JP2017163201A - Authentication system, terminal device, authentication device, authentication method, and computer program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To automatically authenticate an authenticated terminal device by another terminal device sharing the authentication information used to authenticate the authenticated terminal device in advance with the authenticated terminal device.SOLUTION: A terminal device 10 comprises an information transmitting unit which transmits transmission information containing authentication information shared with a terminal device 20 to an authentication device 30. The authentication device 30 comprises an information receiving unit which receives the transmission information from the terminal device 10, a reporting unit which reports reporting information containing the authentication acceptance information used to authenticate the terminal device 20 via communication, and an authentication accepting unit which verifies the validity of the authentication request information received via communication on the basis of the authentication information contained in the transmission information and the authentication acceptance information contained in the reporting information. The terminal device 20 comprises a reporting information receiving unit which receives the reporting information from the authentication device via communication, and an authentication requesting unit which transmits the authentication request information based on the authentication acceptance information contained in the reporting information and the authentication information shared with the terminal device 10 to the authentication device 30 via communication.SELECTED DRAWING: Figure 1

Description

  The present invention relates to an authentication system, a terminal device, an authentication device, an authentication method, and a computer program.

  In general, in a content distribution service such as a video distribution service, content is distributed to an authenticated terminal device. In the authentication of the terminal device, a key shared between the authentication device that authenticates the terminal device and the terminal device is used. For example, Patent Document 1 is known as a technique for sharing a key between communication terminals.

Japanese Patent No. 4803145

  Assume that the user of the content distribution service has two terminal devices. For example, it is assumed that the user has a smartphone that is usually used easily and a tablet computer (tablet PC) that is used when, for example, viewing a moving image. In this case, it is easier for the user to perform the operation for receiving the provision of the content distribution service on the smartphone, but there is a demand for viewing the content provided by the content distribution service on the tablet PC. However, even if the same key is shared between the smartphone and the tablet PC, the user must operate the tablet PC to be authenticated for the content distribution service, and can be easily operated like a smartphone. Absent.

  The present invention has been made in view of such circumstances, and the information on the terminal device to be authenticated is obtained by another terminal device that shares information used for authentication of the terminal device to be authenticated with the terminal device to be authenticated in advance. It is an object of the present invention to provide an authentication system, a terminal device, an authentication device, an authentication method, and a computer program that can automatically perform authentication.

(1) One aspect of the present invention includes a first terminal device, a second terminal device, and an authentication device, wherein the first terminal device includes authentication information shared with the second terminal device. An information transmission unit that transmits information to the authentication device, the authentication device receiving an information reception unit that receives the transmission information from the first terminal device; and an authentication used for authentication of the second terminal device The notifying unit for notifying the notification information including the reception information by communication, and the authentication information included in the transmission information received by the information receiving unit and the notifying unit for notifying the validity of the authentication request information received by communication An authentication reception unit that verifies based on the authentication reception information included in the notification information, and the second terminal device receives the notification information from the authentication device by communication; and Receiving the broadcast information An authentication request unit configured to transmit the authentication request information based on the authentication acceptance information included in the broadcast information received by the user and the authentication information shared with the first terminal device to the authentication device by communication; An authentication system is provided.
(2) One aspect of the present invention is the authentication system according to (1), wherein the authentication device performs verification based on the authentication reception information and the authentication information included in the transmission information received by the information reception unit. A verification information generation unit that generates information; the notification unit further includes the verification information generated by the verification information generation unit in the notification information; and the second terminal device includes: A verification unit that verifies the validity of the authentication acceptance information included in the received notification information based on the verification information included in the notification information and the authentication information shared with the first terminal device; , The authentication system.
(3) One aspect of the present invention is the authentication system according to any one of (1) and (2), wherein the first terminal device performs mutual authentication with the second terminal device, and the second terminal device An inter-terminal authentication unit that shares the authentication information with the terminal device is further provided, and the second terminal device performs mutual authentication with the first terminal device and shares the authentication information with the first terminal device. The authentication system further includes an inter-terminal authentication unit.
(4) In one aspect of the present invention, in the authentication system according to any one of (1) to (3), the information transmission unit further includes service information indicating a service received by the second terminal device. In addition, the authentication apparatus determines whether or not to provide the second terminal device with a service represented by the service information included in the transmission information received by the information receiving unit. The authentication system further includes a service execution determination unit that makes a determination based on a result of verification of information validity.
(5) According to one aspect of the present invention, in the authentication system according to any one of (1) to (4), the information transmission unit transmits the transmission information by short-range wireless communication, and the information reception unit includes: The authentication system receives the transmission information by the short-range wireless communication.
(6) According to one aspect of the present invention, in the authentication system according to any one of (1) to (5), the notification unit transmits the notification information by a broadcast signal of wireless communication, and the notification information reception unit The authentication system receives the broadcast information by a broadcast signal of the wireless communication.

(7) According to one aspect of the present invention, communication information including first terminal apparatus and transmission information received from the first terminal apparatus and including authentication acceptance information used for authentication of the second terminal apparatus is communicated. And authenticating the authentication request information received by communication based on the authentication information included in the transmission information and the authentication acceptance information, and receiving the notification information from the authentication device by communication. The second terminal device that transmits the authentication request information based on the authentication acceptance information included in the notification information and the authentication information shared with the first terminal device to the authentication device by communication, It is the first terminal device of the authentication system provided, and is a terminal device including an information transmission unit that transmits the transmission information including the authentication information shared with the second terminal device to the authentication device.

(8) According to one aspect of the present invention, notification information is transmitted from the authentication device by communication with the authentication device, the first terminal device that transmits the transmission information including the authentication information shared with the second terminal device, to the authentication device. The second terminal device that transmits authentication request information based on the authentication acceptance information included in the broadcast information and the authentication information shared with the first terminal device to the authentication device by communication; An information receiving unit for receiving the transmission information from the first terminal device, and the notification information including the authentication acceptance information used for authentication of the second terminal device. A notification unit that notifies the authentication request information received by communication, the authentication information included in the transmission information received by the information reception unit, and the notification information notified by the notification unit. An authentication receiving unit that verifies based on the Murrell the authentication acceptance information is authentication device comprising a.

(9) According to one aspect of the present invention, a second terminal device, a first terminal device that transmits transmission information including authentication information shared with the second terminal device to the authentication device, and the first terminal device The transmission information is received from the terminal device, the notification information including the authentication acceptance information used for authentication of the second terminal device is notified by communication, and the validity of the authentication request information received by communication is set in the transmission information An authentication device that verifies based on the included authentication information and the authentication acceptance information, and a second notification device that receives the notification information from the authentication device by communication; The authentication request information based on the authentication acceptance information included in the notification information received by the notification information receiving unit and the authentication information shared with the first terminal device is transmitted to the authentication device by communication. An authentication request unit for signal for a terminal device provided with a.

(10) One aspect of the present invention is an authentication method of an authentication system including a first terminal device, a second terminal device, and an authentication device, and the first terminal device is connected to the second terminal device. An information transmission step of transmitting transmission information including authentication information to be shared to the authentication device; an information reception step of the authentication device receiving the transmission information from the first terminal device; and the authentication device comprising: A notification step of notifying communication information including authentication acceptance information used for authentication of the second terminal device by communication; and a notification information receiving step of receiving the notification information from the authentication device by the second terminal device by communication And the second terminal device based on the authentication acceptance information included in the notification information received in the notification information receiving step and the authentication information shared with the first terminal device. Authentication request step for transmitting certificate request information to the authentication device by communication, and the authentication included in the transmission information received by the authentication device in the information reception step. An authentication receiving step for verifying based on the information and the authentication receiving information included in the notification information notified in the notification step.

(11) According to one aspect of the present invention, communication information including first terminal apparatus and transmission information received from the first terminal apparatus and including authentication acceptance information used for authentication of the second terminal apparatus is communicated. And authenticating the authentication request information received by communication based on the authentication information included in the transmission information and the authentication acceptance information, and receiving the notification information from the authentication device by communication. The second terminal device that transmits the authentication request information based on the authentication acceptance information included in the notification information and the authentication information shared with the first terminal device to the authentication device by communication, An information transmission function of transmitting the transmission information including the authentication information shared with the second terminal device to the authentication device is realized in a computer of the first terminal device of the authentication system provided It is an eye of the computer program.

(12) According to one aspect of the present invention, notification information is transmitted from the authentication device through communication with the authentication device, the first terminal device that transmits the transmission information including the authentication information shared with the second terminal device, to the authentication device. The second terminal device that transmits authentication request information based on the authentication acceptance information included in the broadcast information and the authentication information shared with the first terminal device to the authentication device by communication; Including the information receiving function for receiving the transmission information from the first terminal device and the authentication acceptance information used for authentication of the second terminal device in a computer of the authentication device of the authentication system comprising: The notification function for notifying information by communication and the validity of the authentication request information received by communication are reported by the authentication information and the notification function included in the transmission information received by the information reception function. A computer program for realizing an authentication acceptance function of verifying on the basis of said authentication reception information included in the broadcast information.

