JP2008040916A - Authentication method, authentication program, and electronic apparatus - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To raise authentication strength, while reducing a load on authentication processing concerning authentication among three or more boards, devices, and units. <P>SOLUTION: The device 102 for extending a function in an authentication system 100 calculates authentication data by each authentication processing by an authenticated information calculating part 221, and transmits authenticated information to the other device 102 for extending the function or/and a main device 101 by a transmitting/receiving part 222. The latter device 102 for extending the function and/or the main device 101 calculate authentication information to be different by each authentication processing, based on predetermined rules by authentication information calculating parts 212, 223, and determine whether the validity of the other device 102 for extending function is to be authenticated or not by decision parts 213, 224. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to an authentication method and an authentication program used for authentication between three or more substrates, control units, CPUs, functional blocks, and the like, and an electronic apparatus having three or more substrates, control units, CPUs, functional blocks, etc. .

  Conventionally, it is illegal to incorporate a unique information storage device in order to check that each device making up the network is connected in a valid state, and to control connection between devices that have been confirmed to be valid. Among the unique information that is unique to each unique information storage device, the detection device stores the valid unique information and the unique information from the unique information storage device incorporated in itself at a predetermined timing. A reading unit that reads out the unique information of the storage device, the unique information read out by the reading unit, and the unique information stored in the storage unit by collating the unique information stored in the storage unit It has been proposed to determine whether or not it is legitimate and to output a notice of abnormality when it is judged not legitimate (for example, Patent Document 1 below reference.). Such a fraud detection device detects fraud even when a chip incorporated in a device is removed or replaced in order to confirm its validity, and prevents unauthorized devices from entering the network. Can do.

JP 2006-148200 A

  However, according to the above-described prior art, since the unique information is used for the authentication process, there is a problem that fraud cannot be detected if the unique information of a legitimate device leaks and the unique information is forged. In addition, for example, to increase the number of unique information used for authentication to prevent the information used for authentication from being decrypted, or to reduce the risk of leaking unique information, to identify unique information or unique information There is a problem that the storage location of the identification information increases.

  In addition, if the unique information is subjected to complicated encryption processing to prevent the unique information from being decrypted, there is a problem that the processing load when performing the authentication processing increases. For example, in a case where authentication processing is performed between a plurality of boards incorporated in an electronic device, an apparatus (board) serving as an authenticator or a person to be authenticated may not necessarily have high performance. In this case, there is a problem that advanced processing such as encryption processing may not be performed.

  An object of the present invention is to provide an authentication method, an authentication program, and an electronic device that can increase the strength of authentication while reducing the burden on the authentication process in order to eliminate the above-described problems caused by the prior art. .

  In order to solve the above-described problems and achieve the object, an authentication method according to the invention of claim 1 includes at least three substrates (hereinafter referred to as three substrates, “first substrate” and “second substrate”). And a third substrate), wherein the first substrate is different from each other in each authentication process based on a predetermined first rule. A first authentication information calculation step for calculating authentication information; a first transmission step for transmitting the first authentication information calculated in the first authentication information calculation step to the second substrate; And the second substrate has a first reception step for receiving the first authentication information transmitted in the first transmission step, and a different one for each authentication process based on the first rule. The first authentication information calculating step for calculating one authentication information and the first receiving step. Determining whether or not to authenticate the first substrate based on the first authenticated information and the first authentication information calculated in the first authentication information calculation step; And the second authenticated information that calculates the second authenticated information that differs for each authentication process based on the predetermined second rule based on the determination result of the first determining step and the determination result of the first determining step And a second transmission step of transmitting the second authenticated information calculated in the second authenticated information calculating step to the third substrate, wherein the third substrate is A second reception step for receiving the second authentication information transmitted in the second transmission step, and a second second step for calculating different second authentication information for each authentication process based on the second rule. An authentication information calculating step, the second authentication information received in the second receiving step, and the second Based on the second authentication information calculated by the authentication information calculating step, characterized in that it comprises a second determination step of determining whether to authenticate the second substrate.

  According to the first aspect of the present invention, among three or more substrates provided in a single apparatus, the second substrate authenticates the first substrate, and the third substrate authenticates the second substrate. To do. Thereby, it is possible to prevent the substrate in the apparatus from being illegally replaced. In addition, the processing load of authentication processing among three or more substrates can be distributed. Furthermore, since the authentication process is performed using different authentication information and authentication information every time, spoofing can be prevented.

  The authentication method according to a second aspect of the present invention is the authentication method according to the first aspect, wherein the first authenticated information calculation step includes a first identification value for identifying an authentication processing procedure, and an authentication process. The first authentication information is calculated using a first change value that changes for each process, and the first authentication information calculation step includes the first identification value, the first change value, The first authentication information is calculated using the second authentication information, and the second authentication information calculation step includes a second identification value for identifying a procedure of the authentication process and a second change that changes for each authentication process. The second authentication information is calculated using the value, and the second authentication information calculation step uses the second identification value and the second change value to calculate the second authentication information. Is calculated.

  According to the second aspect of the present invention, authentication processing can be performed using an identification value for identifying a procedure and a change value that dynamically changes for each authentication processing.

  An authentication method according to a third aspect of the present invention is the authentication method according to the first or second aspect, wherein the second authenticated information calculation step uses the first authenticated information. Authentication information is calculated, the second authentication information calculation step calculates the second authentication information based on the first rule together with the second rule, and the second determination step includes: Whether or not to authenticate the validity of the first substrate is determined together with the second substrate.

  According to the third aspect of the invention, since the second authentication information is calculated using the first authentication information, the validity of the first substrate is authenticated together with the second substrate in the third substrate. can do.

  An authentication method according to a fourth aspect of the present invention is the authentication method according to any one of the first to third aspects, wherein the first transmission step is performed on the third substrate together with the second substrate. The first authenticated information is transmitted, the second receiving step receives the first authenticated information together with the second authenticated information, and the second authenticated information calculating step includes: The second authentication information is calculated, the first authentication information is calculated based on the first rule, and the second determination step determines whether to authenticate the validity of the second substrate. And determining whether the first substrate is valid based on the first authenticated information received in the second receiving step and the first authentication information calculated in the second authentication information calculating step. It is characterized by determining whether to authenticate sex.

  According to the fourth aspect of the present invention, the first substrate transmits the first authentication information to the second substrate and the third substrate, and the third substrate directly receives from the first substrate. The first substrate is authenticated using the first authentication information. Thereby, the certainty of the authentication process by the 3rd board | substrate can be improved more.

  An authentication method according to a fifth aspect of the present invention is the authentication method according to any one of the first to third aspects, wherein the first authenticated information calculation step is based on the first rule. Third authenticated information different from the first authenticated information is calculated, and the first transmitting step transmits the first authenticated information to the second substrate and the third authenticated information. To the third substrate, the second receiving step receives the third authenticated information together with the second authenticated information, and the second authenticated information calculating step includes The second authentication information is calculated, and the third authentication information is calculated based on the first rule, and the second determination step determines whether to authenticate the validity of the second substrate. And the third authentication information received in the second reception step and the second authentication information calculation. Based on the third authentication information calculated in step, and wherein the determining whether to authenticate the first substrate.

  According to the fifth aspect of the present invention, the first board transmits separate authentication information to the second board and the third board. Thereby, the certainty of the authentication process by each board | substrate can be improved more.

  An authentication method according to a sixth aspect of the present invention is the invention according to any one of the first to fifth aspects, wherein it is determined that the validity of the first board is not authenticated in the first determination step. Or a notification step of notifying the determination when it is determined that the validity of the second substrate is not authenticated in the second determination step.

  According to the sixth aspect of the present invention, it is possible to notify the user that there is a board in the apparatus whose authenticity is not authenticated.

  An authentication method according to a seventh aspect of the present invention is the invention according to any one of the first to fifth aspects, wherein it is determined that the validity of the first substrate is not authenticated in the first determination step. If it is determined that the validity of the second substrate is not authenticated in the second determination step, at least one of the first substrate, the second substrate, and the third substrate It includes a control step for stopping one operation.

  According to the seventh aspect of the present invention, when there is a board whose validity is not verified, the processing of the board can be stopped to prevent the malfunction of the apparatus and the outflow of data. In addition, it is possible to notify the user that there is a board whose validity is not authenticated in the apparatus.

  An authentication method according to an eighth aspect of the present invention includes at least three control units (hereinafter, the three control units are referred to as “first control unit”, “second control unit”, and “third control unit”). The first control unit calculates different first authentication information for each authentication process based on a predetermined first rule. Including a first authenticated information calculating step and a first transmitting step of transmitting the first authenticated information calculated in the first authenticated information calculating step to the second control unit, The second control unit includes a first reception step for receiving the first authentication information transmitted in the first transmission step, and a first authentication that is different for each authentication process based on the first rule. A first authentication information calculating step for calculating information, and a first authentication target received in the first receiving step A first determination step of determining whether or not to authenticate the validity of the first control unit based on the information and the first authentication information calculated in the first authentication information calculation step; A second authenticated information calculation step of calculating second authenticated information different for each authentication process based on a predetermined second rule in response to the determination result of the first determination step; A second transmission step of transmitting the second authentication information calculated in the second authentication information calculation step to the third control unit, wherein the third control unit transmits the second transmission information. A second receiving step for receiving the second authentication information transmitted in the step, and a second authentication information calculating step for calculating different second authentication information for each authentication process based on the second rule. And second authentication information received in the second reception step, and calculation of the second authentication information Based on the second authentication information calculated in extent, characterized in that it comprises a second determination step of determining whether to authenticate the second control unit.

  According to the invention of claim 8, in three or more control units provided in a single device, the second control unit authenticates the first control unit, and the second control unit is the third control unit. The control unit authenticates. Thereby, it is possible to prevent the control unit in the apparatus from being illegally replaced. Also, the processing load of authentication processing among three or more control units can be distributed. Furthermore, since the authentication process is performed using different authentication information and authentication information every time, spoofing can be prevented.

  Further, the authentication method according to the invention of claim 9 includes at least three CPUs (hereinafter, the three CPUs are referred to as “first CPU”, “second CPU”, and “third CPU”). 1st authentication information which calculates the 1st to-be-authenticated information which is different for every authentication processing based on the 1st rule defined beforehand, And a first transmission step of transmitting the first authenticated information calculated in the first authenticated information calculating step to the second CPU, wherein the second CPU A first authentication step for receiving the first authentication information transmitted in the first transmission step, and a first authentication for calculating different first authentication information for each authentication process based on the first rule. Information calculation step and first authentication target received in the first reception step A first determination step for determining whether or not to authenticate the validity of the first CPU based on the information and the first authentication information calculated in the first authentication information calculation step; A second authenticated information calculating step of receiving second determination information different from each authentication processing based on a predetermined second rule in response to the determination result of the first determining step; A second transmission step of transmitting the second authenticated information calculated in the authenticated information calculation step to the third CPU, wherein the third CPU transmits in the second transmission step. A second receiving step of receiving the second authenticated information, a second authentication information calculating step of calculating different second authentication information for each authentication process based on the second rule, Second authentication information received in the second reception step and calculation of the second authentication information Based on the second authentication information calculated in extent, characterized in that it comprises a second determination step of determining whether to authenticate the second CPU.

