JP2006115162A - Authentication method, system, and program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an authentication method, system, and program, wherein authentication can be made without using a specific apparatus, an identification number, and personal information. <P>SOLUTION: The authentication system is composed of a PC device 1 equipped with an IC tag writer 2 and an object connection connector 3, an object 4 equipped with an IC reader 14 which reads out the content of an IC tag 11, and the IC tag 11. A public key, plain text data, and data obtained by encrypting the stored data using the public key are stored in the object 4, a private key and data encrypted using the private key are stored in the IC tag 11, information is read out from the IC tag 11 through the IC reader 14 of the object 4, the encrypted data are decrypted using the public key, authentication where the decrypted data are compared with the plain text data is made so as to make authentication of a person himself, and the stored data are decrypted using the private key. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to an authentication method, an authentication system, and an authentication program, and more particularly to authentication of a mobile communication device such as a mobile phone terminal.

A technique for authenticating an individual using an object is known. This type of technology is known as a technology that accepts information of a plurality of authentication items (IC cards) carried by the person without using a personal identification number and recognizes the person when the weighting coefficient exceeds a threshold value. (See, for example, Patent Document 1). Also, there is a technology for preventing unauthorized payment processing by applying an electronic signature with a secret key stored in an IC card in order to prevent unauthorized payment processing using an object such as a mobile phone. It is known (see, for example, Patent Document 2). In addition, a technique for preventing a mobile phone user from illegally charging electronic money information is known (for example, see Patent Document 3).
Japanese Patent Laying-Open No. 2004-220207 (paragraphs 0014 to 0018, FIG. 1) Japanese Patent Laying-Open No. 2003-32742 (paragraphs 0006 to 0008, FIG. 1) JP 2003-296646 A (paragraphs 0017 to 0024, FIGS. 1 and 2)

  In the case of the conventional method, a special device is required to perform authentication. In addition, it is necessary to input a password or the like. In addition, it is necessary to authenticate using personal information such as a personal identification number and ID. In addition, when a portable terminal used as an authentication terminal is lost, there is a problem that information written inside is read by another person.

  The present invention has been made in view of such a problem, and there is no fear that information written in the inside using a mobile terminal can be read by another person, and there is no special device and no password. It is another object of the present invention to provide an authentication method, an authentication system, and an authentication program that can authenticate without using personal information.

  (1) The invention according to claim 1 creates a public key and a secret key (step 1), writes the secret key and data encrypted with the secret key to the IC tag (step 2), and sets the public key to the object And the plaintext data (step 3), the information (stored data) to be stored in the object is encrypted and stored using the public key (step 4), and the IC tag is read on the object side (step 5), The private key of the IC tag is read, the encrypted data of the object is decrypted with the public key (step 6), the decrypted data is compared with the plain text data (step 7), and if both data match, the object The information (stored data) stored in is decrypted with a secret key and a predetermined process is performed (step 8). When the process is completed, the secret key is cleared (step 9).

(2) The invention described in claim 2 is characterized in that the object of the step 3 is a portable communication device.
(3) The invention according to claim 3 is characterized in that the secret key is stored in a volatile memory in the step 6.

  (4) The invention described in claim 4 is composed of a PC device having an IC tag writer and an object connector, an object having an IC reader for reading the contents of the IC tag, and an IC tag, and is disclosed to the object. A key, plaintext data, and stored data encrypted with the public key are stored, a secret key and data encrypted with the secret key are stored in the IC tag, and the IC tag of the target object is an IC tag The information is read out from the encrypted data, and the encrypted data is decrypted with the public key and authenticated by comparing with the plaintext data to authenticate the person by the pair, and the stored data is restored with the secret key. And

(5) The invention according to claim 5 is characterized in that the object is a portable communication device.
(6) The invention according to claim 6 is characterized in that the reading distance of the IC tag is several meters with respect to the object.

  (7) The invention according to claim 7 comprises a secret key, an IC tag for storing data encrypted with the secret key, a public key and plaintext data, and an object provided with an IC tag reader. A program that operates on the object, stores information (stored data) to be stored in the object, encrypted with the public key, reads an IC tag secret key and encrypted data with an IC tag reader, The encrypted data is decrypted with the public key and compared with the plain text. If the data matches, the stored data is decrypted with the secret key and used, and after use, the secret key is cleared by a computer. It is characterized by that.

  (1) According to the first aspect of the present invention, the mutual information data can be decrypted between the object and the IC tag by using the public key and the secret key, It is possible to authenticate without writing a special information, without a personal identification number, and without using a personal information.

(2) According to the invention described in claim 2, authentication can be performed using a portable communication device by using a portable communication device as the object.
(3) According to the third aspect of the present invention, since the secret key is stored in the volatile memory, the contents of the secret key disappear after a certain period of time, so it is not necessary to clear the secret key.