(13) According to one aspect of the present invention, a second terminal device, a first terminal device that transmits transmission information including authentication information shared with the second terminal device to the authentication device, and the first terminal device The transmission information is received from the terminal device, the notification information including the authentication acceptance information used for authentication of the second terminal device is notified by communication, and the validity of the authentication request information received by communication is set in the transmission information A notification information receiving function for receiving the notification information from the authentication device by communication with a computer of the second terminal device of the authentication system comprising: an authentication device that is verified based on the included authentication information and the authentication acceptance information And the authentication request information based on the authentication acceptance information included in the broadcast information received by the broadcast information reception function and the authentication information shared with the first terminal device by communication. A computer program for realizing an authentication request function to be transmitted to the authentication device.

  ADVANTAGE OF THE INVENTION According to this invention, the authentication of this to-be-authenticated terminal apparatus can be automatically implemented by the other terminal apparatus which shares beforehand the information used for authentication of a to-be-authenticated terminal apparatus with this to-be-authenticated terminal apparatus.

It is a figure showing an example of composition of authentication system 1 concerning one embodiment. It is a figure which shows the hardware structural example of the terminal device 10 which concerns on one Embodiment. It is a figure which shows the hardware structural example of the authentication apparatus 30 which concerns on one Embodiment. It is a sequence diagram which shows the example of the authentication method which concerns on one Embodiment. It is a sequence diagram which shows the example of the authentication method which concerns on one Embodiment. It is a sequence diagram which shows the example of the authentication method which concerns on one Embodiment. It is a figure which shows Example 1 which concerns on one Embodiment. It is a figure which shows Example 2 which concerns on one Embodiment. It is a figure which shows the structural example of the authentication system 1a which concerns on one Embodiment. It is a sequence diagram which shows the example of the authentication method which concerns on one Embodiment. It is a sequence diagram which shows the example of the authentication method which concerns on one Embodiment.

Hereinafter, embodiments of the present invention will be described with reference to the drawings.
FIG. 1 is a diagram illustrating a configuration example of an authentication system 1 according to the present embodiment. In FIG. 1, the authentication system 1 includes a terminal device 10, a terminal device 20, and an authentication device 30. FIG. 1 shows a functional configuration example of each device. The terminal device 10 includes an inter-terminal authentication unit 11 and an information transmission unit 12. The terminal device 20 includes an inter-terminal authentication unit 21, a notification information receiving unit 22, a verification unit 23, and an authentication request unit 24. The authentication device 30 includes an information reception unit 31, a verification information generation unit 32, a notification unit 33, an authentication reception unit 34, and a service execution determination unit 35.

  The terminal device 10 corresponds to the first terminal device. The terminal device 20 corresponds to a second terminal device. For example, a mobile communication terminal device such as a smartphone may be applied as the terminal device 10. As the terminal device 20, for example, a mobile communication terminal device such as a smartphone or a tablet PC may be applied, or a stationary communication terminal device (for example, a stationary personal computer) may be applied. .

  The inter-terminal authentication unit 11 of the terminal device 10 and the inter-terminal authentication unit 21 of the terminal device 20 perform mutual authentication and share authentication information. The authentication information is used for authentication processing performed between the terminal device 20 and the authentication device 30.

  The information transmission unit 12 of the terminal device 10 transmits transmission information including authentication information shared with the terminal device 20 to the authentication device 30. The information reception unit 31 of the authentication device 30 receives the transmission information from the information transmission unit 12 of the terminal device 10. The information transmission unit 12 of the terminal device 10 and the information reception unit 31 of the authentication device 30 may transmit and receive the transmission information by short-range wireless communication, for example. For example, the terminal device 10 and the authentication device 30 may include an NFC (Near Field Communication) device and perform communication using the NFC device.

  The information transmission unit 12 may further include service information representing a service received by the terminal device 20 in the transmission information.

  In the authentication device 30, the notification unit 33 notifies the notification information including the authentication acceptance information used for authentication of the terminal device 20 through communication. The verification information generation unit 32 generates verification information based on the authentication reception information and the authentication information included in the transmission information received by the information reception unit 31 from the terminal device 10. The notification unit 33 may further include the verification information generated by the verification information generation unit 32 in the notification information.

  The notification information receiving unit 22 of the terminal device 20 receives notification information from the authentication device 30 by communication.

  For example, the notification unit 33 of the authentication device 30 may transmit the notification information by a wireless communication broadcast signal, and the notification information reception unit 22 of the terminal device 20 may receive the notification information by the wireless communication broadcast signal. For example, the notification unit 33 of the authentication device 30 transmits notification information by a broadcast signal of a wireless LAN (Local Area Network), and the notification information reception unit 22 of the terminal device 20 receives the notification information by a broadcast signal of the wireless LAN. May be. When the notification unit 33 of the authentication device 30 transmits broadcast information using a broadcast signal of a wireless LAN, the range in which the notification information can be received can be limited to the coverage of the wireless LAN.

  Or the alerting | reporting part 33 of the authentication apparatus 30 transmits alerting | reporting information by the broadcast signal of the near field communication system called "Bluetooth (trademark)", and the alerting | reporting information receiving part 22 of the terminal device 20 is said near field communication. Broadcast information may be received by a broadcast signal of a method. When the notification unit 33 of the authentication device 30 transmits the notification information using the broadcast signal of the short-range wireless communication method, the number of terminal devices that can receive the notification information is the number of simultaneously connectable terminals of the short-range wireless communication method. It can be limited to.

  In the terminal device 20, the verification unit 23 shares the validity of the authentication acceptance information included in the notification information received by the notification information receiving unit 22 from the authentication device 30 with the verification information included in the notification information and the terminal device 10. And verifying based on authentication information. The authentication request unit 24 communicates authentication request information based on the authentication acceptance information included in the notification information received by the notification information receiving unit 22 from the authentication device 30 and the authentication information shared with the terminal device 10 by communication. Send to.

  In the authentication device 30, the authentication reception unit 34 authenticates the authentication request information received by communication, the authentication information included in the transmission information received by the information receiving unit 31 from the terminal device 10, and the notification information notified by the notification unit 33. It verifies based on the authentication reception information contained in. The service execution determining unit 35 determines whether or not to provide the terminal device 20 with the service represented by the service information included in the transmission information received by the information receiving unit 31 from the terminal device 10. Judgment based on the result of sex verification.

  FIG. 2 is a diagram illustrating a hardware configuration example of the terminal device 10 according to the present embodiment. In FIG. 2, the terminal device 10 includes a CPU 41, a memory 42, a nonvolatile memory 43, an operation unit 44, a display unit 45, a communication unit 46, and an NFC unit 47. Each of these units is configured to exchange data. The CPU 41 executes a program 48 stored in the nonvolatile memory 43 and controls each unit of the terminal device 10 using the memory 42 as a work memory. Functions of the respective units of the terminal device 10 shown in FIG. 1 are realized by the CPU 41 of the terminal device 10 shown in FIG. 2 executing a program 48 stored in the nonvolatile memory 43.

  The memory 42 includes a RAM such as a volatile memory using a semiconductor element, and is used as a work memory for the CPU 41. The non-volatile memory 43 is configured by, for example, a hard disk (HD) or ROM. The non-volatile memory 43 stores a program 48 executed by the CPU 41.

  The operation unit 44 includes input devices such as a keyboard, a numeric keypad, and a mouse, and performs data input according to a user operation. The display unit 45 includes a display device such as a liquid crystal display device and displays data. Further, a touch panel capable of both data input and data display may be provided.

  The communication unit 46 communicates with other devices. The communication unit 46 may communicate with another device via a communication network such as a mobile phone network or a wireless LAN, or may communicate with another device using a short-range wireless communication method.

  The NFC unit 47 includes an NFC device, and communicates with other NFC devices using the NFC device. In the hardware configuration example of the terminal device 10 illustrated in FIG. 2, the terminal device 10 communicates with the NFC device of the authentication device 30 by the NFC device of the NFC unit 47.

  The hardware configuration example illustrated in FIG. 2 can be applied to the terminal device 20. In the terminal device 20, the CPU 41 executes a program 48 stored in the nonvolatile memory 43 and controls each part of the terminal device 20 using the memory 42 as a work memory. The functions of the respective units of the terminal device 20 shown in FIG. 1 are realized by the CPU 41 of the terminal device 20 shown in FIG. 2 executing a program 48 stored in the nonvolatile memory 43.

  FIG. 3 is a diagram illustrating a hardware configuration example of the authentication device 30 according to the present embodiment. In FIG. 3, the authentication device 30 includes a CPU 51, a memory 52, a nonvolatile memory 53, a communication unit 54, and an NFC unit 55. Each of these units is configured to exchange data. The CPU 51 executes a program 56 stored in the nonvolatile memory 53 and controls each unit of the authentication device 30 using the memory 52 as a work memory. The functions of each unit of the authentication device 30 shown in FIG. 1 are realized by the CPU 51 shown in FIG. 3 executing a program 56 stored in the nonvolatile memory 53.