  According to the ninth aspect of the present invention, in three or more CPUs provided in a single device, the second CPU authenticates the first CPU, and the third CPU authenticates the second CPU. To do. Thereby, it is possible to prevent the CPU in the apparatus from being illegally replaced. Also, the processing load of authentication processing among three or more CPUs can be distributed. Furthermore, since the authentication process is performed using different authentication information and authentication information every time, spoofing can be prevented.

  The authentication method according to the invention of claim 10 includes at least three function blocks (hereinafter, the three function blocks are referred to as “first function block”, “second function block”, and “third function block”). The first functional block calculates different first authenticated information for each authentication process based on a predetermined first rule. Including a first authenticated information calculation step and a first transmission step of transmitting the first authenticated information calculated in the first authenticated information calculation step to the second functional block, The second functional block includes a first authentication step that receives the first authentication information transmitted in the first transmission step, and a first authentication that is different for each authentication process based on the first rule. First authentication information calculation for calculating information On the basis of the first authenticated information received in the first receiving step and the first authentication information calculated in the first authentication information calculating step, the validity of the first functional block is determined. A first determination step for determining whether or not to authenticate the sex, and a second result that is different for each authentication process based on a predetermined second rule in response to the determination result of the first determination step. A second authenticated information calculating step for calculating the authenticated information, and a second transmitting step for transmitting the second authenticated information calculated in the second authenticated information calculating step to the third functional block. And the third functional block includes: a second reception step for receiving the second authenticated information transmitted in the second transmission step; and an authentication process based on the second rule. A second authentication information calculation step of calculating different second authentication information for each of the above, Whether to authenticate the validity of the second functional block based on the second authentication information received in the second reception step and the second authentication information calculated in the second authentication information calculation step And a second determination step of determining whether or not.

  According to the invention of claim 10, in three or more function blocks provided in a single device, the second function block authenticates the first function block, and the second function block is the third function block. The function block authenticates. Thereby, it is possible to prevent the functional block in the apparatus from being illegally replaced. In addition, it is possible to distribute the processing load of authentication processing among three or more functional blocks. Furthermore, since the authentication process is performed using different authentication information and authentication information every time, spoofing can be prevented.

  An authentication program according to an invention of claim 11 causes a computer to execute the authentication method according to any one of claims 1 to 10.

  According to the eleventh aspect of the present invention, in three or more substrates, control units, functional blocks, and CPUs (hereinafter referred to as “substrates”) provided in a single device, The second board or the like authenticates, and the second board or the like authenticates the third board. Thereby, it is possible to prevent the substrate in the apparatus from being illegally replaced. In addition, the processing load of authentication processing among three or more substrates can be distributed. Furthermore, since the authentication process is performed using different authentication information and authentication information every time, spoofing can be prevented.

  In addition, the electronic device according to the invention of claim 12 includes at least three substrates (hereinafter, the three substrates are referred to as a “first substrate”, a “second substrate”, and a “third substrate”). 1st to-be-authenticated information calculation means which calculates the 1st to-be-authenticated information which differs for every authentication processing based on the 1st rule defined beforehand, And first transmission means for transmitting the first authenticated information calculated by the first authenticated information calculating means to the second substrate, wherein the second substrate is the first authenticated information. First receiving means for receiving first authentication information transmitted by the transmitting means, and first authentication information calculating means for calculating different first authentication information for each authentication process based on the first rule. And first authenticated information received by the first receiving means; Based on the first authentication information calculated by the first authentication information calculation means, a first determination means for determining whether or not to authenticate the validity of the first substrate, and the first determination means And second authenticated information calculation means for calculating different second authenticated information for each authentication process based on a predetermined second rule, and the second authenticated information Second transmitting means for transmitting the second authentication information calculated by the calculating means to the third substrate, wherein the third substrate is the second transmitted by the second transmitting means. Second receiving means for receiving the second authentication information, second authentication information calculating means for calculating different second authentication information for each authentication process based on the second rule, and the second reception Second authenticated information received by the means and the second authentication Based on the second authentication information calculated by the distribution calculating means, characterized in that it comprises a second judgment means for judging whether or not to authenticate the second substrate.

  According to the invention of claim 12, in the three or more substrates provided in a single electronic device, the second substrate authenticates the first substrate, and the third substrate is the third substrate. Certify. Thereby, it is possible to prevent the substrate in the electronic device from being illegally replaced. In addition, the processing load of authentication processing among three or more substrates can be distributed. Furthermore, since the authentication process is performed using different authentication information and authentication information every time, spoofing can be prevented.

  According to a thirteenth aspect of the present invention, in the electronic device according to the twelfth aspect of the present invention, the first authenticated information calculation means includes a first identification value for identifying a procedure of authentication processing, and an authentication The first authentication information is calculated using a first change value that changes for each process, and the first authentication information calculation means includes the first identification value, the first change value, The first authentication information is calculated using the second authentication information, and the second authenticated information calculation means uses a second identification value for identifying the procedure of the authentication process and a second change that changes for each authentication process. The second authentication information is calculated using the value, and the second authentication information calculating means uses the second identification value and the second change value to calculate the second authentication information. Is calculated.

  According to the thirteenth aspect of the present invention, authentication processing can be performed using an identification value for identifying a procedure and a change value that dynamically changes for each authentication processing.

  An electronic device according to a fourteenth aspect of the present invention is the electronic device according to the twelfth or thirteenth aspect, wherein the second authenticated information calculating means uses the first authenticated information. Authentication information is calculated, the second authentication information calculation means calculates the second authentication information based on the first rule together with the second rule, and the second determination means Whether or not to authenticate the validity of the first substrate is determined together with the second substrate.

  According to the fourteenth aspect of the invention, since the second authentication information is calculated using the first authentication information, the validity of the first substrate is authenticated together with the second substrate in the third substrate. can do.

  An electronic device according to a fifteenth aspect of the present invention is the electronic device according to any one of the twelfth to fourteenth aspects, wherein the first transmission unit is connected to the third substrate together with the second substrate. The first authenticated information is transmitted, the second receiving means receives the first authenticated information together with the second authenticated information, and the second authenticated information calculating means The second authentication information is calculated, the first authentication information is calculated based on the first rule, and the second determination means determines whether or not to authenticate the validity of the second substrate. And the first authentication information calculated by the second authentication information calculation means based on the first authentication information received by the second reception means and the first authentication information calculated by the second authentication information calculation means. It is characterized by determining whether to authenticate the validity.

  According to the fifteenth aspect of the present invention, the first board transmits the first authentication information to the second board and the third board, and the third board receives the first board directly from the first board. The first substrate is authenticated using the first authentication information. Thereby, the certainty of the authentication process by the 3rd board | substrate can be improved more.

  An electronic device according to a sixteenth aspect of the present invention is the electronic device according to any one of the twelfth to fifteenth aspects, wherein the input to the third substrate is the first substrate or the second substrate. Only one-way communication from is possible.

  According to the sixteenth aspect of the present invention, even when the communication direction of the third substrate is restricted, the authentication processing for the first substrate and the second substrate can be performed by the third substrate.

  An electronic device according to a seventeenth aspect of the present invention is the electronic device according to any one of the twelfth to sixteenth aspects, wherein at least one of the first substrate, the second substrate, and the third substrate. Any two of them are mounted on a single substrate.

  According to the seventeenth aspect of the present invention, two or more substrates mounted on a single substrate can be authenticated as individual substrates.

  According to an eighteenth aspect of the present invention, in the electronic device according to any one of the twelfth to sixteenth aspects, the third substrate includes a plurality of substrates, and each of the plurality of substrates is individually provided. In addition, the authentication processing for the first substrate and the second substrate is performed jointly.

  According to the eighteenth aspect of the present invention, when the third substrate is composed of a plurality of substrates, the plurality of substrates individually or jointly perform the authentication process for the first substrate and the second substrate. Can be done.

  The electronic device according to an invention of claim 19 is the electronic device according to any one of claims 12 to 16, wherein the third substrate is composed of a plurality of control units, and the plurality of control units are: An authentication process is performed individually or jointly for the first substrate and the second substrate.

  According to the nineteenth aspect of the present invention, when the third substrate includes a plurality of control units, the plurality of control units individually or jointly authenticate the first substrate and the second substrate. Processing can be performed.

  An electronic device according to a twentieth aspect of the present invention is the electronic device according to any one of the twelfth to sixteenth aspects, wherein the third substrate includes a plurality of CPUs, and the plurality of CPUs are individually provided. In addition, the authentication processing for the first substrate and the second substrate is performed jointly.

  According to the twentieth aspect of the present invention, when the third substrate is composed of a plurality of CPUs, the plurality of CPUs individually or jointly perform authentication processing on the first substrate and the second substrate. Can be done.

  An electronic device according to a twenty-first aspect of the present invention is the electronic device according to any one of the twelfth to sixteenth aspects, wherein the third substrate is composed of a plurality of functional blocks, and the plurality of functional blocks are: An authentication process is performed individually or jointly for the first substrate and the second substrate.

  According to the twenty-first aspect of the present invention, when the third substrate is composed of a plurality of functional blocks, the plurality of functional blocks are individually or jointly authenticated for the first substrate and the second substrate. Processing can be performed.

  The electronic device according to the invention of claim 22 is provided with at least three control units (hereinafter, the three control units are referred to as “first control unit”, “second control unit”, and “third control unit”). The first control unit calculates first first authentication information that is different for each authentication process based on a predetermined first rule. Authentication information calculation means; and first transmission means for transmitting the first authentication information calculated by the first authentication information calculation means to the second control unit; and The control unit calculates first authentication information that is different for each authentication process based on the first receiving unit that receives the first authentication information transmitted by the first transmitting unit and the first rule. First authentication information calculating means that performs the first authentication information received by the first receiving means. Based on authentication information and first authentication information calculated by the first authentication information calculating means, first determination means for determining whether or not to authenticate the validity of the first control unit; A second authenticated information calculating unit that receives a determination result of the first determining unit and calculates different second authenticated information for each authentication process based on a predetermined second rule; Second transmitting means for transmitting the second authenticated information calculated by the second authenticated information calculating means to the third control section, wherein the third control section includes the second authenticated information A second receiving unit that receives the second authentication information transmitted by the transmitting unit; and a second authentication information calculator that calculates different second authentication information for each authentication process based on the second rule. And second authenticated object received by said second receiving means And second determination means for determining whether to authenticate the validity of the second control unit based on the second authentication information calculated by the second authentication information calculation means. It is characterized by providing.

  According to the twenty-second aspect of the present invention, in three or more control units provided in a single electronic device, the second control unit authenticates the first control unit, and the second control unit 3 control units authenticate. Thereby, it is possible to prevent the control unit in the electronic device from being illegally replaced. In addition, the processing load of authentication processing among three or more control units can be distributed. Furthermore, since the authentication process is performed using different authentication information and authentication information every time, spoofing can be prevented.