  (4) According to the invention described in claim 4, the mutual information data can be decrypted between the object and the IC tag by using the public key and the secret key, It is possible to authenticate without writing a special information, without a personal identification number, and without using a personal information.

(5) According to the invention described in claim 5, authentication can be performed using a portable communication device by using a portable communication device as the object.
(6) According to the invention described in claim 6, the transmission output of the IC tag can be reduced by suppressing the wireless communication distance between the IC tag and the object to several meters.

  (7) According to the invention described in claim 7, between the object and the IC tag, the mutual information data can be decrypted using the public key and the secret key, It is possible to authenticate without writing a special information, without a personal identification number, and without using a personal information.

Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.
FIG. 1 is a block diagram showing an embodiment of the present invention. In the figure, 10 is a home. At home 10, 1 is a personal computer (PC), 2 is an IC writer connected to the personal computer 1, 3 is a mobile phone connection connector connected to the personal computer 1, and 4 is an object connected to the mobile phone connection connector 3. Mobile phone (mobile communication device). By using a mobile phone as the mobile communication device, authentication can be performed using the mobile phone. The PC 1, the IC tag writer 2, and the mobile phone connector 3 constitute a PC device.

  11 is an IC tag, 12 is a memory built in the IC tag 11, 13 is a mobile phone as an object, 14 is an IC reader provided in the mobile phone 4, and 15 is provided in the mobile phone 4. Memory. The personal computer 1 connects the IC tag 11 to the IC tag writer 2 and writes the secret key and the data encrypted with the secret key in the memory 12 of the IC tag 11. Here, examples of the encrypted data include the name of the subject. Let this encrypted data be A '.

  The personal computer 1 writes the public key, plain text data, and usage data to the mobile phone 4 via the mobile phone connector 3. The plaintext data is A. The stored data stored in the mobile phone 4 such as the name of the subject person includes a communication partner number, mail contents, personal information, ringtones, and the like. These stored data are encrypted with the public key. Reference numeral 17 denotes glasses. The IC tag 11 is attached to the frame of the glasses 17 as shown in the figure.

  The distance between the IC tag 11 and the mobile phone 4 is set to about several meters. The IC tag 11 only needs to be able to wirelessly communicate with the mobile phone 4, and can sufficiently communicate wirelessly with a few meters. As a result, the transmission output of the IC tag 11 can be reduced. The operation of the system configured as described above will be described below with reference to a flowchart.

  2 to 4 are flowcharts showing an example of the operation of the present invention. First, a private key and a public key are created on the personal computer 1 (S1). Next, the IC tag 11 is connected to the IC tag writer 2 and the secret key and the data encrypted with the secret key are written (WRITE) (S2). The secret key and the encrypted data (A ′) are stored in the memory 12 of the IC tag 11. The IC tag 11 for which writing has been completed is attached to the frame of the glasses 17 as shown in FIG.

  Next, the mobile phone 4 is connected to the mobile phone connector 3 (S3). Then, the public key and plain text data (A) are written from the personal computer 1 to the mobile phone 4 (S4). The public key and the plaintext data (A) are stored in the memory 15 built in the mobile phone 4. The processing so far is performed by the personal computer 1 in the home 10. FIG. 5 shows the contents of the memory. The IC tag information is a secret key and data (A ′) encrypted with the secret key. As the data (A ′), for example, a name is used. The mobile phone information is a public key and plain text data (A). For example, a name is used as the plaintext data (A).

  Next, it is checked whether or not the communication partner is registered in the mobile phone 4 (S5). In the case of communication partner registration, registration is performed by encrypting with a public key (S6). The registered communication partner number is stored in the memory 15. If it is not communication partner registration in step S5, it is checked whether the mail content is stored (S7). When storing the mail content, it is encrypted with the public key and stored in the memory 15 (S8).

  If the mail contents are not saved in step S7, it is checked whether or not some data is saved (S9). Examples of the data stored here include personal information and ringtones. If any data is stored, it is encrypted with the public key and stored in the memory 15 (S10).

  When the above processing is completed, it is checked whether the IC tag 11 can be read (READ) (S11). The IC tag 11 is read by the IC reader 14 of the mobile phone. When the IC tag 11 cannot be read, a display that “cannot be used now” is displayed on the display unit of the mobile phone 4 (S12). If the IC tag 11 can be read, the IC reader 14 of the mobile phone 4 reads the secret key of the IC tag and the encrypted data (A ') (S13).