  The memory 52 includes a RAM such as a volatile memory using a semiconductor element, and is used as a work memory for the CPU 51. The nonvolatile memory 53 is configured by, for example, an HD or a ROM. The nonvolatile memory 53 stores a program 56 that is executed by the CPU 51.

  The communication unit 54 communicates with other devices via a communication network such as a mobile phone network or a wireless LAN. The NFC unit 55 includes an NFC device, and communicates with other NFC devices using the NFC device. In the hardware configuration example of the authentication device 30 illustrated in FIG. 3, the authentication device 30 communicates with the NFC device of the terminal device 10 using the NFC device of the NFC unit 55.

  Next, the operation of the authentication system 1 according to the present embodiment will be described with reference to FIGS. 4, 5, and 6.

[Sharing of authentication information between terminal devices]
With reference to FIG. 4, the step of sharing authentication information between terminal devices according to the present embodiment will be described. FIG. 4 is a sequence diagram illustrating an example of the authentication method according to the present embodiment. The inter-terminal authentication unit 11 of the terminal device 10 and the inter-terminal authentication unit 21 of the terminal device 20 may communicate via a communication network or may communicate using a short-range wireless communication method. .

(Step S1) The inter-terminal authentication unit 21 of the terminal device 20 generates a random number R1. The inter-terminal authentication unit 21 records the random number R1.

(Step S <b> 2) The inter-terminal authentication unit 21 of the terminal device 20 transmits the random number R <b> 1 to the terminal device 10. The inter-terminal authentication unit 11 of the terminal device 10 receives the random number R1 from the terminal device 20. The inter-terminal authentication unit 11 records the random number R1.

(Step S3) The inter-terminal authentication unit 11 of the terminal device 10 generates a random number R2. The inter-terminal authentication unit 11 records the random number R2.

(Step S4) The inter-terminal authentication unit 11 of the terminal device 10 generates a message authentication code (Message Authentication Code: MAC) for the random number R1 and the random number R2 using the key K. The key K is shared in advance by the inter-terminal authentication unit 11 of the terminal device 10 and the inter-terminal authentication unit 21 of the terminal device 20. Specifically, the inter-terminal authentication unit 11 generates data “R1 || R2” obtained by connecting the random number R1 and the random number R2. A || B represents data obtained by concatenating A and B. The inter-terminal authentication unit 11 uses the key K to generate a message authentication code MAC_K (R1 || R2) of the data “R1 || R2”.

  Note that the MAC generation method and the verification method are common to the inter-terminal authentication unit 11 of the terminal device 10 and the inter-terminal authentication unit 21 of the terminal device 20. The MAC may be a CMAC (Cipher-based Message Authentication Code) or an HMAC (Hash-based Message Authentication Code).

  The key K may be generated from, for example, user identification information (user ID) and a master key Km. For example, a user management device that manages the master key Km and the user ID of each user may be provided, and the user management device may generate the key K and provide it to the user. The user sets the key K provided from the user management device in the terminal device 10 and the terminal device 20. Further, for example, the user management apparatus may generate the key K and transmit it to the terminal apparatuses 10 and 20 in response to requests from the user terminal apparatuses 10 and 20.

(Step S5) The inter-terminal authentication unit 11 of the terminal device 10 transmits data “MAC_K (R1 || R2) || R2” obtained by connecting the message authentication code MAC_K (R1 || R2) and the random number R2 to the terminal device 20. Send. The inter-terminal authentication unit 21 of the terminal device 20 receives the data “MAC_K (R1 || R2) || R2” from the terminal device 10.

(Step S6) The inter-terminal authentication unit 21 of the terminal device 20 receives the message authentication code MAC_K (R1 || R2) included in the data “MAC_K (R1 || R2) || R2”, the key K, the random number R1, and the Verification is performed using the random number R2 included in the data “MAC_K (R1 || R2) || R2”. Specifically, the inter-terminal authentication unit 21 generates data “R1 || R2” obtained by concatenating the random number R1 and the random number R2, and uses the key K to generate a message authentication code for the data “R1 || R2”. MAC_K (R1 || R2) is generated. The inter-terminal authentication unit 21 uses the generated message authentication code MAC_K (R1 || R2) and the message authentication code MAC_K (R1 || R2) included in the data “MAC_K (R1 || R2) || R2”. Compare. As a result of this comparison, when the two match, the verification of the message authentication code is passed. The inter-terminal authentication unit 21 records the random number R2 when the verification of the message authentication code is acceptable. If the verification of the message authentication code is successful, the process proceeds to the subsequent steps.

  On the other hand, if the comparison results in a mismatch, the verification of the message authentication code fails. If the verification of the message authentication code fails, this process is terminated. If the verification of the message authentication code fails, the inter-terminal authentication unit 21 may execute predetermined error processing, for example, output of an error message.

(Step S7) The inter-terminal authentication unit 21 of the terminal device 20 uses the key K to generate a message authentication code MAC_K (R2) of the random number R2.

(Step S8) The inter-terminal authentication unit 21 of the terminal device 20 transmits a message authentication code MAC_K (R2) to the terminal device 10. The inter-terminal authentication unit 11 of the terminal device 10 receives the message authentication code MAC_K (R2) from the terminal device 20.

(Step S9) The inter-terminal authentication unit 11 of the terminal device 10 verifies the message authentication code MAC_K (R2) using the key K and the random number R2. Specifically, the inter-terminal authentication unit 11 generates a message authentication code MAC_K (R2) of the random number R2 using the key K. The inter-terminal authentication unit 11 compares the generated message authentication code MAC_K (R2) with the message authentication code MAC_K (R2) received from the terminal device 20. As a result of the comparison, if the two match, the verification of the message authentication code is passed. On the other hand, if the comparison results in a mismatch, the verification of the message authentication code fails.

(Step S <b> 10) The inter-terminal authentication unit 11 of the terminal device 10 records the result of authentication with the terminal device 20. Specifically, the inter-terminal authentication unit 11 records that the result of authentication with the terminal device 20 is acceptable when the verification of the message authentication code in step S9 is acceptable. On the other hand, the inter-terminal authentication unit 11 records that the result of the authentication with the terminal device 20 is unsuccessful when the verification of the message authentication code in step S9 is unsuccessful.

(Step S11) The inter-terminal authentication unit 21 of the terminal device 20 generates and records a session key Ka. Specifically, the inter-terminal authentication unit 21 performs an exclusive OR operation between the random number R1 and the random number R2, and obtains an exclusive OR “R1 XOR R2” of the operation result. XOR represents an exclusive OR operation. The inter-terminal authentication unit 21 uses the key K to generate a message authentication code MAC_K (R1 XOR R2) of the exclusive OR “R1 XOR R2”. The terminal authentication unit 21 records the message authentication code MAC_K (R1 XOR R2) as the session key Ka.
In the terminal device 10 as well as the terminal device 20, the inter-terminal authentication unit 11 generates a message authentication code MAC_K (R1 XOR R2) and records the message authentication code MAC_K (R1 XOR R2) as the session key Ka. May be.

  The terminal device 10 and the terminal device 20 share the random number R1 and the random number R2 through the above-described authentication information sharing step between the terminal devices. The random number R1 and the random number R2 correspond to authentication information. This authentication information (random number R1 and random number R2) is authentication information shared with the terminal device 20 that has been authenticated in advance by the terminal device 10. Thereby, the authentication information (random number R1 and random number R2) is safely shared between the terminal device 10 and the terminal device 20.

In the stage of sharing authentication information between terminal devices shown in FIG. 4 described above, the inter-terminal authentication unit 11 of the terminal device 10 and the inter-terminal authentication unit 21 of the terminal device 20 perform mutual authentication, and authentication information (random number R1). And the random number R2) are shared, but the present invention is not limited to this. For example, the user may set the same authentication information (random number R1 and random number R2) for the terminal device 10 and the terminal device 20. For example, the same authentication information (random number R1 and random number R2) may be set in the terminal device 10 and the terminal device 20 by a recording medium such as a USB memory in which authentication information (random number R1 and random number R2) is recorded.
Similarly, the user may set the message authentication code MAC_K (R1 XOR R2) in the terminal device 20 using a recording medium such as a USB memory as the session key Ka. Further, the user may set the message authentication code MAC_K (R1 XOR R2) as the session key Ka in the terminal device 10 using a recording medium such as a USB memory.

[Terminal device authentication stage]
The authentication stage of the terminal device according to the present embodiment will be described with reference to FIG. FIG. 5 is a sequence diagram illustrating an example of the authentication method according to the present embodiment. The terminal device 10 starts step S21 in FIG. 5 when the “result of authentication with the terminal device 20” recorded in the above-described authentication information sharing stage between the terminal devices is acceptable. Therefore, if the “result of authentication with the terminal device 20” recorded in the above-described authentication information sharing stage between the terminal devices fails, the process of FIG. 5 is not executed.

