 1 by the first determination unit 215.
[0072]
If the values of the encrypted session keys Ks1 "and Ks2" are different, the subsequent processing is stopped by the second control means 20, and if there is a content request from the receiving terminal 1, it is rejected. I do.
[0073]
On the other hand, when the values of the encrypted session keys Ks1 ″ and Ks2 ″ are the same, if there is a content request from the receiving terminal 1, this is accepted.
[0074]
Further, when the mutual authentication from the receiving terminal 1 having the same unique identification information 101 is newly performed, the operation including the steps 301 to 308 is performed. At this time, in a step corresponding to step 307, the transmitting terminal 2 requests the receiving terminal 1 for the first session key 109 created between the steps 306 and 307 by the receiving terminal 1. In a step corresponding to step 308, the first session key 109 is transmitted to the transmitting terminal 2 as a session key encrypted by the first unique encryption key 102.
[0075]
As described above, according to the present embodiment, after performing the mutual authentication using the random numbers RN1 and RN2, these random numbers are used for confirming the authentication partner in the next mutual authentication.
[0076]
Therefore, even if information necessary for the mutual authentication of the receiving terminal 1 is leaked and the transmitting terminal 2 is accessed from an unauthorized receiving terminal, the transmitting terminal 2 will Is performed, the unauthorized receiving terminal does not have the random number used for the previous mutual authentication, and therefore, at the time of confirming the authentication partner (steps 307 and 308), it is determined that the unauthorized receiving terminal is not a legitimate receiving terminal. 2 understand.
[0077]
Further, even if the transmitting terminal 2 has been accessed from an unauthorized receiving terminal in a state where the transmitting terminal 2 has never performed mutual authentication with the legitimate receiving terminal 1 in the past, once the legitimate receiving terminal 1 Makes an access, the legitimate receiving terminal 1 does not have the random number used for the previous mutual authentication (which is stored as the session key), and therefore, when confirming the authentication partner (the above steps 307 and 308). In), the transmitting terminal 2 understands that the receiving terminal is not the receiving terminal of the previous mutual authentication, and as a result, it is possible to recognize that there has been an unauthorized access.
[0078]
As described above, according to the present embodiment, even when the unique identification information or the encryption key necessary for the mutual authentication is leaked, it is possible to recognize that there has been an unauthorized access and to immediately respond.
[0079]
(Embodiment 2)
The communication network security device according to the second embodiment will be described with reference to FIG.
[0080]
In FIG. 3, reference numeral 216 denotes a second judging means, and the components denoted by the same reference numerals as those in FIG. 1 have the same functions as those in FIG. Therefore, only the differences from the first embodiment will be described below.
[0081]
The second determining unit 216 determines the value of the second session key 211 generated when performing mutual authentication with the receiving terminal 1 and the unique value stored in the second session key storing unit 212 and transmitted from the receiving terminal 1. The value of the fourth session key 213 corresponding to the identification number 101 is compared, and if both values are equal, the mutual authentication processing is performed again by the second control means 20. That is, the mutual authentication operation is performed again. As a result, the session key is always changed for each mutual authentication, and the security level can be further improved.
[0082]
(Embodiment 3)
Since this embodiment has the same configuration as that of the first embodiment, the description will be made with reference to FIG.
[0083]
The mutual authentication process is performed according to the procedure (steps 301 to 308) described in the first embodiment, and a description thereof will not be repeated.
[0084]
The value of the session key Ks1 ″ generated from the third session key 111 stored in the first session key storage unit 110 at the time of the previous mutual authentication and the fourth session key stored in the second session key storage unit 212 When the value of the session key Ks2 ″ generated from the session key is different from each other, the unique identification information 101, the first unique encryption key 102, and the The third determining unit 215 determines that the information such as the session key 111 of No. 3 has been leaked and has been accessed illegally using the information. Disable. As a result, subsequent access from the receiving terminal that has performed the unauthorized access is prohibited. However, since subsequent access to the authorized receiving terminal 1 is also prohibited, information necessary for mutual authentication must be distributed again.