  The electronic device according to the invention of claim 23 is provided with at least three CPUs (hereinafter, the three CPUs are referred to as “first CPU”, “second CPU”, and “third CPU”). The first CPU includes a first authenticated information calculating unit that calculates different first authenticated information for each authentication process based on a predetermined first rule. , First transmitting means for transmitting the first authenticated information calculated by the first authenticated information calculating means to the second CPU, wherein the second CPU First receiving means for receiving first authentication information transmitted by the transmitting means, and first authentication information calculating means for calculating different first authentication information for each authentication process based on the first rule. And the first received by the first receiving means First determination means for determining whether or not to authenticate the validity of the first CPU based on the authentication information and the first authentication information calculated by the first authentication information calculation means; A second authenticated information calculating means for calculating second authenticated information different for each authentication process based on a predetermined second rule in response to a determination result of the first determining means; And second transmission means for transmitting the second authenticated information calculated by the second authenticated information calculation means to the third CPU, wherein the third CPU is controlled by the second transmission means. Second receiving means for receiving the transmitted second authenticated information; second authentication information calculating means for calculating different second authentication information for each authentication process based on the second rule; A second authentication target received by the second receiving means; And second determination means for determining whether to authenticate the validity of the second CPU based on the second authentication information calculated by the second authentication information calculation means. It is characterized by that.

  According to the invention of claim 23, in three or more CPUs provided in a single electronic device, the second CPU authenticates the first CPU, and the third CPU Certify. Thereby, it is possible to prevent the CPU in the electronic device from being illegally replaced. Also, the processing load of authentication processing among three or more CPUs can be distributed. Furthermore, since the authentication process is performed using different authentication information and authentication information every time, spoofing can be prevented.

  The electronic device according to the invention of claim 24 is provided with at least three function blocks (hereinafter, the three function blocks are referred to as “first function block”, “second function block”, and “third function block”). The first functional block calculates first first authentication information that is different for each authentication process based on a predetermined first rule. Authentication information calculation means; and first transmission means for transmitting the first authentication information calculated by the first authentication information calculation means to the second functional block, and The functional block calculates first authentication information that is different for each authentication process based on the first receiving unit that receives the first authentication information transmitted by the first transmitting unit and the first rule. The first authentication information calculator And the validity of the first functional block based on the first authentication information received by the first receiving means and the first authentication information calculated by the first authentication information calculating means. A first judging means for judging whether or not to authenticate, and a second result that is different for each authentication process based on a second rule determined in advance based on the judgment result of the first judging means. Second authenticated information calculating means for calculating authentication information; second transmitting means for transmitting the second authenticated information calculated by the second authenticated information calculating means to the third functional block; And the third functional block includes: a second receiving unit that receives the second authentication information transmitted by the second transmitting unit; and an authentication process based on the second rule. Second authentication information for calculating different second authentication information Based on the information calculating means, the second authentication information received by the second receiving means, and the second authentication information calculated by the second authentication information calculating means, the second functional block And a second judging means for judging whether or not to authenticate the legitimacy.

  According to the invention of claim 24, in three or more functional blocks provided in a single electronic device, the second functional block authenticates the first functional block, and the second functional block is the second functional block. 3 function blocks authenticate. Thereby, it is possible to prevent the functional block in the electronic device from being illegally replaced. In addition, it is possible to distribute the processing load of authentication processing among three or more functional blocks. Furthermore, since the authentication process is performed using different authentication information and authentication information every time, spoofing can be prevented.

  According to the authentication method, the authentication program, and the electronic device according to the present invention, it is possible to increase the strength of authentication while reducing the burden on the authentication process.

  Exemplary embodiments of an authentication method, an authentication program, and an electronic device according to the present invention will be described below in detail with reference to the accompanying drawings.

(Embodiment)
(System configuration of authentication system 100)
First, the system configuration of the authentication system 100 according to the embodiment will be described. FIG. 1 is an explanatory diagram of a system configuration of the authentication system according to the embodiment. The authentication system 100 includes a main apparatus 101 and a function expansion device 102 (102a, 102b) that expands the functions of the main apparatus 101.

  The main device 101 is a device having a predetermined function as a single unit, such as a personal computer, an OA device, or a home game machine. The main apparatus 101 has a predetermined function as a single unit, and can expand its function by attaching a function expansion device 102 described later.

  The function expansion device 102 is attached to the main apparatus 101 and expands the function of the main apparatus 101. The function expansion device 102 is, for example, an expansion card such as a graphic card or a sound card, or a device such as a built-in type or an external type media reader / writer. The function expansion device 102 is attached to, for example, an expansion bus on a mother board (not shown) of the main apparatus 101 or attached to the main apparatus 101 via a cable (not shown) or a connector (not shown). In the present embodiment, two function expansion devices 102 (function expansion devices 102a and 102b) are attached to the main apparatus 101, but two or more function expansion devices 102 may be attached.

  In the main apparatus 101 and the function expansion device 102, for example, a board, a control unit, a CPU, and a functional block mounted in each apparatus actually perform the authentication process. Each of these substrates may have a plurality of configurations. For example, one board may be composed of a plurality of control units, CPUs, and functional blocks.

  Here, in the authentication system 100, the main apparatus 101 authenticates whether or not the function expansion device 102 attached to the own apparatus is a genuine product (whether it is a third-party product manufactured by a third party). . More specifically, three-way authentication is performed with the main apparatus 101 as the authenticator and the function expansion device 102 (102a, 102b) as the person to be authenticated. As a result, it is possible to prevent fraud such as a non-genuine product being attached to the main device 101 and causing a malfunction, or unauthorized equipment being attached by a malicious person and setting values being tampered with.

(Functional configuration of authentication system 100)
Next, a functional configuration of the authentication system 100 will be described. FIG. 2 is a block diagram showing a functional configuration of the authentication system. In the authentication system 100, the main device 101 includes a reception unit 211, an authentication information calculation unit 212, and a determination unit 213. In addition, the function expansion devices 102a and 102b include an authenticated information calculation unit 221 (221a and 221b), a transmission / reception unit 222 (222a and 222b), an authentication information calculation unit 223 (223a and 223b), and a determination unit 224 (224a), respectively. , 224b).

  For convenience of explanation, each configuration of the function expansion device 102 will be described first. The to-be-authenticated information calculation unit 221 (221a, 221b) performs authentication based on a predetermined rule between the own apparatus and the main apparatus 101 or between the own apparatus, the main apparatus 101, and another function expansion device 102. Different authentication information is calculated for each process. The authentication target information is authentication information for receiving authentication from another apparatus (for example, the main apparatus 101 or another function expansion device 102). The authenticated information calculation unit 221 calculates the authenticated information using, for example, an identification value for identifying a procedure of the authentication process and a change value that changes for each authentication process.

  The identification value for identifying the authentication processing procedure is, for example, some value generated in the authentication processing process. Since this value is generated as a result of executing the authentication process (having the procedure), it can be used as a value for identifying the procedure of the authentication process.

  The transmission / reception unit 222 (222a, 222b) transmits the authentication information calculated by the authentication information calculation unit 221 to the other function expansion device 102 and / or the main apparatus 101. Further, the transmission / reception unit 222 receives the authentication target information transmitted by the other function expansion device 102.

  The authentication information calculation unit 223 (223a, 223b) calculates different authentication information for each authentication process based on a predetermined rule. The authentication information is authentication information for authenticating another device (for example, another function expansion device 102). For example, the authentication information calculation unit 223 calculates the authentication information using an identification value for identifying a procedure of the authentication process and a change value that changes for each authentication process.

  The determination unit 224 (224a, 224b) authenticates the validity of the other function expansion device 102 based on the authentication target information received by the transmission / reception unit 222 and the authentication information calculated by the authentication information calculation unit 223. Determine whether or not. For example, when the authentication target information received by the transmission / reception unit 222 matches the authentication information calculated by the authentication information calculation unit 223, the determination unit 224 authenticates the validity of the other function expansion device 102.

  Next, a functional configuration of the main apparatus 101 will be described. The reception unit 211 receives the authentication target information transmitted by the transmission / reception unit 222 of the function expansion device 102. The receiving unit 211 may receive the authentication target information from both the function expansion devices 102a and 102b, or may receive the authentication target information from only one of them.

  The authentication information calculation unit 212 calculates different authentication information for each authentication process based on a predetermined rule. The authentication information is authentication information for authenticating the function expansion device 102. For example, the authentication information calculation unit 212 calculates authentication information using an identification value for identifying a procedure of the authentication process and a change value that changes for each authentication process.

  The determination unit 213 determines whether or not to authenticate the validity of the function expansion device 102 based on the authentication target information received by the reception unit 211 and the authentication information calculated by the authentication information calculation unit 212. For example, when the authentication target information received by the reception unit 211 matches the authentication information calculated by the authentication information calculation unit 212, the determination unit 213 authenticates the validity of the function expansion device 102.

  In the authentication system 100, when the determination unit 213 or the determination unit 224 determines that the validity of the function expansion device 102 is not authenticated, the authentication system 100 notifies the determination, or the main apparatus 101 or the function expansion device 102 You may provide the structure which performs control which stops at least any one operation | movement among them.

(Authentication process by the authentication system 100)
Next, authentication processing by the authentication system 100 will be described. As described above, the authentication system 100 performs authentication processing between the main apparatus 101 and the function expansion device 102 every predetermined time, and whether the function expansion device 102 attached to the main apparatus 101 is a genuine product. Authenticate whether or not. Details of this authentication process will be described below.

  As a premise for performing the authentication process, the main apparatus 101 and each function expansion device 102 can generate the same data S and B based on the same rule. That is, if a rule shared between the main apparatus 101 and the function expansion device 102a is a rule Ra, both the main apparatus 101 and the function expansion device 102a are based on the rule Ra, and the same data S (hereinafter, “ Data Sa ”) and B (hereinafter referred to as“ Data Ba ”) can be generated. Further, if a rule shared between the main apparatus 101 and the function expansion device 102b is a rule Rb, the main apparatus 101 and the function expansion device 102b are both based on the rule Rb, and the same data S (hereinafter, “ Data Sb ") and B (hereinafter referred to as" data Bb ").

  Here, the data S is a value generated to identify the procedure. Specifically, for example, data S is generated by performing an operation using a hash function on a data array for procedure identification. Further, for example, the data S may be generated by performing an operation with a hash function on two values of a serial number and a manufacturer number. Further, for example, the data S may be generated by performing an arithmetic operation using at least one arithmetic expression for any two values embedded in a program code or the like.

The data B is a dynamic value embedded in the procedure. For example, a change procedure is defined between the main apparatus 101 and the function expansion device 102, and is changed every authentication process. Hereinafter, the value of data B used for the (k + 1) -th authentication process is denoted as B _k (Ba _k , Bb _k ). That is, the value of data B used for the first (first) authentication process is B ₀ , and the value of data B used for the second authentication process is B ₁ .

Data B _k, for example, is determined in advance an initial value, to calculate the data B _k of the current authentication time by performing any operation on the value of data B _k of the last authentication for each authentication processing. More specifically, for example, 1 is added to the value at the previous authentication (B _{k + 1} = B _k +1), or 1 is subtracted from the value at the previous authentication for each authentication process (B _{k + 1} = B _k). -1). The data S and B _k are values that cannot be easily estimated by others.

The data S and B generated by each of the function expansion devices 102a and 102b may be the same. That is, data Sa = data Sb and data Ba _k = data Bb _k may be set. Alternatively, the main device 101 and the function expansion devices 102a and 102b may generate the same data S and _Bk . For example, by sharing the rule Ra and the rule Rb between the main apparatus 101 and the function expansion devices 102a and 102b, the main apparatus 101 and the function expansion devices 102a and 102b have the same data S and B. _k may be generated. Further, for example, the rule Ra and the rule Rb may be the same rule, and the main device 101 and the function expansion devices 102a and 102b may generate the same data S and _Bk .