  Here, as an example, it is assumed that the terminal device 10 and the authentication device 30 communicate with each other by an NFC device. Here, it is assumed that the authentication device 30 and the terminal device 20 communicate wirelessly.

  The terminal device 20 and the terminal device 10 share the authentication information (the random number R1 and the random number R2) at the above-described authentication information sharing stage between the terminal devices. This authentication information (random number R1 and random number R2) is authentication information shared with the terminal device 20 that has been authenticated in advance by the terminal device 10. Thereby, the authentication information (random number R1 and random number R2) is safely shared between the terminal device 10 and the terminal device 20. In addition, the terminal device 20 has a session key Ka. The terminal device 10 may also have a session key Ka.

(Step S21) The information transmitting unit 12 of the terminal device 10 generates transmission information including authentication information (random number R1 and random number R2) shared with the terminal device 20. Specifically, the information transmission unit 12 generates data “R1 || R2 || ID” obtained by concatenating the random number R1, the random number R2, and the user ID, and transmits the data “R1 || R2 || ID”. Include in information. The information transmission unit 12 may further include other information with respect to the transmission information including the authentication information (the random number R1 and the random number R2). For example, the information transmission unit 12 generates data “R1 || R2 || ID || service information” in which service information is further linked to the data “R1 || R2 || ID”, and the data “R1 || R2” is generated. || ID || service information "may be included in the transmission information. The service information is information representing a service received by the terminal device 20. For example, the service information is information for designating content that the user wants to be distributed to the terminal device 20 by the content distribution service.

(Step S22) The user brings the NFC device portion of the terminal device 10 close to or touches the NFC device portion of the authentication device 30. Thereby, the information transmission part 12 of the terminal device 10 transmits transmission information by an NFC device. The information receiving unit 31 of the authentication device 30 receives the transmission information by the NFC device. The information receiving unit 31 records information such as authentication information (random number R1 and random number R2) included in the transmission information received by the NFC device.

(Step S23) The verification information generation unit 32 of the authentication device 30 generates a session key Ka. Specifically, the verification information generation unit 32 performs an exclusive OR operation between the random number R1 and the random number R2 of the authentication information (random number R1 and random number R2) included in the transmission information received by the information reception unit 31, An exclusive OR “R1 XOR R2” of the operation result is obtained. The verification information generation unit 32 acquires a key K corresponding to the user ID included in the transmission information received by the information reception unit 31. The verification information generation unit 32 generates the message authentication code MAC_K (R1 XOR R2) of the exclusive OR “R1 XOR R2” using the acquired key K. The verification information generation unit 32 uses the message authentication code MAC_K (R1 XOR R2) as the session key Ka. The verification information generation unit 32 records the session key Ka. The method for generating the session key Ka is the same as that for the terminal device 20.

  The authentication device 30 acquires the key K in advance. For example, the authentication device 30 may acquire the key K from the user management device. For example, the authentication device 30 may acquire the key K associated with the user ID included in the transmission information received by the information receiving unit 31 from the user management device. Alternatively, the key K is a key generated from the user ID and the master key Km, and the authentication device 30 includes the master key Km set in advance and the user ID included in the transmission information received by the information receiving unit 31. From this, the key K may be generated.

(Step S24) The verification information generation unit 32 of the authentication device 30 generates a random number R3. The verification information generation unit 32 records the random number R3.

(Step S25) The verification information generation unit 32 of the authentication device 30 sends a message about the random number R3 and the random numbers R1 and R2 of the authentication information (random numbers R1 and R2) included in the transmission information received by the information receiving unit 31. An authentication code is generated using the session key Ka. Specifically, the verification information generation unit 32 generates data “R1 || R2 || R3” obtained by connecting the random number R1, the random number R2, and the random number R3. The verification information generation unit 32 generates a message authentication code MAC_Ka (R1 || R2 || R3) of the data “R1 || R2 || R3” using the session key Ka. The random number R3 corresponds to authentication acceptance information. The message authentication code MAC_Ka (R1 || R2 || R3) corresponds to the verification information.

  Note that the MAC generation method and the verification method are common to the verification information generation unit 32 of the authentication device 30 and the verification unit 23 of the terminal device 20. Further, the MAC may be CMAC or HMAC.

(Step S26) The notification unit 33 of the authentication device 30 generates a session key Ks. Specifically, the notification unit 33 performs an exclusive OR operation between the random number R3 and the random number R1 of the authentication information (random number R1 and random number R2) included in the transmission information received by the information receiving unit 31. Then, an exclusive OR “R1 XOR R2 XOR R3” of the operation result is obtained. The notification unit 33 uses the session key Ka to generate a message authentication code MAC_Ka (R1 XOR R2 XOR R3) of the exclusive OR “R1 XOR R2 XOR R3”. The notification unit 33 uses the message authentication code MAC_Ka (R1 XOR R2 XOR R3) as the session key Ks. The notification unit 33 records the session key Ks.

(Step S27) The notification unit 33 of the authentication device 30 generates notification information including authentication acceptance information (random number R3). The notification unit 33 may further include verification information (message authentication code MAC_Ka (R1 || R2 || R3)) in the notification information. For example, the notification unit 33 may include data “MAC_Ka (R1 || R2 || R3) || R3” obtained by concatenating the message authentication code MAC_Ka (R1 || R2 || R3) and the random number R3 in the notification information. Good. The notification unit 33 may further include access information necessary for accessing the authentication device 30 in the notification information. The access information includes, for example, an access destination address necessary for the terminal device to access the authentication device 30 and a set of account ID and password necessary for terminal authentication executed in the access. Examples of the access destination address include wireless LAN identifiers such as ESS-ID (Extended Service Set Identifier). For example, the notification unit 33 may encrypt the access information with the session key Ks and include the encrypted data E_Ks (access information) of the access information in the notification information. For example, the notification unit 33 connects data “E_Ks (access information) || MAC_Ka () obtained by concatenating the encrypted data E_Ks (access information) of the access information, the message authentication code MAC_Ka (R1 || R2 || R3), and the random number R3. R1 || R2 || R3) || R3 "may be included in the broadcast information.

  Here, it is assumed that the notification unit 33 includes the data “E_Ks (access information) || MAC_Ka (R1 || R2 || R3) || R3” in the notification information.

(Step S28) The alerting | reporting part 33 of the authentication apparatus 30 transmits alerting | reporting information with the broadcast signal of radio | wireless communication. The broadcast information is received by the terminal device 20 existing within the coverage of the wireless communication. The notification information receiving unit 22 of the terminal device 20 receives the notification information by the broadcast signal of the wireless communication.

(Step S29) The verification unit 23 of the terminal device 20 shares the message authentication code MAC_Ka (R1 || R2 || R3) included in the broadcast information received by the broadcast information reception unit 22 with the session key Ka and the terminal device 10. The authentication information (random number R1 and random number R2) to be verified and the random number R3 included in the notification information are verified. Specifically, the verifying unit 23 concatenates data “R1 || R2 | concatenated with the random number R1 and the random number R2 of the authentication information (random number R1 and random number R2) shared with the terminal device 10 and the random number R3 included in the notification information. | R3 "is generated. The verification unit 23 generates a message authentication code MAC_Ka (R1 || R2 || R3) of the data “R1 || R2 || R3” using the session key Ka. The verification unit 23 compares the generated message authentication code MAC_Ka (R1 || R2 || R3) with the message authentication code MAC_Ka (R1 || R2 || R3) included in the broadcast information. As a result of this comparison, when the two match, the verification of the message authentication code is passed. The verification unit 23 records the random number R3 when the verification of the message authentication code is acceptable. If the verification of the message authentication code is successful, the process proceeds to the subsequent steps.

  On the other hand, if the comparison results in a mismatch, the verification of the message authentication code fails. If the verification of the message authentication code fails, this process is terminated.

(Step S30) The authentication request unit 24 of the terminal device 20 generates a session key Ks. Specifically, the authentication request unit 24 performs an exclusive OR operation between the random number R3 and the random number R1 of the authentication information (the random number R1 and the random number R2) shared with the terminal device 10, and the result of the calculation An exclusive OR “R1 XOR R2 XOR R3” is obtained. The authentication request unit 24 uses the session key Ka to generate a message authentication code MAC_Ka (R1 XOR R2 XOR R3) of the exclusive OR “R1 XOR R2 XOR R3”. The authentication request unit 24 uses the message authentication code MAC_Ka (R1 XOR R2 XOR R3) as the session key Ks. The authentication request unit 24 records the session key Ks. The method for generating the session key Ks is common to the authentication device 30.

(Step S31) The authentication request unit 24 of the terminal device 20 generates a message authentication code MAC_Ks (R3) of the random number R3 using the session key Ks. Note that the MAC generation method and the verification method are common to the authentication request unit 24 of the terminal device 20 and the authentication reception unit 34 of the authentication device 30. Further, the MAC may be CMAC or HMAC.