[0085]
In each of the above embodiments, the communication network security system including the receiving terminal 1 and the transmitting terminal 2 corresponds to the authentication system of the present invention. The transmitting terminal 2 corresponds to the first device of the present invention, and the receiving terminal 1 corresponds to the second device of the present invention.
[0086]
Further, in the transmitting terminal 2, each unit constituting the second control unit 20, the second mutual authentication unit 21, the second session key storage unit 212, the ninth encryption unit 214, and the first determination unit 215 , The fifth encrypting means 203, and the identification information searching means 204 constitute a first data processing means of the present invention. The means for outputting each data from the second random number generation means 206 and the sixth encryption means 205 to the receiving terminal 1 corresponds to a part of the first data output means of the present invention. The means for inputting each data from the receiving terminal 1 to the second comparing means 208, the first determining means 215, the second calculating means 209, the identification information searching means 204, and the fifth encrypting means 203 , Corresponds to a part of the first data acquisition means of the present invention.
[0087]
Further, in the receiving terminal 1, each of the means constituting the first control means 10, the first mutual authentication means 11, the first session key storage means 110, and the fourth encryption means 112 correspond to the second means of the present invention. It constitutes data processing means. Further, the means for mainly transferring each data from the first random number generation means 103 and the fourth encryption means 112 to the transmission terminal 2 corresponds to the second data output means of the present invention. The means for inputting each data to the first comparing means 105, the first calculating means 107, and the second encrypting means 106 corresponds to the first data acquiring means of the present invention.
[0088]
The unique identification information 101 corresponds to the ID of the present invention, and the first unique encryption key 102 and the second unique encryption key 202 correspond to a common encryption key of the present invention.
[0089]
The random numbers RN1 and RN2 correspond to the authentication data of the present invention, and the numerical values RN1 ', RN1 ", RN2', and RN2" correspond to the processed authentication data of the present invention. The session keys Ks1 ″ and Ks2 ″ correspond to the authentication history data of the present invention. The operations of steps 301 to 306 correspond to the authentication operation of the present invention, and the operations of steps 307 and 308 correspond to the final authentication operation of the present invention.
[0090]
However, the present invention is not limited to the above embodiments. In the above embodiment, the description has been given on the assumption that the receiving terminal 1 and the transmitting terminal 2 perform mutual authentication in steps 301 to 306. Only the operation of performing authentication or the operation of the second device performing authentication of the first device may be performed.
[0091]
Also, in the above embodiment, the final authentication operation shown in steps 307 and 308 is performed by the transmitting terminal 2, but in the present invention, either the first device or the second device It may be performed. When the system includes only one first device and only one second device, the unique identification information 101 may not be used. Further, both the first device and the second device may be plural.
[0092]
Further, in the above embodiment, the random numbers RN1 and RN2 are used for the authentication operation, but the authentication data of the present invention may use data other than the random numbers.
[0093]
In the above-described embodiment, the session keys Ks1 ″ and Ks2 ″ are obtained by encrypting the operation results using both the random numbers RN1 and RN2. However, the authentication history data of the present invention includes the random numbers RN1 and RN2. Or the random numbers RN1 and RN2 themselves may be used. In the case where the authentication operation of the present invention is not mutual authentication, an operation generated based on only one of the random numbers RN1 and RN2 or one of the random numbers RN1 and RN2 may be used.
[0094]
Further, in the above-described embodiment, the description has been given on the assumption that the session keys Ks1 ″ and Ks2 ″ in steps 307 and 308 are generated during the previous authentication operation. The authentication history data used in the operation is not limited to the order as long as it is generated in the past authentication. That is, instead of the one generated during the previous authentication operation, the one generated two or more times before or before the authentication operation may be used. Also, a plurality of authentication history data generated during a plurality of authentication operations may be used in combination.
[0095]
Further, a program according to the present invention is a program for causing a computer to execute the functions of all or a part of the above-described first device of the present invention (or a device, an element, a circuit, a unit, or the like), It may be a program that operates in cooperation with a computer.
[0096]
Further, the present invention is a medium that carries a program for causing a computer to execute all or a part of the functions of all or part of the first device of the present invention, and is readable and readable by a computer. The program may be a medium that executes the function in cooperation with the computer.