  Hereinafter, authentication methods 1 to 6 will be described as authentication methods by the authentication system 100. In the following description, the main apparatus 101 is referred to as “authenticator”, the function expansion device 102 a as “authenticated person a”, and the function expansion device 102 b as “authenticated person b”.

(Authentication method 1)
FIG. 3 is an explanatory diagram showing an outline of the authentication method 1. In the authentication method 1, the person to be authenticated a calculates authentication data Va _k, and transmits to the authenticator (in FIG. 3 (i)). In addition, the person to be authenticated b is
Authentication data Vb _k is calculated and transmitted to the authenticator ((ii) in FIG. 3). The authenticator authenticates the authentication data Va _k and Vb _k transmitted from the authenticator a and the person to be authenticated b (in FIG. 3 (iii)). That is, the authenticator, the authentication data Va _k if 'calculates authentication data Vak received from the authenticated user a verification data Va _k' equals authenticates the person to be authenticated a. Further, the authenticator calculates authentication data Vb _k ′, and authenticates the person to be authenticated b when the authentication data Vb _k received from the person to be authenticated b and the authentication data Vb _k ′ are equal.

Here, the authentication data Va _k , Vb _k , Va _k ′, Vb _k ′ are represented by the following formulas (1) to (4). h is a process that is difficult to perform an inverse operation, for example, an operation using a hash function. The use of arguments is optional.
Va _k = h (Sa, Ba ₀ , Ba ₁ ... Ba _k ) (1)
Vb _k = h (Sb, Bb ₀ , Bb ₁ ... Bb _k ) (2)
Va _k ′ = h (Sa ′, Ba ₀ ′, Ba ₁ ′… Ba _k ′) (3)
Vb _k ′ = h (Sb ′, Bb ₀ ′, Bb ₁ ′... Bb _k ′) (4)

  Authentication data transmission / reception between the authenticator (main apparatus 101) and the person to be authenticated (function expansion device 102) is a data transmission / reception signal (eg, data from the function expansion device 102 to the main apparatus 101) during normal processing. The authentication data may be included in a partial area of a transfer signal or the like, or only the authentication data may be transmitted and received.

In the above formulas (1) to (4), data S and B generated by the person to be authenticated a based on the rule Ra are _defined as data Sa and Bak. Further, the data S and B generated by the person to be authenticated b based on the rule Rb are _defined as data Sb and Bb _k . The data S that the authenticator generated based on rules Ra, B data Sa ', Ba _k' and. Further, the data S and B generated by the authenticator based on the rule Rb are _defined as data Sb ′ and Bb _k ′.

FIG. 4 is a sequence diagram of the first authentication process by the authentication method 1. In FIG. 4, a part surrounded by a dotted line is a single authentication process step. First, the person to be authenticated a generates data Sa and Ba ₀ (step S401) and calculates authentication data Va ₀ (step S402). Then, the person to be authenticated a transmits the authentication data Va ₀ to the authenticator (Step S403). Here, the authentication data Va ₀ = h (Sa, Ba ₀ ). Further, the person to be authenticated b generates data Sb and Bb ₀ (step S404) and calculates authentication data Vb ₀ (step S405). Then, the person to be authenticated b transmits the authentication data Vb ₀ to the authenticator (Step S406). Here, the authentication data Vb ₀ = h (Sb, Bb ₀ ).

The authenticator generates data Sa ′, Ba ₀ ′, Sb ′, Bb ₀ ′ (step S407), and calculates authentication data Va ₀ ′, Vb ₀ ′ (step S408). Here, the authentication data Va ₀ ′ = h (Sa ′, Ba ₀ ′). Further, the authentication data Vb ₀ ′ = h (Sb ′, Bb ₀ ′).

The authenticator, when the authentication data Va ₀ received from the person to be authenticated a authentication data Va ₀ 'are equal, authenticating the authentication data Va _0. That is, it authenticates that the person to be authenticated a has a legitimate authority (a genuine product). If the authentication data Vb ₀ received from the person to be authenticated b is equal to the authentication data Vb ₀ ′, the authentication data Vb ₀ is authenticated. That is, it is authenticated that the person to be authenticated b has a legitimate authority (genuine product) (step S409). The order in which the authentication data Va ₀ ′ and Vb ₀ ′ are generated and the order in which the authenticated users a and b are authenticated are not limited.

  When the authentication data transmitted from the person to be authenticated is not equal to the authentication data generated by itself, the authenticator performs some processing to notify the user that an unauthorized device is connected. For example, a warning is displayed on the display screen or a warning message is transmitted to a predetermined address.

Thereafter, the authentication system 100 performs the same processing every predetermined time, and sequentially verifies whether or not the person to be authenticated is a person having a valid authority. In the (k + 1) th authentication process, authentication data V _k = h (S, B ₀ , B ₁ ... B _k ) (subscripts such as a and b are omitted).

  As described above, in the authentication method 1, each person to be authenticated transmits authentication data to the authenticator and receives authentication from the authenticator. The person to be authenticated may generate authentication data based on a rule shared with each authenticator. In addition, it is sufficient that at least one-way communication from the person to be authenticated a and b to the authenticator is performed, and the present invention can also be applied when the communication direction is restricted inside the authentication system 100. Further, since the authentication data value changes with each authentication process, the authentication strength can be improved.

(Authentication method 2)
FIG. 5 is an explanatory diagram showing an outline of the authentication method 2. In the authentication method 1, the authenticator authenticates each of the users to be authenticated a and b. In the authentication method 2, the user to be authenticated a authenticates the person to be authenticated b, and the authenticator authenticates the person to be authenticated b. As a premise of the authentication method 2, it is assumed that the authenticator and the authenticated persons a and b can generate the data S and B based on the same rule. That is, it is assumed that the rule Ra and the rule Rb for generating the data S and B are shared between the authenticator and the person to be authenticated a and b, or the rule Ra and the rule Rb are equal.

Authentication method 2, the person to be authenticated a calculates the authentication data Va _k first transmits to the authentication subject b (in FIG. 5 (i)). A person to be authenticated b that has received the authentication data Va _k authenticates the authentication data Va _k (in FIG. 5 (ii)). That is, the person to be authenticated b, the authentication data Va _k 'is calculated and compared with the authentication data Va _k received, the authentication data Va _k authentication data Va _k' when are equal, the authentication data Va _k ( The person to be authenticated a) is authenticated. Also, the person to be authenticated b uses the authentication data Va _k calculates authentication data Vb _k, and transmits to the authenticator (in FIG. 5 (iii)). Certifier, which has received the authentication data Vb _k authenticates the authentication data Vb _k. That is, authenticator 'calculates, further authentication data Vb _k' authentication data Va k _'is calculated and compared with the authentication data Vb _k received, but the authentication data Vb _k and authentication data Vb _k' If they are equal, the person to be authenticated b is authenticated ((iv) in FIG. 5).

Here, the authentication data Va _k , Va _k ′, Va _k ″, Vb _k , Vb _k ′ are represented by the following formulas (5) to (9). h is a process that is difficult to perform an inverse operation, for example, an operation using a hash function. The use of arguments is optional.
Va _k = h (Sa, Ba ₀ , Ba ₁ ... Ba _k ) (5)
Va _k ′ = h (Sa ′, Ba ₀ ′, Ba ₁ ′… Ba _k ′) (6)
Va _k ″ = h (Sa ″, Ba ₀ ″, Ba ₁ ″,... Ba _k ″) (7)
_{Vb k = h (Va k,} Sb, Bb 0, Bb 1 ··· Bb k) ··· (8)
Vb _k ′ = h (Va _k ″, Sb ′, Bb ₀ ′, Bb ₁ ′ ... Bb _k ′) (9)

In the above formula (5) to (9), data S authentication subject a is generated based on the rule Ra, the B data Sa, and Ba _k. Further, the data S and B generated by the person to be authenticated b based on the rule Ra are _defined as data Sa ′ and Bak ′. The data S that the authenticator generated based on rules Ra, B data Sa '', Ba k _'and'. Further, the data S and B generated by the person to be authenticated b based on the rule Rb are _defined as data Sb and Bb _k . Further, the data S and B generated by the authenticator based on the rule Rb are _defined as data Sb ′ and Bb _k ′.

FIG. 6 is a sequence diagram of the first authentication process by the authentication method 2. In FIG. 6, a portion surrounded by a dotted line is a step of authentication processing for one time. First, the person to be authenticated a generates data Sa and Ba ₀ (step S601), calculates authentication data Va ₀ (step S602), and transmits the authentication data Va ₀ to the person to be authenticated b (step S603). . Here, the authentication data Va ₀ = h (Sa, Ba ₀ ).

Next, the person to be authenticated b generates data Sa ′ and Ba ₀ ′ (step S604), and calculates authentication data Va ₀ ′ (step S605). The person to be authenticated b, when authentication data Va ₀ received from the person to be authenticated a is equal to the authentication data Va ₀ 'authenticates the authentication data Va ₀ (step S606). That is, it authenticates that the person to be authenticated a has a legitimate authority (a genuine product). If the authentication data transmitted from the person to be authenticated a is not equal to the authentication data generated by the person to be authenticated a, the person to be authenticated b performs some processing to notify the user that an unauthorized device is connected. To do.

Next, the person to be authenticated b generates data Sb and Bb ₀ (step S607), and calculates authentication data Vb ₀ (step S608). Here, the authentication data Vb ₀ = h (Va ₀ , Sb, Bb ₀ ). Then, the person to be authenticated b transmits the authentication data Vb ₀ to the authenticator (step S609).

The authenticator who has received the authentication data Vb ₀ first generates data Sa ″, Ba ₀ ″ and calculates authentication data Va ₀ ″. Here, the authentication data Va ₀ ″ = h (Sa ″, Ba ₀ ″). Further, data Sb ′ and Bb ₀ ′ are generated (step S610), and authentication data Vb ₀ ′ is calculated using the data Sb ′, Bb ₀ ′ and authentication data Va ₀ ″ (step S611). Here, the authentication data Vb ₀ ′ = h (Va ₀ ″, Sb ′, Bb ₀ ′).

If the authentication data Vb ₀ received from the person to be authenticated b is equal to the authentication data Vb ₀ ′, the authenticator authenticates the authentication data Vb ₀ (step S612). That is, it authenticates that the person to be authenticated b has a legitimate authority (a genuine product). If the authentication data transmitted from the person to be authenticated b is not equal to the authentication data generated by the person to be authenticated b, the authenticator performs some processing to notify the user that an unauthorized device is connected. Thereafter, the authentication system 100 performs the same processing every predetermined time, and sequentially verifies whether or not the person to be authenticated is a person having a valid authority.

  Thus, in the authentication method 2, the person to be authenticated a transmits the authentication data to the person to be authenticated b and receives authentication from the person to be authenticated b. In addition, the person to be authenticated b transmits authentication data to the authenticator and receives authentication from the authenticator. For this reason, the processing load for performing the authentication process can be distributed to each device of the authentication system 100.

  The authentication data generated by the person to be authenticated b includes the authentication data generated by the person to be authenticated a. When the authenticator authenticates the person to be authenticated b, the authenticity of the person to be authenticated a is simultaneously verified. Can also be authenticated. Further, it is only necessary to perform one-way communication from the person to be authenticated a to the person to be authenticated b, and it is only necessary to perform one-way communication from the person to be authenticated b to the authenticator. Therefore, the present invention can also be applied when the communication direction is restricted inside the authentication system 100.