(Step S32) The authentication request unit 24 of the terminal device 20 decrypts the encrypted data E_Ks (access information) included in the broadcast information received by the broadcast information reception unit 22 with the session key Ks. The authentication request unit 24 acquires access information from decrypted data that is a decryption result of the encrypted data E_Ks (access information). The authentication request unit 24 accesses the authentication device 30 by wireless communication using the access information. The authentication request unit 24 wirelessly transmits the message authentication code MAC_Ks (R3) to the authentication device 30. The authentication reception unit 34 of the authentication device 30 receives the message authentication code MAC_Ks (R3) from the terminal device 20 by radio. The message authentication code MAC_Ks (R3) corresponds to the authentication request information.

(Step S33) The authentication reception unit 34 of the authentication device 30 verifies the message authentication code MAC_Ks (R3) using the session key Ks and the random number R3. Specifically, the authentication reception unit 34 generates a message authentication code MAC_Ks (R3) of the random number R3 using the session key Ks. The authentication reception unit 34 compares the generated message authentication code MAC_Ks (R3) with the message authentication code MAC_Ks (R3) received from the terminal device 20. As a result of the comparison, if the two match, the verification of the message authentication code is passed. On the other hand, if the comparison results in a mismatch, the verification of the message authentication code fails. The authentication reception unit 34 records the verification result of the message authentication code.

  If the verification of the message authentication code of the authentication request information does not pass before the predetermined time elapses after the notification information is transmitted by the notification unit 33, the authentication reception unit 34 performs predetermined error processing, for example, An error message may be output. In addition, the notification unit 33 may retransmit the notification information when the authentication request information is not received before a predetermined time elapses after the notification information is transmitted. Further, the notification unit 33 may repeatedly perform retransmission of the broadcast information up to a preset upper limit number of retransmissions.

(Step S <b> 34) The service execution determination unit 35 of the authentication device 30 authenticates whether the service represented by the service information included in the transmission information received by the information reception unit 31 is provided to the terminal device 20 by the authentication reception unit 34. Judgment is made based on the result of verification of the message authentication code of the request information. Specifically, when the result of verification of the message authentication code of the authentication request information is acceptable, the service execution determination unit 35 displays the service represented by the service information included in the transmission information received by the information reception unit 31 as a terminal. It is determined that it is provided to the device 20. Thereby, for example, the authentication device 30 instructs the service providing device of the content distribution service to distribute the content specified by the service information to the terminal device 20. In response to the instruction, the service providing apparatus distributes the content specified by the service information to the terminal device 20.

  On the other hand, when the result of verification of the message authentication code of the authentication request information is unsuccessful, the service execution determining unit 35 displays the service represented by the service information included in the transmission information received by the information receiving unit 31 in the terminal device 20. Judged not to provide. In this case, the service execution determination unit 35 may execute predetermined error processing, for example, output of an error message.

[Multiple terminal device authentication stages]
Next, with reference to FIG. 6, the authentication step of the plurality of terminal devices according to the present embodiment will be described. The authentication stage of the plurality of terminal devices is executed, for example, when the user wants to distribute the plurality of terminal devices 20 when the user wants to distribute the content to the plurality of terminal devices 20 by the content distribution service.

  FIG. 6 is a sequence diagram illustrating an example of the authentication method according to the present embodiment. In FIG. 6, portions corresponding to the respective steps in FIG. Here, for simplification of description, a case where two terminal devices 20a and 20b are authenticated as the terminal device 20 will be described as an example. The same applies to the case where three or more terminal devices 20 are authenticated.

  Hereinafter, differences from the terminal device authentication stage described with reference to FIG. 5 will be mainly described. Here, similarly to the description in FIG. 5 described above, the terminal device 10 and the authentication device 30 communicate with each other by an NFC device. Similarly to the description in FIG. 5 described above, the authentication device 30 and the terminal devices 20a and 20b communicate wirelessly.

  The terminal device 20a and the terminal device 10 share the authentication information (the random number R1a and the random number R2a) at the authentication information sharing stage between the terminal devices described above. This authentication information (random number R1a and random number R2a) is authentication information shared with the terminal device 20a that the terminal device 10 has authenticated in advance. Accordingly, the authentication information (random number R1a and random number R2a) is securely shared between the terminal device 10 and the terminal device 20a. The terminal device 20a has a session key Kaa. The terminal device 10 may also have a session key Kaa. The terminal device 20b and the terminal device 10 share the authentication information (the random number R1b and the random number R2b) at the authentication information sharing stage between the terminal devices described above. This authentication information (random number R1b and random number R2b) is authentication information shared with the terminal device 20b that the terminal device 10 has authenticated in advance. Accordingly, the authentication information (random number R1b and random number R2b) is securely shared between the terminal device 10 and the terminal device 20b. The terminal device 20b has a session key Kab. The terminal device 10 may also have a session key Kab.

(Step S21) The information transmitting unit 12 of the terminal device 10 includes authentication information (random number R1a and random number R2a) shared with the terminal device 20a, authentication information (random number R1b and random number R2b) shared with the terminal device 20b, and a user ID. Is transmitted to the authentication device 30. The information transmission unit 12 combines the authentication information (random number R1a and random number R2a) shared with the terminal device 20a, the authentication information (random number R1b and random number R2b) shared with the terminal device 20b, and the user ID into the same transmission information. Alternatively, a set of authentication information (random number R1a and random number R2a) and user ID shared with the terminal device 20a, and a set of authentication information (random number R1b and random number R2b) and user ID shared with the terminal device 20b, respectively. It may be included in separate transmission information. The information transmission unit 12 may further include other information such as service information in addition to the transmission information including the authentication information.

(Step S22) The user brings the NFC device portion of the terminal device 10 close to or touches the NFC device portion of the authentication device 30. Thereby, the information transmission part 12 of the terminal device 10 transmits transmission information by an NFC device. The information receiving unit 31 of the authentication device 30 receives the transmission information by the NFC device. The information receiving unit 31 records information such as one authentication information (random number R1a and random number R2a) and another authentication information (random number R1b and random number R2b) included in the transmission information received by the NFC device.

(Step S23) The verification information generation unit 32 of the authentication device 30 generates a session key Kaa corresponding to the terminal device 20a and a session key Kab corresponding to the terminal device 20b. Specifically, the verification information generation unit 32 acquires a key K corresponding to the user ID included in the transmission information received by the information reception unit 31. The verification information generation unit 32 uses the authentication information (random number R1a and random number R2a) included in the transmission information received by the information reception unit 31 and the acquired key K to obtain a message authentication code MAC_K (R1a XOR R2a). The message authentication code MAC_K (R1a XOR R2a) is used as the session key Kaa. Similarly, the verification information generation unit 32 uses the authentication information (random number R1b and random number R2b) included in the transmission information received by the information reception unit 31 and the acquired key K to generate a message authentication code MAC_K (R1b XOR). R2b) is generated, and the message authentication code MAC_K (R1b XOR R2b) is used as the session key Kab. The verification information generation unit 32 records the session key Kaa and the session key Kab.

(Step S24) The verification information generating unit 32 of the authentication device 30 generates a random number R3a of authentication acceptance information corresponding to the terminal device 20a and a random number R3b of authentication acceptance information corresponding to the terminal device 20b. The verification information generation unit 32 records the random number R3a and the random number R3b.

(Step S25) The verification information generation unit 32 of the authentication device 30 generates a message authentication code of verification information corresponding to the terminal device 20a and a message authentication code of verification information corresponding to the terminal device 20b. Specifically, the verification information generation unit 32 uses the session key Kaa, the random number R3a, and the authentication information (the random number R1a and the random number R2a) included in the transmission information received by the information reception unit 31 to use the terminal device. The message authentication code MAC_Kaa (R1a || R2a || R3a) of the verification information corresponding to 20a is generated. Similarly, the verification information generation unit 32 uses the session key Kab, the random number R3b, and the authentication information (the random number R1b and the random number R2b) included in the transmission information received by the information reception unit 31, to the terminal device 20b. A message authentication code MAC_Kab (R1b || R2b || R3b) of the corresponding verification information is generated.

(Step S26) The notification unit 33 of the authentication device 30 generates a session key Ksa corresponding to the terminal device 20a and a session key Ksb corresponding to the terminal device 20b. Specifically, the notification unit 33 uses the session authentication key Kaa, the random number R3a, and the authentication information (the random number R1a and the random number R2a) included in the transmission information received by the information receiving unit 31 to generate the message authentication code MAC_Kaa ( R1a XOR R2a XOR R3a) is generated, and the message authentication code MAC_Kaa (R1a XOR R2a XOR R3a) is used as the session key Ksa. Similarly, the notification unit 33 uses the session key Kab, the random number R3b, and the authentication information (the random number R1b and the random number R2b) included in the transmission information received by the information reception unit 31 to use the message authentication code MAC_Kab (R1b XOR). R2b XOR R3b) is generated and the message authentication code MAC_Kab (R1b XOR R2b XOR R3b) is used as the session key Ksb. The notification unit 33 records the session key Ksa and the session key Ksb.