[0097]
The “partial means (or device, element, circuit, unit, etc.)” of the present invention and the “partial steps (or process, operation, operation, etc.)” of the present invention refer to those. It means several means or steps of a plurality of means or steps, or means some functions or some operations of one means or steps.
[0098]
Further, some devices (or elements, circuits, units, and the like) of the present invention mean some of the plurality of devices, or some of the devices. (Or an element, a circuit, a part, or the like), or a part of the function of one means.
[0099]
The present invention also includes a computer-readable recording medium that records the program of the present invention.
[0100]
Further, one usage form of the program of the present invention may be a mode in which the program is recorded on a computer-readable recording medium and operates in cooperation with the computer.
[0101]
One use form of the program of the present invention may be a form in which the program is transmitted through a transmission medium, read by a computer, and operates in cooperation with the computer.
[0102]
Further, the data structure of the present invention includes a database, a data format, a data table, a data list, a type of data, and the like.
[0103]
The recording medium includes a ROM and the like, and the transmission medium includes a transmission mechanism such as the Internet, light, radio waves, and sound waves.
[0104]
Further, the above-described computer of the present invention is not limited to pure hardware such as a CPU, but may include firmware, an OS, and peripheral devices.
[0105]
Note that, as described above, the configuration of the present invention may be realized by software or hardware.
[0106]
【The invention's effect】
As described above, according to the present invention, the security level of content protection can be improved.
[Brief description of the drawings]
FIG. 1 is a block diagram showing a configuration of a security device for a communication network according to a first embodiment of the present invention.
FIG. 2 is a diagram showing a time chart for explaining the operation of the first embodiment of the present invention;
FIG. 3 is a block diagram showing a configuration of a communication network security device according to a second embodiment of the present invention;
FIG. 4 is a block diagram showing a configuration of a conventional security device for a communication network.
FIG. 5 is a time chart for explaining the operation of the conventional communication network security device.
[Explanation of symbols]
1 receiving terminal
10 First control means
11 First mutual authentication means
109 first session key
110 First Session Key Storage Means
111 third session key
2 sending terminal
20 Second control means
21 Second mutual authentication means
204 identification information search means
211 Second session key
212 Second Session Key Storage Means
213 Fourth Session Key

Claims (29)

An authentication system in which a first device and a second device authenticate each other as communication partners,
A first data output unit that outputs data to the second device; a first data obtaining unit that obtains data output from the second device; and a first data obtaining unit that obtains data output from the second device. First data processing means for processing at least the data obtained by the means,
A second data output unit that outputs data to the first device; a second data acquisition unit that obtains data output from the first device; and a second data acquisition unit that acquires data output from the first device. Means for processing at least the data obtained by the means, and
As an authentication operation,
The first data output unit of the first device outputs authentication data for authenticating the second device as a communication partner, and the first data processing unit performs a first authentication based on at least the authentication data. Generate historical data,
The second data acquisition unit of the second device acquires the authentication data, and the second data processing unit performs a predetermined process on the authentication data to perform processed authentication data, and based on at least the authentication data. Generating second authentication history data, wherein the second data output means outputs the processed authentication data to the first device;
The first data acquisition unit of the first device acquires the processed authentication data, and the first data processing unit sets the second device as the communication partner based on at least the processed authentication data. Authenticate,
When the authentication operation is performed two or more times between the first device and the second device,
By comparing the second authentication history data in the past authentication with the first authentication history data, any one of the first device and / or the second device in the latest authentication is the first device in the past authentication. And / or to determine if it is the same as the second device,
An authentication system in which, when the determination result is the same, the first device and the second device in the latest authentication are finally authenticated as communication partners with each other. The first data acquisition unit of the first device acquires the second authentication history data in past authentication from the second device,
The first data processing means compares the first authentication history data of the first data processing means with the second authentication history data corresponding to the acquired data, and when both are the same, The authentication system according to claim 1, wherein a second device is finally authenticated as the communication partner. The second device is a plurality of devices each assigned a predetermined ID,
3. The authentication system according to claim 2, wherein the first data processing unit of the first device identifies a specific one of the plurality of second devices based on the ID and sets the specific one as the target of the authentication. 4. The second data acquisition unit of the second device acquires the first authentication history data in past authentication from the first device,
The second data processing unit compares the second authentication history data of the second data processing unit with the first authentication history data corresponding to the acquired data, and when both are the same, The authentication system according to claim 1, wherein the first device is finally authenticated as the communication partner. The first device is a plurality of devices each assigned a predetermined ID,