(Authentication method 3)
FIG. 7 is an explanatory diagram showing an outline of the authentication method 3. In the authentication method 2, the person to be authenticated a is authenticated by the person to be authenticated b, and the person to be authenticated is authenticated by the certifier, but in the method 3, the person to be authenticated b is authenticated by the person to be authenticated a, The authenticator authenticates the person a. As a premise of the authentication method 3, it is assumed that, similarly to the authentication method 2, the data S and B can be generated based on the same rule by the three parties of the authenticator and the users to be authenticated a and b.

In the authentication method 3, first, the person to be authenticated b calculates the authentication data Vb _k and transmits it to the person to be authenticated a ((i) in FIG. 7). A person to be authenticated a received authentication data Vb _k authenticates the authentication data Vb _k (in FIG. 7 (ii)). That is, the person to be authenticated a, the authentication data Vb _k 'is calculated and compared with the authentication data Vb _k received, the authentication data Vb _k authentication data Vb _k' when are equal, the authentication data Vb _k ( The person to be authenticated b) is authenticated. Also, the person to be authenticated a is using the authentication data Vb _k calculates authentication data Va _k, and transmits to the authenticator (in FIG. 7 (iii)). Authenticator that has received the authentication data Va _k authenticates the authentication data Va _k. That is, authenticator 'calculates, further authentication data Va _k' authentication data Vb k _'is calculated and compared with the authentication data Va _k received, but the authentication data Va _k and authentication data Va _k' If they are equal, the authentication data Va _k (authenticated person a) is authenticated ((iv) in FIG. 7).

Here, the authentication data Vb _k , Vb _k ′, Vb _k ″, Va _k , Va _k ′ are represented by the following formulas (10) to (14). h is a process that is difficult to perform an inverse operation, for example, an operation using a hash function. The use of arguments is optional.
Vb _k = h (Sb, Bb ₀ , Bb ₁ ... Bb _k ) (10)
Vb _k ′ = h (Sb ′, Bb ₀ ′, Bb ₁ ′ ... Bb _k ′) (11)
Vb _k ″ = h (Sb ″, Bb ₀ ″, Bb ₁ ″,... Bb _k ″) (12)
Va _k = h (Vb _k , Sa, Ba ₀ , Ba ₁ ... Ba _k ) (13)
Va _k ′ = h (Vb _k ″, Sa ′, Ba ₀ ′, Ba ₁ ′ ... Ba _k ′) (14)

In the above formulas (10) to (14), data S and B generated by the person to be authenticated b based on the rule Rb are _defined as data Sb and Bb _k . Further, the data S and B generated by the person to be authenticated a based on the rule Rb are _defined as data Sb ′ and Bb _k ′. Further, the data S and B generated by the authenticator based on the rule Rb are _defined as data Sb ″ and Bb _k ″. Further, data S, the B data Sa, and Ba _k generated by the person to be authenticated a. The data S that the authenticator generated based on rules Ra, B data Sa ', Ba _k' and.

FIG. 8 is a sequence diagram of the first authentication process by the authentication method 3. First, the person to be authenticated b generates data Sb and Bb ₀ (step S801), calculates authentication data Vb ₀ (step S802), and transmits the authentication data Vb ₀ to the person to be authenticated a (step S803). . Here, the authentication data Vb ₀ = h (Sb, Bb ₀ ).

Next, the person to be authenticated a generates data Sb ′, Bb ₀ ′ (step S804), and calculates authentication data Vb ₀ ′ (step S805). If the authentication data Vb ₀ received from the user b to be authenticated is equal to the authentication data Vb ₀ ′, the person to be authenticated a authenticates the authentication data Vb ₀ (step S806). That is, it authenticates that the person to be authenticated b has a legitimate authority (a genuine product). If the authentication data transmitted from the person to be authenticated b is not equal to the authentication data generated by the person to be authenticated b, the person to be authenticated a performs some processing to notify the user that an unauthorized device is connected. To do.

Next, the person to be authenticated a generates data Sa and Ba ₀ (step S807), and calculates authentication data Va ₀ (step S808). Here, the authentication data Va ₀ = h (Vb ₀ , Sa, Ba ₀ ). Then, the person to be authenticated a transmits the authentication data Va ₀ to the authenticator (step S809).

The authenticator who has received the authentication data Va ₀ first generates data Sb ″, Bb ₀ ″ and calculates authentication data Vb ₀ ″. Here, the authentication data Vb ₀ ″ = h (Sb ″, Bb ₀ ″). Further, data Sa ′ and Ba ₀ ′ are generated (step S810), and authentication data Va ₀ ′ is calculated using the data Sa ′, Ba ₀ ′ and authentication data Vb ₀ ″ (step S811). Here, the authentication data Va ₀ ′ = h (Vb ₀ ″, Sa ′, Ba ₀ ′).

When the authentication data Va ₀ received from the person to be authenticated a is equal to the authentication data Va ₀ ′, the authenticator authenticates the authentication data Va ₀ (step S812). That is, it authenticates that the person to be authenticated a has a legitimate authority (a genuine product). In addition, when the authentication data transmitted from the person to be authenticated a and the authentication data generated by itself are not equal, the authenticator performs some processing to notify the user that an unauthorized device is connected. Thereafter, the authentication system 100 performs the same processing every predetermined time, and sequentially verifies whether or not the person to be authenticated is a person having a valid authority.

  As described above, in the authentication method 3, the person to be authenticated b transmits authentication data to the person to be authenticated a and receives authentication from the person to be authenticated a. Further, the person to be authenticated a transmits authentication data to the authenticator and receives authentication from the authenticator. For this reason, as in the authentication method 2, the processing load for performing the authentication process can be distributed to each device of the authentication system 100.

  Further, the authentication data generated by the person to be authenticated a includes authentication data generated by the person to be authenticated b, and the authenticator authenticates the person to be authenticated a. Can also be authenticated. Further, one-way communication may be performed from the person to be authenticated b to the person to be authenticated a, and one-way communication from the person to be authenticated a to the authenticator may be performed. Therefore, the present invention can also be applied to a case where the communication direction is restricted inside the authentication system 100 as in the authentication method 2.

(Authentication method 4)
FIG. 9 is an explanatory diagram showing an outline of the authentication method 4. In the authentication method 4, authentication is performed between the person to be authenticated a and the person to be authenticated b without going through an authenticator. As a premise of the authentication method 4, it is assumed that the authenticated persons a and b can generate the data S and B based on the same rule. That is, it is assumed that the rule Ra and the rule Rb for generating the data S and B are shared between the users to be authenticated a and b, or the rule Ra and the rule Rb are equal.

In the authentication method 4, the person to be authenticated a calculates the authentication data Va _k first transmits to the authentication subject b (in FIG. 9 (i)). A person to be authenticated b that has received the authentication data Va _k authenticates the authentication data Va _k (in FIG. 9 (ii)). That is, the person to be authenticated b, the authentication data Va _k 'generates, received as compared with the authentication data Va _k, the authentication data Va _k authentication data Va _k' when are equal, the authentication data Va _k ( The person to be authenticated a) is authenticated. In addition, the person to be authenticated b calculates the authentication data Vb _k and transmits it to the person to be authenticated a ((iii) in FIG. 9). A person to be authenticated a received authentication data Vb _k authenticates the authentication data Vb _k (in FIG. 9 (iv)). That is, the person to be authenticated a, the authentication data Vb _k 'is calculated and compared with the authentication data Vb _k received, the authentication data Vb _k authentication data Vb _k' when are equal, the authentication data Vb _k ( The person to be authenticated b) is authenticated.

Here, the authentication data Va _k , Va _k ′, Vb _k , Vb _k ′ are expressed by the following formulas (15) to (18). h is a process that is difficult to perform an inverse operation, for example, an operation using a hash function. The use of arguments is optional.
Va _k = h (Sa, Ba ₀ , Ba ₁ ... Ba _k , P) (15)
Va _k ′ = h (Sa ′, Ba ₀ ′, Ba ₁ ′… Ba _k ′, P) (16)
Vb _k = h (Sb, Bb ₀ , Bb ₁ ... Bb _k , P) (17)
Vb _k ′ = h (Sb ′, Bb ₀ ′, Bb ₁ ′,... Bb _k ′, P) (18)

In the above formulas (15) to (18), data S and B generated by the person to be authenticated a based on the rule Ra are _defined as data Sa and Bak. The data data Sa of the person to be authenticated b is generated based on the rule Ra ', Ba _k' and. Further, the data S and B generated by the person to be authenticated b based on the rule Rb are _defined as data Sb and Bb _k . Further, data generated by the person to be authenticated a based on the rule Rb is _defined as data Sb ′ and Bb _k ′. Also, let P be a value relating to processing common to the person to be authenticated a and person b to be authenticated.

  As described above, in the authentication method 4, authentication can be performed between the person to be authenticated a and the person to be authenticated b without going through an authenticator. For example, a more reliable authentication process can be performed by combining the authentication methods 1 to 3 and the authentication method 4.

(Authentication method 5)
FIG. 10 is an explanatory diagram showing an outline of the authentication method 5. The authentication method 5 is an authentication method that combines the authentication methods 1 to 4 described so far. Authentication Method 5, first, the person to be authenticated a is, authenticator and calculates authentication data Va _k for receiving authentication from the authenticator b, and transmits to the person to be authenticated b and the authenticator (in FIG. 10 (i ) (Ii)). A person to be authenticated b that has received the authentication data Va _k authenticates the authentication data Va _k (in FIG. 10 (iii)). That is, the person to be authenticated b, the authentication data Va _k if 'generates, and authentication data Va _k received from the person to be authenticated a authentication data Va _k' are equal, the authentication data Va _k (a person to be authenticated a ). Also, the person to be authenticated b uses the authentication data Va _k, calculates authentication data Vb _k for authentication from the authenticator, and transmits to the authenticator (in FIG. 10 (iv)).

Authentication data Va _k and Vb _k receives the authenticator authenticates the authentication data Va _k and Vb _k (in FIG. 10 (v) (vi)) . That is, the authenticator, the authentication data Va k _'' generates, as compared with the authentication data Va _k received from the person to be authenticated a, the authentication data Va _k authentication data Va k _'when the' are equal, Authentication data Va _k (authenticated person a) is authenticated. Further, the authenticator generates authentication data Vb _k ′ using the authentication data Va _k ″, compares the authentication data Vb _k received from the person to be authenticated b, and compares the authentication data Vb _k with the authentication data Vb _k ′. Are equal to each other, authentication data Vb _k (authenticated person b) is authenticated.