(Step S27) The notification unit 33 of the authentication device 30 generates notification information a corresponding to the terminal device 20a and notification information b corresponding to the terminal device 20b. Here, similarly to the description in FIG. 5 described above, the authentication reception information, the verification information, and the encrypted data of the access information are included in the broadcast information. Specifically, the notification unit 33 includes data “E_Ksa (access information) || MAC_Kaa (R1a || R2a || R3a) || R3a” corresponding to the terminal device 20a in the notification information a. Similarly, the notification unit 33 includes data “E_Ksb (access information) || MAC_Kab (R1b || R2b || R3b) || R3b” corresponding to the terminal device 20b in the notification information b.

(Step S28) The notification unit 33 of the authentication device 30 transmits the notification information a and the notification information b by a wireless communication broadcast signal. The notification information a and the notification information b are received by the terminal device 20a and the terminal device 20b that exist within the coverage of the wireless communication. The notification information receiving unit 22 of the terminal device 20a receives the notification information a and the notification information b by using the wireless communication broadcast signal. The notification information receiving unit 22 of the terminal device 20b receives the notification information a and the notification information b by using the wireless communication broadcast signal. Note that the notification unit 33 may transmit the notification information a and the notification information b in the same broadcast signal, or include the notification information a and the notification information b in separate broadcast signals twice. You may send it separately.

(Step S29) The verification unit 23 of the terminal device 20a obtains the message authentication code MAC_Kaa (R1a || R2a || R3a) included in the broadcast information a received by the broadcast information reception unit 22, the session key Kaa, Verification is performed using the shared authentication information (random number R1a and random number R2a) and the random number R3a included in the notification information a. Since the message authentication code included in the notification information a corresponds to the terminal device 20a, the verification of the message authentication code is passed. Since the verification of the message authentication code is successful, the verification unit 23 of the terminal device 20a records the random number R3a.

  In addition, the verification unit 23 of the terminal device 20a shares the message authentication code MAC_Kab (R1b || R2b || R3b) included in the broadcast information b received by the broadcast information receiving unit 22 with the session key Kaa and the terminal device 10. Verification is performed using authentication information (random number R1a and random number R2a) and random number R3b included in the notification information b. Since the message authentication code included in the notification information b does not correspond to the terminal device 20a, the verification of the message authentication code is rejected. Since the verification of the message authentication code fails, the verification unit 23 of the terminal device 20a does not record the random number R3b.

  The verification unit 23 of the terminal device 20b authenticates the message authentication code MAC_Kaa (R1a || R2a || R3a) included in the broadcast information a received by the broadcast information reception unit 22 with the session key Kab and the terminal device 10. Verification is performed using (random number R1b and random number R2b) and random number R3a included in the notification information a. Since the message authentication code included in the notification information a does not correspond to the terminal device 20b, the verification of the message authentication code is rejected. Since the verification of the message authentication code fails, the verification unit 23 of the terminal device 20b does not record the random number R3a.

  Further, the verification unit 23 of the terminal device 20b shares the message authentication code MAC_Kab (R1b || R2b || R3b) included in the broadcast information b received by the broadcast information receiving unit 22 with the session key Kab and the terminal device 10. Verification is performed using authentication information (random number R1b and random number R2b) and random number R3b included in the notification information b. Since the message authentication code included in the notification information b corresponds to the terminal device 20b, the verification of the message authentication code is passed. Since the verification of the message authentication code is successful, the verification unit 23 of the terminal device 20b records the random number R3b.

(Step S30) The authentication request unit 24 of the terminal device 20a generates a session key Ksa. Specifically, the authentication request unit 24 of the terminal device 20a uses the session key Kaa, the random number R3a, and the authentication information (random number R1a and random number R2a) shared with the terminal device 10 to generate the message authentication code MAC_Kaa (R1a). XOR R2a XOR R3a) is generated, and the message authentication code MAC_Kaa (R1a XOR R2a XOR R3a) is used as the session key Ksa. The authentication request unit 24 of the terminal device 20a records the session key Ksa.

  The authentication request unit 24 of the terminal device 20b generates a session key Ksb. Specifically, the authentication request unit 24 of the terminal device 20b uses the session key Kab, the random number R3b, and the authentication information (random number R1b and random number R2b) shared with the terminal device 10 to use the message authentication code MAC_Kab (R1b XOR R2b XOR R3b) is generated, and the message authentication code MAC_Kab (R1b XOR R2b XOR R3b) is used as the session key Ksb. The authentication request unit 24 of the terminal device 20b records the session key Ksb.

(Step S31) The authentication request unit 24 of the terminal device 20a generates the message authentication code MAC_Ksa (R3a) of the random number R3a using the session key Ksa.

  The authentication request unit 24 of the terminal device 20b generates the message authentication code MAC_Ksb (R3b) of the random number R3b using the session key Ksb.

(Step S32) The authentication request unit 24 of the terminal device 20a includes the encrypted data E_Ksa (access) included in the notification information a that has passed verification of the message authentication code among the notification information a and b received by the notification information reception unit 22. Information) is decrypted with the session key Ksa. The authentication request unit 24 of the terminal device 20a acquires access information from decrypted data that is a decryption result of the encrypted data E_Ksa (access information). The authentication request unit 24 of the terminal device 20a uses the access information to access the authentication device 30 by wireless communication. The authentication request unit 24 of the terminal device 20a transmits the message authentication code MAC_Ksa (R3a) to the authentication device 30 wirelessly. The authentication reception unit 34 of the authentication device 30 wirelessly receives the message authentication code MAC_Ksa (R3a) from the terminal device 20a. The message authentication code MAC_Ksa (R3a) corresponds to the authentication request information of the terminal device 20a.

  The authentication request unit 24 of the terminal device 20b includes the encrypted data E_Ksb (access information) included in the notification information b that has passed the verification of the message authentication code among the notification information a and b received by the notification information reception unit 22. Decrypt with session key Ksb. The authentication request unit 24 of the terminal device 20b acquires access information from decrypted data that is a decryption result of the encrypted data E_Ksb (access information). The authentication request unit 24 of the terminal device 20b uses the access information to access the authentication device 30 by wireless communication. The authentication request unit 24 of the terminal device 20b transmits the message authentication code MAC_Ksb (R3b) to the authentication device 30 wirelessly. The authentication reception unit 34 of the authentication device 30 wirelessly receives the message authentication code MAC_Ksb (R3b) from the terminal device 20b. The message authentication code MAC_Ksb (R3b) corresponds to the authentication request information of the terminal device 20b.

(Step S33) The authentication reception unit 34 of the authentication device 30 verifies the message authentication code MAC_Ksa (R3a) of the authentication request information of the terminal device 20a using the session key Ksa and the random number R3a corresponding to the terminal device 20a. . The authentication reception unit 34 records the verification result of the message authentication code. Further, the authentication receiving unit 34 of the authentication device 30 verifies the message authentication code MAC_Ksb (R3b) of the authentication request information of the terminal device 20b using the session key Ksb and the random number R3b corresponding to the terminal device 20b. The authentication reception unit 34 records the verification result of the message authentication code.

(Step S34) If the verification result of the message authentication code MAC_Ksa (R3a) of the authentication request information of the terminal device 20a is acceptable, the service execution determination unit 35 of the authentication device 30 transmits the transmission information received by the information reception unit 31. It is determined that the service represented by the service information included in is provided to the terminal device 20a. Thereby, for example, the authentication device 30 instructs the service providing device of the content distribution service to distribute the content specified by the service information to the terminal device 20a. In response to the instruction, the service providing device distributes the content specified by the service information to the terminal device 20a.

  On the other hand, if the result of verification of the message authentication code of the authentication request information of the terminal device 20a is unacceptable, the service execution determination unit 35 represents the service represented by the service information included in the transmission information received by the information reception unit 31. Is not provided to the terminal device 20a. In this case, the service execution determination unit 35 may execute predetermined error processing, for example, output of an error message.

  The service execution determination unit 35 of the authentication device 30 is included in the transmission information received by the information reception unit 31 when the verification result of the message authentication code MAC_Ksb (R3b) of the authentication request information of the terminal device 20b is acceptable. It is determined that the service represented by the service information to be provided is provided to the terminal device 20b. Thereby, for example, the authentication device 30 instructs the service providing device of the content distribution service to distribute the content specified by the service information to the terminal device 20b. In response to the instruction, the service providing apparatus distributes the content specified by the service information to the terminal device 20b.

  On the other hand, if the result of verification of the message authentication code of the authentication request information of the terminal device 20b is unacceptable, the service execution determination unit 35 represents the service represented by the service information included in the transmission information received by the information reception unit 31. Is not provided to the terminal device 20b. In this case, the service execution determination unit 35 may execute predetermined error processing, for example, output of an error message.