5. The authentication system according to claim 4, wherein the second data processing unit of the second device identifies a specific one of the plurality of first devices based on the ID, and sets the specific device as a target of the authentication. The authentication operation includes:
The second data output means of the second device outputs authentication data for authenticating the first device as a communication partner,
The first data acquisition unit of the first device acquires the authentication data, and the first data processing unit performs a predetermined process on the acquired authentication data to generate processed authentication data. And generating authentication history data based on the authentication data, the first data output means outputs the processed authentication data to the second device,
The second data acquisition unit of the second device acquires the processed authentication data, and the second data processing unit sets the first device as the communication partner based on at least the processed authentication data. Authenticate,
The authentication system according to claim 1, further comprising an operation. The first device and the second device have a common encryption key,
The first data processing means of the first device or the second data processing means of the second device generates the processed authentication data by encrypting the authentication data with the encryption key,
The first data processing unit of the first device or the second data processing unit of the second device encrypts the authentication data with the encryption key, and compares the processed data with the processed authentication data. The authentication system according to claim 1, wherein the authentication operation is performed by performing the authentication operation. The first data processing unit of the first device or the second data processing unit of the second device generates the authentication history data by encrypting the authentication data using the encryption key. Authentication system. 8. The device according to claim 1, wherein after the completion of the final authentication, the first data output unit of the first device becomes capable of outputting predetermined content to the second device. 9. Authentication system. 8. The device according to claim 1, wherein after the completion of the final authentication, the second data output unit of the second device becomes capable of outputting predetermined content to the first device. 9. Authentication system. The first data processing means of the first device or the second data processing means of the second device repeats the operation of generating the authentication history data when the authentication history data having the same content is continuously generated. The authentication system according to claim 2. The authentication system according to claim 3, wherein if the result of the determination is not the same, the ID is subsequently treated as invalid. A first device that authenticates a predetermined second device as a communication partner,
First data output means for outputting data to the second device, first data acquisition means for acquiring data output from the second device, and data acquired by the first data acquisition means. At least first data processing means for processing,
A second data output unit that outputs data to the first device; a second data acquisition unit that obtains data output from the first device; and a second data acquisition unit that acquires data output from the first device. Means for processing at least the data obtained by the means, and
As an authentication operation,
The first data output unit of the first device outputs authentication data for authenticating the second device as a communication partner, and the first data processing unit performs a first authentication based on at least the authentication data. Generate historical data,
The second data acquisition unit of the second device acquires the authentication data, and the second data processing unit performs a predetermined process on the authentication data to perform processed authentication data, and based on at least the authentication data. Generating second authentication history data, wherein the second data output means outputs the processed authentication data to the first device;
The first data acquisition unit of the first device acquires the processed authentication data, and the first data processing unit sets the second device as the communication partner based on at least the processed authentication data. Authenticate,
When the authentication operation is performed two or more times with the second device,
The first data acquisition unit acquires the second authentication history data in past authentication from the second device,
The first data processing means compares the first authentication history data of the first data processing means with the second authentication history data corresponding to the acquired data, and when both are the same, A first device that finally authenticates a second device as the communication partner. A first device that authenticates a predetermined second device as a communication partner,
First data output means for outputting data to the second device, first data acquisition means for acquiring data output from the second device, and data acquired by the first data acquisition means. At least first data processing means for processing,
A second data output unit that outputs data to the first device; a second data acquisition unit that obtains data output from the first device; and a second data acquisition unit that acquires data output from the first device. Means for processing at least the data obtained by the means, and
As an authentication operation,
The second data output means of the second device outputs authentication data for authenticating the first device as a communication partner,
The first data acquisition unit of the first device acquires the authentication data, and the first data processing unit performs a predetermined process on the acquired authentication data to generate processed authentication data. And generating authentication history data based on the authentication data, the first data output means outputs the processed authentication data to the second device,