Here, the authentication data Va _k , Va _k ′, Va _k ″, Vb _k , Vb _k ′ are represented by, for example, the following formulas (19) to (23). h is a process that is difficult to perform an inverse operation, for example, an operation using a hash function. The use of arguments is optional.
Va _k = h (Sa, Ba ₀ , Ba ₁ ... Ba _k ) (19)
Va _k ′ = h (Sa ′, Ba ₀ ′, Ba ₁ ′… Ba _k ′) (20)
Va _k ″ = h (Sa ″, Ba ₀ ″, Ba ₁ ″... Ba _k ″) (21)
_{Vb k = h (Va k,} Sb, Bb 0, Bb 1 ··· Bb k) ··· (22)
Vb _k ′ = h (V _ak ″, Sb ′, Bb ₀ ′, Bb ₁ ′ ... Bb _k ′) (23)

In the above formula (19) to (23), data S authentication subject a is generated based on the rule Ra, the B data Sa, and Ba _k. Further, the data S and B generated by the person to be authenticated b based on the rule Ra are _defined as data Sa ′ and Bak ′. The data S that the authenticator generated based on rules Ra, B data Sa '', Ba k _'and'. Further, the data S and B generated by the person to be authenticated b based on the rule Rb are _defined as data Sb and Bb _k . Further, the data S and B generated by the authenticator based on the rule Rb are _defined as data Sb ′ and Bb _k ′.

FIG. 11 is a sequence diagram of the first authentication process by the authentication method 5. In FIG. 11, a portion surrounded by a dotted line is a step of authentication processing for one time. First, the person to be authenticated a generates data Sa and Ba ₀ (step S1101) and calculates authentication data Va ₀ (step S1102). Here, the authentication data Va ₀ = h (Sa, Ba ₀ ). Next, the person to be authenticated a transmits the authentication data Va ₀ to the authenticator and the person to be authenticated b (step S1103).

Next, the person to be authenticated b generates data Sa ′ and Ba ₀ ′ (step S1104), and calculates authentication data Va ₀ ′ (step S1105). Here, the authentication data Va ₀ ′ = h (Sa ′, Ba ₀ ′). The person to be authenticated b, when authentication data Va ₀ received from the person to be authenticated a is equal to the authentication data Va ₀ 'authenticates the authentication data Va ₀ (step S1106). That is, it authenticates that the person to be authenticated a has a legitimate authority (a genuine product). If the authentication data transmitted from the person to be authenticated a is not equal to the authentication data generated by the person to be authenticated a, the person to be authenticated b performs some processing to notify the user that an unauthorized device is connected. To do.

Next, the person to be authenticated b generates data Sb, Bb ₀ (step S1107) and calculates authentication data Vb ₀ (step S1108). Here, the authentication data Vb ₀ = h (Va ₀ , Sb, Bb ₀ ). Then, the person to be authenticated b transmits the authentication data Vb ₀ to the authenticator (step S1109).

The authenticator generates data Sa ″ and Ba ₀ ″ (step S1110), and calculates authentication data Va ₀ ″ (step S1111). Here, the authentication data Va ₀ ″ = h (Sa ″, Ba ₀ ″). The authenticator, if authentication data Va ₀ transmitted from a person to be authenticated a is equal to the authentication data Va ₀ '' authenticates the authentication data Va ₀ (step S1112). That is, it authenticates that the person to be authenticated a has a legitimate authority (a genuine product). Note that if the authentication data transmitted from the person to be authenticated a and the authentication data generated by himself / herself are not equal, the authenticator performs some processing to notify the user that an unauthorized device is connected.

Further, the authenticator generates data Sb ′ and Bb ₀ ′ (step S1113) and calculates authentication data Vb ₀ ′ (step S1114). Here, the authentication data Vb ₀ ′ = h (Va ₀ ″, Sb ′, Bb ₀ ′).

If the authentication data Vb ₀ received from the person to be authenticated b is equal to the authentication data Vb ₀ ′, the authenticator authenticates the authentication data Vb ₀ (step S1115). That is, it authenticates that the person to be authenticated b has a legitimate authority (a genuine product). If the authentication data transmitted from the person to be authenticated b is not equal to the authentication data generated by the person to be authenticated b, the authenticator performs some processing to notify the user that an unauthorized device is connected. Thereafter, the authentication system 100 performs the same processing every predetermined time, and sequentially verifies whether or not the person to be authenticated is a person having a valid authority.

  Thus, in the authentication method 5, the authentication data generated by the person to be authenticated a is transmitted to the person to be authenticated b and the person to be authenticated. Since the person to be authenticated b and the person to be authenticated perform authentication using the authentication data directly received from the person to be authenticated a, more reliable authentication processing can be performed.

(Authentication method 6)
FIG. 12 is an explanatory diagram showing an outline of the authentication method 6. In the authentication method 6, as in the authentication method 5, authentication is performed by combining the authentication methods 1 to 4, but the person to be authenticated a is authenticated by the authentication person and the authentication data for receiving authentication from the person to be authenticated b. The authentication data for receiving each is calculated.

First, the person to be authenticated a calculates the authentication data Vai _k for receiving authentication from the authenticator b, and transmits the authentication subject b (in FIG. 12 (i)). Also, the person to be authenticated a calculates authentication data VAII _k for authentication from the authenticator, and transmits to the authenticator (in FIG. 12 (ii)). A person to be authenticated b that has received the authentication data Vai _k, when 'is calculated, and the authentication data Vai _k received authentication data Vai _k' authentication data Vai _k are equal, the authentication data Vai _k (a person to be authenticated a ) Is authenticated ((iii) in FIG. 12). Also, the person to be authenticated b uses the authentication data Vai _k, calculates authentication data Vb _k for authentication from the authenticator, and transmits to the authenticator (in FIG. 12 (iv)).

The authentication who has received the authentication data VAII _k, the authentication data VAII _k 'is calculated and compared with the authentication data VAII _k received from the person to be authenticated a, the authentication data VAII _k authentication data VAII _k' is a If they are equal, authentication data Vaii _k (authenticated person a) is authenticated ((v) in FIG. 12). Further, the authenticator calculates the authentication data Vai _k ″ to calculate the authentication data Vb _k ′, compares the authentication data Vb _k received from the person to be authenticated b, and compares the authentication data Vb _k with the authentication data Vb _k. If 'is equal, authentication data Vb _k (authenticated person b) is authenticated ((vi) in FIG. 12).

Here, the authentication data _{Vai k, Vaii k, Vai k} ', Vaii k', Vai k '', V
b _k and Vb _k ′ are represented by, for example, the following formulas (24) to (30). h is a process that is difficult to perform an inverse operation, for example, an operation using a hash function. The use of arguments is optional.
Vai _k = h (Sa, Ba ₀ , Ba ₁ ... Ba _k ) (24)
Vaii _k = h (Sa, Ba ₁ , Ba2... Ba _{k + 1} ) (25)
Vai _k '= h (Sa', Ba ₀ ', Ba ₁ ' ... Ba _k ') (26)
Vaii _k ′ = h (Sa ″, Ba ₁ ″, Ba2 ″... Ba _{k + 1} ″).
(27)
Vai _k ″ = h (Sa ″, Ba ₀ ″, Ba ₁ ″... Ba _k ″).
(28)
Vb _k = h (Vai _k , Sb, Bb ₀ , Bb ₁ ... Bb _k ) (29)
Vb _k '= h (Vai _k ', Sb ', Bb ₀ ', Bb ₁ '... Bb _k ') ...
(30)

In the above formula (24) - (30), data S authentication subject a is generated based on the rule Ra, the B data Sa, and Ba _k. Further, the data S and B generated by the person to be authenticated b based on the rule Ra are _defined as data Sa ′ and Bak ′. The data S that the authenticator generated based on rules Ra, B data Sa '', Ba k _'and'. Further, the data S and B generated by the person to be authenticated b based on the rule Rb are _defined as data Sb and Bb _k . Further, the data S and B generated by the authenticator based on the rule Rb are _defined as data Sb ′ and Bb _k ′.

FIG. 13 is a sequence diagram of the first authentication process by the authentication method 6. In FIG. 13, a portion surrounded by a dotted line is a step of authentication processing for one time. First, the person to be authenticated a generates data Sa and Ba ₀ (step S1301), and calculates authentication data Vai ₀ (step S1302). Then, the authentication data Vai ₀ is transmitted to the person to be authenticated b (step S1).
303). Here, the authentication data Vai ₀ = h (Sa, Ba ₀ ). In addition, the person to be authenticated a
Further, data Ba ₁ is generated (step S1304), authentication data Vaii ₀ is calculated (step S1305), and authentication data Vii ₀ is transmitted to the authenticator (step S1306). Here, authentication data Vaii ₀ = h (Sa, Ba ₁ ).

Next, the person to be authenticated b generates data Sa ′ and Ba ₀ ′ (step S1307) and calculates authentication data Vai ₀ ′ (step S1308). Here, the authentication data Vai ₀ ′
= H (Sa ′, Ba ₀ ′). The person to be authenticated b, when authentication data Vai ₀ received from the person to be authenticated a is equal to the authentication data Vai ₀ 'authenticates the authentication data Vai ₀ (step S1309). That is, it authenticates that the person to be authenticated a has a legitimate authority (a genuine product). If the authentication data transmitted from the person to be authenticated a is not equal to the authentication data generated by the person to be authenticated a, the person to be authenticated b performs some processing to notify the user that an unauthorized device is connected. To do.

Subsequently, the person to be authenticated b generates data Sb, Bb ₀ (step S1310) and calculates authentication data Vb ₀ (step S1311). Here, the authentication data Vb ₀ = h (Vai ₀ , Sb, Bb ₀ ). Then, the person to be authenticated b transmits the authentication data Vb ₀ to the authenticator (step S1312).

The authenticator generates data Sa ″ and Ba ₁ ″ (step S1313), and calculates authentication data Vaii ₀ ′ (step S1314). Here, authentication data Vaii ₀ ′ = h (Sa ″, Ba ₁ ″). Then, if the authentication data Vaii ₀ transmitted from the person to be authenticated a is equal to the authentication data Vaii ₀ ′, the authenticator authenticates the authentication data Vaii ₀ (step S1315). That is, it authenticates that the person to be authenticated a has a legitimate authority (a genuine product). Note that if the authentication data transmitted from the person to be authenticated a and the authentication data generated by himself / herself are not equal, the authenticator performs some processing to notify the user that an unauthorized device is connected.

Subsequently, the authenticator generates data Ba ₀ ″ and calculates authentication data Vai ₀ ″. Here, the authentication data Vai ₀ ″ = h (Sa ″, Ba ₀ ″). The authenticator further generates data Sb ′ and Bb ₀ ′ (step S1316), and calculates authentication data Vb ₀ ′ (step S1317). Here, the authentication data Vb ₀ ′ = h (Vai ₀ ″, Sb ′, Bb ₀ ′).

If the authentication data Vb ₀ received from the person to be authenticated b is equal to the authentication data Vb ₀ ′, the authenticator authenticates the authentication data Vb ₀ (step S1318). That is, it authenticates that the person to be authenticated b has a legitimate authority (a genuine product). If the authentication data transmitted from the person to be authenticated b is not equal to the authentication data generated by the person to be authenticated b, the authenticator performs some processing to notify the user that an unauthorized device is connected. Thereafter, the authentication system 100 performs the same processing every predetermined time, and sequentially verifies whether or not the person to be authenticated is a person having a valid authority.

  Thus, in the authentication method 6, the person to be authenticated a transmits different authentication data to the person to be authenticated b and the person to be authenticated. Since the person to be authenticated b and the authenticator perform authentication processing using the authentication data transmitted to each of them, the strength of authentication can be further increased.