  The service represented by the service information may be different between the terminal device 20a and the terminal device 20b. In this case, the authentication device 30 provides each service so as to provide a service corresponding to each terminal device 20a, 20b based on the verification result of the message authentication code of the authentication request information of each terminal device 20a, 20b. Instruct the service providing device. For example, when the service information indicates that the content “a” is distributed to the terminal device 20a and the content “b” is distributed to the terminal device 20b, the authentication device 30 sends the message authentication code of the authentication request information of each of the terminal devices 20a and 20b. If both of the verification results are acceptable, the service distribution apparatus of the content distribution service is instructed to distribute the content a to the terminal device 20a and to distribute the content b to the terminal device 20b. In response to the instruction, the service providing apparatus distributes the content a to the terminal apparatus 20a and distributes the content b to the terminal apparatus 20b.

[Example 1]
FIG. 7 is a diagram illustrating Example 1 according to the present embodiment. In the first embodiment, a wireless LAN base station device (referred to as a wireless LAN access point) 60 includes an authentication device 30. A service providing device 61 is connected to the wireless LAN access point 60. The user brings the NFC device portion of the terminal device 10 close to or touches the NFC device portion of the wireless LAN access point 60 (authentication device 30). Thereby, the terminal apparatus 10 and the wireless LAN access point 60 (authentication apparatus 30) communicate with each other by the NFC device.

  When the terminal device 20 exists within the coverage of the wireless LAN access point 60, the terminal device 20 performs communication with the wireless LAN access point 60 by wireless LAN (referred to as wireless LAN communication). The service providing device 61 provides a service to the terminal device 20 by wireless LAN communication via the wireless LAN access point 60. For example, the service providing apparatus 61 of the content distribution service transmits the content specified by the service information in accordance with an instruction from the wireless LAN access point 60 (authentication apparatus 30) by wireless LAN communication via the wireless LAN access point 60. Delivered to the terminal device 20. Note that the terminal device 10 provides service by the user's operation unit 44 before the NFC device portion of the terminal device 10 is brought close to or touched by the NFC device portion of the wireless LAN access point 60 (authentication device 30). After the service desired to be received from the providing apparatus 61 is specified, the service providing apparatus is brought into contact with or touched by the NFC device part of the wireless LAN access point 60 (authentication apparatus 30). A service provided from 61 to the terminal device 20 can be designated.

  According to the first embodiment, for example, the user authenticates the terminal device 20 with the wireless LAN access point 60 (authentication device 30) installed in a store, a station, or the like, and performs wireless LAN on the authenticated terminal device 20. Service can be received from the service providing apparatus 61 by communication.

[Example 2]
FIG. 8 is a diagram illustrating Example 2 according to the present embodiment. In the second embodiment, the service providing device 70 includes the authentication device 30. The service providing apparatus 70 includes an operation unit 71. The operation unit 71 has a function for performing an operation of designating a service that the user wants the terminal device 20 to provide. For example, the operation unit 71 may include an operation button for each service that can be provided. The user designates a service desired to be provided to the terminal device 20 by pressing an operation button of a desired service. For example, the operation unit 71 of the service providing apparatus 70 for content distribution service includes an operation button for each content that can be provided (for example, a moving image). The user designates the content desired to be distributed to the terminal device 20 by pressing an operation button for the desired content.

  For example, the operation unit 71 may include a touch panel and display a service menu screen having an operation area for each service that can be provided. The user touches the operation area of a desired service from the operation areas of the service menu screen displayed on the display screen of the touch panel, thereby designating a service desired to be provided to the terminal device 20. For example, the operation unit 71 of the service providing apparatus 70 for content distribution service displays a service menu screen having an operation area for each content that can be provided (for example, a moving image) on the display screen of the touch panel. The user touches the operation area of the desired content from the operation area of the service menu screen displayed on the display screen of the touch panel, thereby specifying the content desired to be distributed to the terminal device 20.

  The user brings the NFC device portion of the terminal device 10 close to or touches the NFC device portion of the service providing device 70 (authentication device 30). Thereby, the terminal apparatus 10 and the service providing apparatus 70 (authentication apparatus 30) communicate with each other by the NFC device.

  The terminal device 20 performs wireless communication with the service providing device 70. This wireless communication may be, for example, wireless communication using a wireless communication network such as a mobile phone network or a wireless LAN, or may be wireless communication using a short-range wireless communication system. The service providing device 70 provides a service to the terminal device 20 by wireless communication. For example, in response to an instruction from the authentication device 30, the content distribution service service providing device 70 distributes content specified by the user through the operation unit 71 to the terminal device 20 by wireless communication.

  According to the second embodiment, for example, the user authenticates the terminal device 20 by the service providing device 70 (authentication device 30) installed in a store, a station, or the like and designates a service desired to be provided to the terminal device 20. Service can be received from the service providing device 70 by wireless communication with the authenticated terminal device 20. In the second embodiment, the service information may not be included in the transmission information transmitted from the terminal device 10 to the authentication device 30.

  According to the above-described embodiment, the authentication of the terminal device 20 is automatically performed by another terminal device 10 that shares in advance the authentication information used for authentication of the terminal device 20 to be authenticated with the terminal device 20. Can be implemented. Thereby, the convenience of a user having a plurality of terminal devices can be improved.

For example, it is assumed that the user has a smartphone that is usually used easily and a tablet PC that is used when, for example, viewing a moving image. According to the present embodiment, the user can easily perform an operation for receiving provision of the content distribution service with the smartphone (corresponding to the terminal device 10). Then, the user can have the content (for example, moving image) provided by the content distribution service distributed to the tablet PC (corresponding to the terminal device 20). This eliminates the need for the user to operate the tablet PC and receive authentication of the content distribution service, improving user convenience.
Further, for example, in the authentication stage of the terminal device shown in FIG. 5, the authentication information (random number R1 and random number R2) transmitted from the terminal device 10 to the authentication device 30 is the same as the terminal device 20 that the terminal device 10 has already authenticated. Authentication information to be shared. Thereby, since the authentication information (random number R1 and random number R2) is safely shared between the terminal device 10 and the terminal device 20, impersonation and erroneous registration of the terminal device 20 are prevented. Further, the authentication acceptance information (random number R3) notified from the authentication device 30 in step S28 of FIG. 5 is the authentication information (random number R1 and random number R2) shared by the pre-authentication between the terminal device 10 and the terminal device 20. It becomes effective as the session key Ks by the combination. Therefore, if the authentication information (random number R1 and random number R2) is safe, the security of the authentication reception information (random number R3) is not essential, so the authentication reception information (random number R3) is broadcasted in step S28 of FIG. Even if it is acquired by an unspecified terminal device, impersonation of the terminal device 20 can be prevented. As a result, it is possible to easily notify the authentication acceptance information (random number R3) by broadcasting.

[Other Embodiments]
Another embodiment will be described. This embodiment is a modification of the above-described embodiment. Hereinafter, differences from the above-described embodiment will be mainly described. FIG. 9 is a diagram illustrating a configuration example of an authentication system 1a according to another embodiment. 9, parts corresponding to those in FIG. 1 are given the same reference numerals, and descriptions thereof are omitted. The authentication system 1a illustrated in FIG. 9 includes a terminal device 10, a terminal device 20, and an authentication device 30a. FIG. 9 shows a functional configuration example of each device. The authentication device 30a further includes an inter-terminal authentication unit 36 with respect to the authentication device 30 shown in FIG. The inter-terminal authentication unit 36 of the authentication device 30a and the inter-terminal authentication unit 11 of the terminal device 10 perform mutual authentication.

  FIG. 10 is a sequence diagram illustrating an example of the authentication method according to the present embodiment. In FIG. 10, parts corresponding to the respective steps in FIG. The authentication stage of the terminal device according to the present embodiment will be described with reference to FIG. In the authentication stage of the terminal device according to the present embodiment, a mutual authentication step S100 between the authentication device 30a and the terminal device 10 is further added to the authentication stage of the terminal device shown in FIG. Steps other than step S100 are the same as those in FIG.

  FIG. 11 is a sequence diagram illustrating an example of the authentication method in step S100 illustrated in FIG. Step S100 shown in FIG. 10 will be described with reference to FIG. Here, as an example, it is assumed that the terminal device 10 and the authentication device 30a communicate with each other by an NFC device.

  The authentication method in step S100 shown in FIG. 11 is the same as the authentication method shown in FIG. In FIG. 11, the terminal device 10 executes the same processing as that of the terminal device 20 shown in FIG. 4, and the authentication device 30a executes the same processing as that of the terminal device 10 shown in FIG. Hereinafter, differences from the processing of FIG. 4 will be mainly described. Steps S101 to S109 shown in FIG. 11 correspond to steps S1 to S9 shown in FIG. In FIG. 11, the random number R11 corresponds to the random number R1 in FIG. 4, and the random number R12 corresponds to the random number R2 in FIG. In step S102, the inter-terminal authentication unit 11 of the terminal device 10 transmits the random number R11 and the user ID to the authentication device 30a. The inter-terminal authentication unit 36 of the authentication device 30a receives and records the random number R11 and the user ID. In step S <b> 104, the inter-terminal authentication unit 36 of the authentication device 30 a acquires the key K corresponding to the user ID received from the terminal device 10. The inter-terminal authentication unit 36 generates a message authentication code (MAC) for the random number R11 and the random number R12 using the acquired key K. The other processes are the same as the processes in steps S1 to S9 shown in FIG.