  Then, the read encrypted data (A ′) is decrypted (restored) with the public key (S14). The decrypted data (A ′) is compared with the plain text data (S15). As shown in FIG. 5, the data decrypted (decoded) from the data (A ′) of the IC tag 11 becomes name data. Data decrypted from data (A ′) is compared with plaintext data (A) (for example, Taro Fujitsu). If the data decrypted from the data (A ′) is, for example, Fujitsu Taro, both data match.

  And it is checked whether both data correspond (S16). If they do not match, the process returns to step S11, and the IC tag 11 is read again. If they match, the operation enters a standby mode for waiting for whether or not the button has been pressed (S17). If the button is pressed, it is checked whether to make a call (S18). When making a call, the registered / stored encrypted data stored in the mobile phone 4 is decrypted each time using the secret key (S19). Then, normal use is performed using the restored data (S20). When normal use ends, the secret key is cleared (S21). This is because if it is not cleared, there is a risk of knowing the encrypted contents inside using the secret key when another person picks up the mobile phone.

  If no telephone call is made in step S18, it is checked whether or not to register a communication partner (S22). When registering, it encrypts with the public key from the mobile telephone 4, and registers it in the memory 15 (S23). In step S22, when the communication partner is not registered, it is checked whether or not to save the mail contents (S24). In the case of saving, it is encrypted with the public key and saved in the memory 15. In step S24, if the mail contents are not stored, it is checked whether or not some data is stored (S26). In the case of saving, it is encrypted with the public key and saved in the memory 15 (S27). When the above processing is completed, the process returns to step S11 to perform IC tag reading.

  As described above, according to the present invention, the mutual information data can be decrypted between the object and the IC tag using the public key and the secret key, and written into the inside using the object. The information can be authenticated without any special device, without a special device, without a personal identification number, and without using personal information.

Even if the mobile phone 4 is lost, the registered contents cannot be read without the IC tag, so that security can be protected.
In this case, if the secret key is stored in the volatile memory, the contents disappear after a certain time, so that it is not necessary to clear the secret key as shown in step S21.

  Further, according to the present invention, if the sequence program as described above is stored in the memory of the mobile phone, the program can be executed and the sequence as described above can be performed and authentication can be performed. Can do.

  In the above-described embodiment, the case where a mobile phone is used as an object is taken as an example. However, the present invention is not limited to this, and a personal computer (PC) or a mobile terminal capable of performing other wireless communication. Can be used.

It is a block diagram which shows one embodiment of this invention. It is a flowchart which shows an example of operation | movement of this invention. It is a flowchart which shows an example of operation | movement of this invention. It is a flowchart which shows an example of operation | movement of this invention. It is a figure which shows the content of memory.

Explanation of symbols

1 PC 2 IC Tag Writer 3 Mobile Phone Connector 4 Mobile Phone 10 Home 11 IC Tag 12 Memory 14 IC Reader 15 Memory

Claims (7)

Create public and private keys (step 1)
Write the secret key and the data encrypted with the secret key to the IC tag (step 2),
Write the public key and plaintext data to the object (step 3),
Information (stored data) to be stored in the object is encrypted and stored using a public key (step 4),
Lead the IC tag on the object side (Step 5)
Read the secret key of the IC tag and decrypt the encrypted data of the object with the public key (step 6),
Compare the decrypted data with plaintext data (step 7),
If both data match, the information (stored data) stored in the object is decrypted with the secret key and subjected to predetermined processing (step 8),
When the process is completed, the secret key is cleared (step 9),
An authentication method characterized by that.   2. The authentication method according to claim 1, wherein the object in step 3 is a portable communication device.   The authentication method according to claim 1, wherein the secret key is stored in a volatile memory in the step 6. A PC device having an IC tag writer and an object connector;
An object having an IC reader for reading the contents of the IC tag;
IC tag,
Consisting of
Storing the public key, plain text data, and stored data encrypted with the public key in the object;
A secret key and data encrypted with the secret key are stored in the IC tag,
Read the information from the IC tag with the IC reader of the object,
By authenticating the pair by authenticating the encrypted data by decrypting the encrypted data with the public key and comparing with the plaintext data,
An authentication system, wherein stored data is restored with the secret key.   The authentication system according to claim 4, wherein the object is a portable communication device.   5. The authentication system according to claim 4, wherein the reading distance of the IC tag is several meters with respect to the object. A program that operates on an object, comprising an IC tag that stores a secret key and data encrypted with the secret key, a public key and plaintext data, and an object provided with an IC tag reader. ,
The information (stored data) to be stored in the object is encrypted and stored with the public key, the IC tag reader reads the IC tag secret key and the encrypted data, and the encrypted data is decrypted with the public key to obtain the plaintext. When the comparison and the match, the stored data is decrypted and used with the secret key, and the secret key is cleared after use.
An authentication program, wherein the process is executed by a computer.

Images