As shown in FIG. 14, in the authentication method 5 or 6, the person to be authenticated a and the person to be authenticated b may be interchanged. FIG. 14 is an explanatory diagram showing an outline of another form of the authentication method 5 or 6. First, the person to be authenticated b calculates the authentication data Vb _k (or the authentication data Vbi _k for receiving authentication from the person to be authenticated a and the authentication data Vbi _k for receiving authentication from the authenticator). The authentication data thus transmitted is transmitted to the person to be authenticated a and the person to be authenticated ((i) (ii) in FIG. 14).

The person to be authenticated a calculates authentication data Vb _k ′ or authentication data Vbi _k ′. If the calculated data is equal to the authentication data Vb _k or the authentication data Vbi _k received from the user b, the authenticated person a authenticates the authentication data Vb _k or the authentication data Vbi _k (authenticated person b). ((Iii) in FIG. 14). Also, the person to be authenticated a is using the authentication data Vb _k or authentication data Vbi _k, calculates authentication data Va _k for authentication from the authenticator, and transmits to the authenticator (in FIG. 14 (iv)) .

The authenticator calculates authentication data Vb _k ′ or authentication data Vbi _k ′. If the calculated data is equal to the authentication data Vb _k or the authentication data Vbi _k received from the person to be authenticated b, the authentication data Vb _k or the authentication data Vbi _k (the person to be authenticated b) is authenticated (in FIG. 14 (
v)). Further, authenticator 'calculates the authentication data Va _k' authentication data Vbi k _'generates, as compared with the authentication data Va _k received from the person to be authenticated a, authentication data Va _k and authentication data Va _k 'and if the equal authenticates the authentication data Va _k (person to be authenticated a) (in FIG. 14 (vi)). Thereby, the process similar to the authentication method 5 or 6 can be performed.

(Processing when there are multiple certifiers)
In the above description, there are a plurality (two or more) of persons to be authenticated for one authenticator, but a plurality of authenticators may be provided. FIG. 15 is an explanatory diagram showing an overview of authentication processing when there are a plurality of authenticators. In FIG. 15, the authentication block 1501 includes a first authenticator 1501a and a second authenticator 1501b. The first authenticator 1501a and the second authenticator 1501b are, for example, two boards mounted on the motherboard of the main apparatus 101, a control unit, and a CPU.

  The relationship between the authentication block 1501 and the person to be authenticated 1502a and the person to be authenticated 1502b is the same as the authentication methods 1 to 6 described above. That is, the authentication block 1501 authenticates the person to be authenticated 1502a and the person to be authenticated 1502b. Here, for example, either the first authenticator 1501a or the second authenticator 1501b may perform the authentication process for the authenticated persons 1502a and 150b. Further, for example, the processing may be distributed within the authentication block 1501 such that the first authenticator 1501a performs the authentication process for the person to be authenticated 1502a and the second authentication person 1501b performs the authentication process for the person to be authenticated 1502b.

  Further, authentication processing for authenticating each of the first authenticator 1501a and the second authenticator 1501b constituting the authentication block 1501 is performed. For example, 1) the second authenticator 1501b authenticates the first authenticator 1501a, 2) the first authenticator 1501a authenticates the second authenticator 1501b, and 3) the first authenticator 1501a and the second authenticator 1501b. There are methods such as mutual authentication between the two.

  Further, the number of authenticators constituting the authentication block 1501 is not limited to two, and may be two or more. In this case, the connection configuration in the authentication block 1501 may be any configuration such as a bus type, a star type, and a serial type. Further, two or more functional blocks may be configured in the authentication block 1501. For example, when the authentication block 1501 is composed of a plurality of substrates and a plurality of semiconductor devices are further mounted on these substrates, the function block in the authentication block 1501 is determined by the semiconductor device group mounted on one substrate. Configure. When there are a plurality of circuits using semiconductor devices in the authentication block 1501, a function block in the authentication block 1501 is configured by a circuit group that executes a predetermined function.

  In the above-described embodiment, the case where the present invention is applied to authentication between configurations that can be physically divided, such as the main device 101 and the function expansion device 102 for expanding the function, has been described. For example, authentication may be performed between a plurality of functional units provided in one device, and the validity of the operation of each functional unit may be authenticated. For example, in a ticket vending machine or the like, a main CPU or the like is an authenticator, and a money insertion / return unit and a product selection unit are authenticated persons. The certifier authenticates the money insertion / return unit and the product selection unit, so that the amount deposited or refunded from the money insertion / return unit is consistent with the amount of the product selected by the product selection unit. Authenticate. As a result, tax evasion due to falsification of the sales amount can be prevented.

  In addition, a plurality of substrates (or a control unit, a CPU, a functional block, etc.) mounted on one device may be authenticated to authenticate each substrate. For example, in a gaming machine such as a pachinko machine, a control board for controlling the flow of a game (game), a prize ball board for controlling the prize ball unit to pay out a ball, and a display provided on the outer surface of the gaming machine The present invention can be applied to an authentication process with an effect board that controls display output and audio output of a part. Specifically, the authenticator is a production board, and the person to be authenticated is a control board and a prize ball board. As a result, even when both the control board and the prize ball board are replaced with illegal boards, the illegal replacement can be detected by the effect board. Further, even when the communication direction between the boards is restricted, the authentication process can be performed.

  As described above, according to the authentication system 100 according to the embodiment, authentication processing is performed between a plurality of devices incorporated in a single device, and unauthorized devices are prevented from being attached to the device. Can do. Further, according to the authentication system 100, it is possible to improve the strength of authentication by performing authentication a plurality of times while distributing the processing load of authentication processing to each device. Furthermore, since authentication processing is performed using different authentication information and authentication information each time, spoofing can be prevented.

  The authentication method described in the present embodiment can be realized by executing a program prepared in advance on a computer such as a personal computer or a workstation. This program is recorded on a computer-readable recording medium such as a hard disk, a flexible disk, a CD-ROM, an MO, and a DVD, and is executed by being read from the recording medium by the computer. The program may be a transmission medium that can be distributed via a network such as the Internet.

  As described above, the authentication method, the authentication program, and the electronic device according to the present invention are useful for authentication processing in authentication between three or more boards, devices, and units, and particularly for function expansion attached to the main device. It is suitable for authenticity verification of devices and detection of illegal board replacement.

It is explanatory drawing which shows the system configuration | structure of the authentication system concerning embodiment. It is a block diagram which shows the functional structure of an authentication system. It is explanatory drawing which shows the outline | summary of the authentication method 1. FIG. It is a sequence diagram of the first authentication process by the authentication method 1. It is explanatory drawing which shows the outline | summary of the authentication method 2. FIG. 6 is a sequence diagram of an initial authentication process by an authentication method 2. FIG. It is explanatory drawing which shows the outline | summary of the authentication method 3. FIG. 10 is a sequence diagram of an initial authentication process by an authentication method 3. FIG. It is explanatory drawing which shows the outline | summary of the authentication method 4. FIG. It is explanatory drawing which shows the outline | summary of the authentication method 5. FIG. FIG. 10 is a sequence diagram of an initial authentication process by an authentication method 5; It is explanatory drawing which shows the outline | summary of the authentication method 6. FIG. 10 is a sequence diagram of an initial authentication process by an authentication method 6. FIG. It is explanatory drawing which shows the outline | summary of the other form of the authentication method 5 or 6. It is explanatory drawing which shows the outline | summary of the authentication process in case there are multiple authenticators.

Explanation of symbols

DESCRIPTION OF SYMBOLS 100 Authentication system 101 Main apparatus 102a, 102b Function expansion device 211 Receiving part 212 Authentication information calculation part 213 Determination part 221 Authentication information calculation part 222 Transmission / reception part 223 Authentication information calculation part 224 Determination part

Claims (24)