The second data acquisition unit of the second device acquires the processed authentication data, and the second data processing unit sets the first device as the communication partner based on at least the processed authentication data. Authenticate,
When the authentication operation is performed two or more times with the second device,
The first data acquisition unit acquires the second authentication history data in past authentication from the second device,
The first data processing means compares the first authentication history data of the first data processing means with the second authentication history data corresponding to the acquired data, and when both are the same, A first device that finally authenticates a second device as the communication partner. The second device is a plurality of devices each assigned a predetermined ID,
The first device according to claim 13, wherein the first data processing unit identifies a specific one of the plurality of second devices based on the ID, and sets the specific one as a target of the authentication. Having a common encryption key with the second device,
The first data processing means generates the processed authentication data by encrypting the authentication data with the encryption key, and encrypts the authentication data with the encryption key. The first device according to claim 13, wherein the authentication operation is performed by comparing the processed authentication data with processed authentication data. The first device according to claim 13, wherein the first data processing unit generates the authentication history data by encrypting the authentication data using the encryption key. 15. The first device according to claim 13, wherein after the completion of the final authentication, the first data output unit can output predetermined content to the second device. 15. The first apparatus according to claim 13, wherein the first data processing means restarts the operation of generating the authentication history data when the authentication history data having the same content is continuously generated. 16. The first device according to claim 15, wherein if the result of the determination is not the same, the data processing unit invalidates the ID of the second device thereafter. A first device outputting authentication data for authenticating the second device as a communication partner, and generating first authentication history data based on at least the authentication data;
The second device acquires the authentication data, performs a predetermined process on the acquired authentication data, outputs the processed data to the first device as processed authentication data, and generates second authentication history data based at least on the authentication data. Process and
A step in which the first device authenticates the second device as the communication partner based on at least the processed authentication data;
When authentication is performed two or more times between the first device and the second device,
By comparing the second authentication history data in the past authentication with the first authentication history data, any one of the first device and / or the second device in the latest authentication is the first device in the past authentication. And / or determining whether the device is the same as the device,
An authentication method in which when the result of the determination is the same, the first device and the second device in the latest authentication are mutually authenticated as communication partners. The second device outputs authentication data for authenticating the first device as a communication partner,
The first device acquires the authentication data, performs a predetermined process on the acquired authentication data to generate processed authentication data, and generates authentication history data based on the authentication data; Outputting data to the second device;
22. The authentication method according to claim 21, further comprising a step of the second device acquiring the processed authentication data and authenticating the first device as the communication partner based on at least the processed authentication data. The first device acquires the second authentication history data in the past authentication from the second device, and compares the acquired second authentication history data with the first authentication history data of the first device, which corresponds to the acquired data, 23. The authentication method according to claim 21, wherein when both are the same, the second device is authenticated as the communication partner. The second device is a plurality of devices each assigned a predetermined ID,
24. The authentication method according to claim 23, wherein the first device identifies a specific device from the plurality of second devices based on the ID and sets the specific device as a target of the authentication. The second device acquires the first authentication history data in the past authentication from the first device, and compares the first authentication history data with the second authentication history data of the second device corresponding to the acquired data. 23. The authentication method according to claim 21, wherein when both are the same, the first device is authenticated as the communication partner. The first device is a plurality of devices each assigned a predetermined ID,
26. The authentication method according to claim 25, wherein the second device identifies a specific device from the plurality of first devices based on the ID, and sets the specific device as an authentication target. 14. The first device according to claim 13, wherein first data output means for outputting data to the second device, first data acquisition means for acquiring data output from the second device, A program for causing a computer to function as first data processing means for processing at least data acquired by the first data acquisition means. The first device according to claim 14, wherein the first data output unit outputs data to the second device, the first data acquisition unit acquires data output from the second device, A program for causing a computer to function as first data processing means for processing at least data acquired by the first data acquisition means. A recording medium carrying the program according to claim 13, wherein the recording medium can be processed by a computer.

Images