An authentication method in an apparatus having at least three substrates (hereinafter, the three substrates are referred to as “first substrate”, “second substrate”, and “third substrate”),
The first substrate includes a first authenticated information calculation step of calculating different first authenticated information for each authentication process based on a predetermined first rule;
A first transmission step of transmitting the first authenticated information calculated in the first authenticated information calculation step to the second substrate,
The second substrate receives a first authentication information transmitted in the first transmission step, a first reception step;
A first authentication information calculating step of calculating different first authentication information for each authentication process based on the first rule;
The authenticity of the first substrate is authenticated based on the first authentication information received in the first reception process and the first authentication information calculated in the first authentication information calculation process. A first determination step of determining whether or not,
A second authenticated information calculation step for receiving different determination results of the first determination step and calculating different second authenticated information for each authentication process based on a predetermined second rule;
A second transmitting step of transmitting the second authenticated information calculated in the second authenticated information calculating step to the third substrate,
The third substrate receives a second authentication information transmitted in the second transmission step, and a second reception step.
A second authentication information calculating step of calculating different second authentication information for each authentication process based on the second rule;
The authenticity of the second substrate is authenticated based on the second authentication information received in the second reception step and the second authentication information calculated in the second authentication information calculation step. A second determination step for determining whether or not
An authentication method comprising: The first authenticated information calculating step uses the first identification value for identifying the procedure of the authentication process and the first change value that changes for each authentication process to calculate the first authenticated information. Calculate
The first authentication information calculation step calculates the first authentication information using the first identification value and the first change value,
The second authenticated information calculating step calculates the second authenticated information using a second identification value for identifying a procedure of the authentication process and a second change value that changes for each authentication process. Calculate
The authentication method according to claim 1, wherein the second authentication information calculation step calculates the second authentication information using the second identification value and the second change value. . The second authenticated information calculation step calculates the second authenticated information using the first authenticated information,
The second authentication information calculation step calculates the second authentication information based on the first rule together with the second rule,
3. The authentication method according to claim 1, wherein the second determination step determines whether or not to authenticate the first substrate together with the second substrate. 4. The first transmission step transmits the first authentication information to the third substrate together with the second substrate,
The second receiving step receives the first authenticated information together with the second authenticated information,
The second authentication information calculation step calculates the second authentication information, calculates the first authentication information based on the first rule,
The second determination step determines whether or not to authenticate the validity of the second substrate, and also includes the first authentication information received in the second reception step and the second authentication information. 4. The method according to claim 1, wherein it is determined whether or not to authenticate the validity of the first substrate based on the first authentication information calculated in the calculation step. 5. Authentication method. The first authenticated information calculation step calculates third authenticated information different from the first authenticated information based on the first rule,
In the first transmission step, the first authentication information is transmitted to the second substrate, and the third authentication information is transmitted to the third substrate.
The second receiving step receives the third authenticated information together with the second authenticated information,
The second authentication information calculating step calculates the second authentication information, calculates third authentication information based on the first rule,
The second determination step determines whether or not to authenticate the validity of the second substrate, and also includes the third authentication information received in the second reception step and the second authentication information. 4. The method according to claim 1, wherein it is determined whether or not to authenticate the validity of the first substrate based on the third authentication information calculated in the calculation step. Authentication method.   When it is determined that the validity of the first substrate is not authenticated in the first determination step, or when it is determined that the validity of the second substrate is not authenticated in the second determination step, The authentication method according to claim 1, further comprising a notification step of notifying the determination.   When it is determined that the validity of the first substrate is not authenticated in the first determination step, or when it is determined that the validity of the second substrate is not authenticated in the second determination step, The authentication according to any one of claims 1 to 5, further comprising a control step of stopping an operation of at least one of the first substrate, the second substrate, and the third substrate. Method. An authentication method in an apparatus having at least three control units (hereinafter, the three control units are referred to as “first control unit”, “second control unit”, and “third control unit”). There,
The first control unit calculates a first authenticated information calculating step for calculating different first authenticated information for each authentication process based on a predetermined first rule;
A first transmission step of transmitting the first authenticated information calculated in the first authenticated information calculation step to the second control unit,
The second control unit receives a first authentication information transmitted in the first transmission step, a first reception step;
A first authentication information calculating step of calculating different first authentication information for each authentication process based on the first rule;
The authenticity of the first control unit is authenticated based on the first authenticated information received in the first receiving step and the first authentication information calculated in the first authentication information calculating step. A first determination step for determining whether or not to do;
A second authenticated information calculation step for receiving different determination results of the first determination step and calculating different second authenticated information for each authentication process based on a predetermined second rule;
A second transmission step of transmitting the second authenticated information calculated in the second authenticated information calculation step to the third control unit,
The third control unit receives a second authentication information transmitted in the second transmission step, a second reception step;
A second authentication information calculating step of calculating different second authentication information for each authentication process based on the second rule;
The authenticity of the second control unit is authenticated based on the second authentication information received in the second reception step and the second authentication information calculated in the second authentication information calculation step. A second determination step for determining whether or not to do;
An authentication method comprising: An authentication method in an apparatus having at least three CPUs (hereinafter, three CPUs are referred to as “first CPU”, “second CPU”, and “third CPU”),
The first CPU calculates a first authenticated information calculation step for calculating different first authenticated information for each authentication process based on a predetermined first rule;
A first transmission step of transmitting the first authenticated information calculated in the first authenticated information calculating step to the second CPU,
The second CPU receives a first authentication information transmitted in the first transmission step, a first reception step;
A first authentication information calculating step of calculating different first authentication information for each authentication process based on the first rule;
The authenticity of the first CPU is authenticated based on the first authenticated information received in the first receiving step and the first authentication information calculated in the first authentication information calculating step. A first determination step of determining whether or not,
A second authenticated information calculation step for receiving different determination results of the first determination step and calculating different second authenticated information for each authentication process based on a predetermined second rule;
A second transmitting step of transmitting the second authenticated information calculated in the second authenticated information calculating step to the third CPU,
The third CPU receives a second authentication information transmitted in the second transmission step, a second reception step,
A second authentication information calculating step of calculating different second authentication information for each authentication process based on the second rule;
The authenticity of the second CPU is authenticated based on the second authentication information received in the second reception step and the second authentication information calculated in the second authentication information calculation step. A second determination step for determining whether or not
An authentication method comprising: An authentication method in an apparatus having at least three functional blocks (hereinafter, the three functional blocks are referred to as “first functional block”, “second functional block”, and “third functional block”). There,
The first functional block includes a first authenticated information calculation step of calculating different first authenticated information for each authentication process based on a predetermined first rule;
A first transmission step of transmitting the first authenticated information calculated in the first authenticated information calculating step to the second functional block,
The second functional block includes a first receiving step for receiving the first authentication information transmitted in the first transmitting step;
A first authentication information calculating step of calculating different first authentication information for each authentication process based on the first rule;
The authenticity of the first functional block is authenticated based on the first authenticated information received in the first receiving step and the first authentication information calculated in the first authentication information calculating step. A first determination step for determining whether or not to do;
A second authenticated information calculation step for receiving different determination results of the first determination step and calculating different second authenticated information for each authentication process based on a predetermined second rule;
A second transmitting step of transmitting the second authenticated information calculated in the second authenticated information calculating step to the third functional block,
The third functional block includes a second receiving step of receiving the second authentication information transmitted in the second transmitting step;
A second authentication information calculating step of calculating different second authentication information for each authentication process based on the second rule;
The validity of the second functional block is authenticated based on the second authentication information received in the second reception step and the second authentication information calculated in the second authentication information calculation step. A second determination step for determining whether or not to do;
An authentication method comprising:   An authentication program for causing a computer to execute the authentication method according to claim 1. An electronic device having at least three substrates (hereinafter, the three substrates are referred to as a “first substrate”, a “second substrate”, and a “third substrate”),
The first substrate includes first authenticated information calculation means for calculating different first authenticated information for each authentication process based on a predetermined first rule;
First transmitting means for transmitting the first authenticated information calculated by the first authenticated information calculating means to the second substrate,
The second substrate includes first receiving means for receiving first authentication information transmitted by the first transmitting means;
First authentication information calculating means for calculating different first authentication information for each authentication process based on the first rule;
The authenticity of the first substrate is authenticated based on the first authentication information received by the first receiving means and the first authentication information calculated by the first authentication information calculating means. First judging means for judging whether or not,
A second authenticated information calculation unit that receives a determination result of the first determination unit, and calculates different second authenticated information for each authentication process based on a predetermined second rule;
Second transmitting means for transmitting the second authenticated information calculated by the second authenticated information calculating means to the third substrate,
The third substrate has second receiving means for receiving second authenticated information transmitted by the second transmitting means;
Second authentication information calculating means for calculating different second authentication information for each authentication process based on the second rule;
The authenticity of the second substrate is authenticated based on the second authentication information received by the second receiving means and the second authentication information calculated by the second authentication information calculating means. Second judging means for judging whether or not,
An electronic device comprising: The first authenticated information calculating means calculates the first authenticated information using a first identification value for identifying a procedure of the authentication process and a first change value that changes for each authentication process. Calculate
The first authentication information calculation means calculates the first authentication information using the first identification value and the first change value,
The second authenticated information calculation means calculates the second authenticated information using a second identification value for identifying the procedure of the authentication process and a second change value that changes for each authentication process. Calculate
13. The electronic apparatus according to claim 12, wherein the second authentication information calculation unit calculates the second authentication information using the second identification value and the second change value. . The second authenticated information calculating means calculates the second authenticated information using the first authenticated information,
The second authentication information calculation means calculates the second authentication information based on the first rule together with the second rule,
14. The electronic apparatus according to claim 12, wherein the second determination unit determines whether or not to authenticate the validity of the first substrate together with the second substrate. The first transmission means transmits the first authenticated information to the third substrate together with the second substrate,
The second receiving means receives the first authenticated information together with the second authenticated information,
The second authentication information calculation means calculates the second authentication information, calculates the first authentication information based on the first rule,
The second determination means determines whether or not to authenticate the validity of the second substrate, and also includes the first authentication information received by the second reception means and the second authentication. 15. The method according to claim 12, wherein whether or not to authenticate the validity of the first substrate is determined based on the first authentication information calculated by the information calculating means. Electronic equipment.   16. The electron according to claim 12, wherein the input to the third substrate is only one-way communication from the first substrate or the second substrate. machine.   17. The device according to claim 12, wherein at least any two of the first substrate, the second substrate, and the third substrate are mounted on a single substrate. Electronic equipment described in one. The third substrate comprises a plurality of substrates,
17. The electron according to claim 12, wherein the plurality of substrates individually or jointly perform authentication processing on the first substrate and the second substrate. machine. The third substrate includes a plurality of control units,
The plurality of control units individually or jointly perform authentication processing on the first substrate and the second substrate, respectively. Electronics. The third substrate includes a plurality of CPUs,
17. The electronic device according to claim 12, wherein the plurality of CPUs individually or jointly perform authentication processing on the first substrate and the second substrate. machine. The third substrate is composed of a plurality of functional blocks,
17. The plurality of functional blocks perform authentication processing on the first substrate and the second substrate individually or jointly, respectively. 17. Electronics. An electronic device having at least three control units (hereinafter, the three control units are referred to as a “first control unit”, a “second control unit”, and a “third control unit”),
The first control unit includes a first authenticated information calculation unit configured to calculate different first authenticated information for each authentication process based on a predetermined first rule;
First transmitting means for transmitting the first authenticated information calculated by the first authenticated information calculating means to the second control unit;
The second control unit includes first receiving means for receiving first authentication information transmitted by the first transmitting means;
First authentication information calculating means for calculating different first authentication information for each authentication process based on the first rule;
The authenticity of the first control unit is authenticated based on the first authenticated information received by the first receiving means and the first authentication information calculated by the first authentication information calculating means. First judging means for judging whether or not to do;
A second authenticated information calculation unit that receives a determination result of the first determination unit, and calculates different second authenticated information for each authentication process based on a predetermined second rule;
Second transmitting means for transmitting the second authenticated information calculated by the second authenticated information calculating means to the third control unit,
The third control unit includes a second receiving unit configured to receive the second authenticated information transmitted by the second transmitting unit;
Second authentication information calculating means for calculating different second authentication information for each authentication process based on the second rule;
The authenticity of the second control unit is authenticated based on the second authentication information received by the second receiving means and the second authentication information calculated by the second authentication information calculating means. Second judging means for judging whether or not to do;
An electronic device comprising: An electronic device having at least three CPUs (hereinafter, the three CPUs are referred to as “first CPU”, “second CPU”, and “third CPU”),
The first CPU includes a first authenticated information calculating unit that calculates different first authenticated information for each authentication process based on a predetermined first rule;
First transmitting means for transmitting the first authenticated information calculated by the first authenticated information calculating means to the second CPU;
The second CPU includes first receiving means for receiving first authentication information transmitted by the first transmitting means;
First authentication information calculating means for calculating different first authentication information for each authentication process based on the first rule;
The authenticity of the first CPU is authenticated based on the first authenticated information received by the first receiving means and the first authentication information calculated by the first authentication information calculating means. First judging means for judging whether or not,
A second authenticated information calculation unit that receives a determination result of the first determination unit, and calculates different second authenticated information for each authentication process based on a predetermined second rule;
Second transmitting means for transmitting the second authenticated information calculated by the second authenticated information calculating means to the third CPU,
The third CPU is configured to receive second authentication information transmitted by the second transmission unit;
Second authentication information calculating means for calculating different second authentication information for each authentication process based on the second rule;
The validity of the second CPU is authenticated based on the second authentication information received by the second receiving means and the second authentication information calculated by the second authentication information calculating means. Second judging means for judging whether or not,
An electronic device comprising: An electronic device having at least three functional blocks (hereinafter, the three functional blocks are referred to as “first functional block”, “second functional block”, and “third functional block”),
The first functional block includes first authenticated information calculation means for calculating different first authenticated information for each authentication process based on a predetermined first rule;
First transmitting means for transmitting the first authenticated information calculated by the first authenticated information calculating means to the second functional block;
The second functional block includes first receiving means for receiving first authentication information transmitted by the first transmitting means;
First authentication information calculating means for calculating different first authentication information for each authentication process based on the first rule;
The authenticity of the first functional block is authenticated based on the first authenticated information received by the first receiving means and the first authentication information calculated by the first authentication information calculating means. First judging means for judging whether or not to do;
A second authenticated information calculation unit that receives a determination result of the first determination unit, and calculates different second authenticated information for each authentication process based on a predetermined second rule;
Second transmitting means for transmitting the second authenticated information calculated by the second authenticated information calculating means to the third functional block;
The third functional block includes second receiving means for receiving second authenticated information transmitted by the second transmitting means;
Second authentication information calculating means for calculating different second authentication information for each authentication process based on the second rule;
The authenticity of the second functional block is authenticated based on the second authentication information received by the second receiving means and the second authentication information calculated by the second authentication information calculating means. Second judging means for judging whether or not to do;
An electronic device comprising:

Images