  In the above-described step S100, when the mutual authentication between the authentication device 30a and the terminal device 10 is successful, the processing after step S21 in FIG. 10 is executed. On the other hand, when the mutual authentication between the authentication device 30a and the terminal device 10 fails in step S100 described above, the processing in FIG.

  According to the present embodiment, since mutual authentication between the authentication device 30a and the terminal device 10 is performed, an effect of improving the reliability of the terminal device 10 accessing the authentication device 30a is obtained.

  As mentioned above, although embodiment of this invention was explained in full detail with reference to drawings, the specific structure is not restricted to this embodiment, The design change etc. of the range which does not deviate from the summary of this invention are included.

  In the embodiment described above, as services provided to the terminal device 20, various services such as a content distribution service such as moving images and music, a software update service of the terminal device 20, and an image upload service to the image management server are provided. Applicable to.

Further, a computer program for realizing the functions of the terminal device 10, the terminal device 20, or the authentication devices 30 and 30a described above is recorded on a computer-readable recording medium, and the program recorded on the recording medium is stored in the computer system. May be read and executed. Here, the “computer system” may include an OS and hardware such as peripheral devices.
“Computer-readable recording medium” refers to a flexible disk, a magneto-optical disk, a ROM, a writable nonvolatile memory such as a flash memory, a portable medium such as a DVD (Digital Versatile Disc), and a built-in computer system. A storage device such as a hard disk.

Further, the “computer-readable recording medium” means a volatile memory (for example, DRAM (Dynamic DRAM) in a computer system that becomes a server or a client when a program is transmitted through a network such as the Internet or a communication line such as a telephone line. Random Access Memory)), etc., which hold programs for a certain period of time.
The program may be transmitted from a computer system storing the program in a storage device or the like to another computer system via a transmission medium or by a transmission wave in the transmission medium. Here, the “transmission medium” for transmitting the program refers to a medium having a function of transmitting information, such as a network (communication network) such as the Internet or a communication line (communication line) such as a telephone line.
The program may be for realizing a part of the functions described above. Furthermore, what can implement | achieve the function mentioned above in combination with the program already recorded on the computer system, and what is called a difference file (difference program) may be sufficient.

DESCRIPTION OF SYMBOLS 1,1a ... Authentication system, 10 ... Terminal device (1st terminal device), 11, 21, 36 ... Inter-terminal authentication part, 12 ... Information transmission part, 20 ... Terminal device (2nd terminal device), 22 ... Notification information receiving unit, 23 ... verification unit, 24 ... authentication request unit, 30, 30a ... authentication device, 31 ... information reception unit, 32 ... verification information generation unit, 33 ... notification unit, 34 ... authentication reception unit, 35 ... service Execution determination unit, 41, 51 ... CPU, 42,52 ... memory, 43,53 ... nonvolatile memory, 44,71 ... operation unit, 45 ... display unit, 46,54 ... communication unit, 47,55 ... NFC unit, 48, 56 ... program, 60 ... wireless LAN access point, 61, 70 ... service providing device

Claims (13)

A first terminal device, a second terminal device, and an authentication device;
The first terminal device is:
An information transmission unit for transmitting transmission information including authentication information shared with the second terminal device to the authentication device;
The authentication device
An information receiving unit for receiving the transmission information from the first terminal device;
A notifying unit for notifying information by communication including authentication acceptance information used for authentication of the second terminal device;
Validity of authentication request information received by communication is verified based on the authentication information included in the transmission information received by the information reception unit and the authentication acceptance information included in the notification information notified by the notification unit. And an authentication reception unit
The second terminal device is:
A notification information receiving unit for receiving the notification information from the authentication device by communication;
Authentication for transmitting the authentication request information based on the authentication acceptance information included in the notification information received by the notification information receiving unit and the authentication information shared with the first terminal device to the authentication device by communication A request unit,
Authentication system. The authentication apparatus further includes a verification information generation unit that generates verification information based on the authentication acceptance information and the authentication information included in the transmission information received by the information reception unit,
The notification unit further includes the verification information generated by the verification information generation unit in the notification information,
The second terminal device shares the validity of the authentication acceptance information included in the notification information received by the notification information receiving unit with the verification information included in the notification information and the first terminal device. A verification unit for verifying based on the authentication information;
The authentication system according to claim 1. The first terminal device further includes an inter-terminal authentication unit that performs mutual authentication with the second terminal device and shares the authentication information with the second terminal device,
The second terminal device further includes an inter-terminal authentication unit that performs mutual authentication with the first terminal device and shares the authentication information with the first terminal device.
The authentication system according to claim 1 or 2. The information transmission unit further includes service information representing a service received by the second terminal device in the transmission information,
The authentication device determines whether or not to provide the second terminal device with a service represented by the service information included in the transmission information received by the information receiving unit. A service execution determination unit that determines based on the verification result of
The authentication system according to any one of claims 1 to 3. The information transmission unit transmits the transmission information by short-range wireless communication,
The information receiving unit receives the transmission information by the short-range wireless communication;
The authentication system according to any one of claims 1 to 4. The notification unit transmits the notification information by a broadcast signal of wireless communication,
The broadcast information receiving unit receives the broadcast information by a broadcast signal of the wireless communication.
The authentication system according to any one of claims 1 to 5. A first terminal device;
The transmission information is received from the first terminal device, the notification information including the authentication acceptance information used for authentication of the second terminal device is notified by communication, and the validity of the authentication request information received by communication is transmitted. An authentication device for verifying based on the authentication information included in the information and the authentication acceptance information;
The notification information is received from the authentication device by communication, and the authentication request information based on the authentication acceptance information included in the notification information and the authentication information shared with the first terminal device is transmitted by the communication. Said second terminal device for transmitting to;
The first terminal device of the authentication system comprising:
An information transmission unit for transmitting the transmission information including the authentication information shared with the second terminal device to the authentication device;
A terminal device comprising: An authentication device;
A first terminal device for transmitting transmission information including authentication information shared with a second terminal device to the authentication device;
Notification information is received from the authentication device by communication, and authentication request information based on the authentication acceptance information included in the notification information and the authentication information shared with the first terminal device is transmitted to the authentication device by communication. The second terminal device;
The authentication device of an authentication system comprising:
An information receiving unit for receiving the transmission information from the first terminal device;
A notifying unit for notifying the notification information including the authentication acceptance information used for authentication of the second terminal device by communication;
Validity of authentication request information received by communication is verified based on the authentication information included in the transmission information received by the information reception unit and the authentication acceptance information included in the notification information notified by the notification unit. An authentication reception unit to
An authentication device comprising: A second terminal device;
A first terminal device for transmitting transmission information including authentication information shared with the second terminal device to the authentication device;
The transmission information is received from the first terminal device, notification information including authentication acceptance information used for authentication of the second terminal device is notified by communication, and the validity of the authentication request information received by communication is confirmed. The authentication device for verifying based on authentication information included in the transmission information and the authentication acceptance information;
The second terminal device of the authentication system comprising:
A notification information receiving unit for receiving the notification information from the authentication device by communication;
Authentication for transmitting the authentication request information based on the authentication acceptance information included in the notification information received by the notification information receiving unit and the authentication information shared with the first terminal device to the authentication device by communication A request section;
A terminal device comprising: An authentication method for an authentication system comprising a first terminal device, a second terminal device, and an authentication device,
An information transmitting step in which the first terminal device transmits transmission information including authentication information shared with the second terminal device to the authentication device;
An information receiving step in which the authentication device receives the transmission information from the first terminal device;
A notification step in which the authentication device notifies the notification information including the authentication acceptance information used for authentication of the second terminal device by communication;
A notification information receiving step in which the second terminal device receives the notification information from the authentication device by communication;
Authentication request information based on the authentication acceptance information included in the notification information received in the notification information receiving step and the authentication information shared with the first terminal device is transmitted by the second terminal device through communication. An authentication requesting step for transmitting to the authentication device;
The authentication reception information included in the notification information notified in the authentication information included in the transmission information received in the information receiving step and the notification information notified in the notification step of the validity of the authentication request information received by the authentication device. An authentication acceptance step for verifying based on
An authentication method that includes: A first terminal device;
The transmission information is received from the first terminal device, the notification information including the authentication acceptance information used for authentication of the second terminal device is notified by communication, and the validity of the authentication request information received by communication is transmitted. An authentication device for verifying based on the authentication information included in the information and the authentication acceptance information;
The notification information is received from the authentication device by communication, and the authentication request information based on the authentication acceptance information included in the notification information and the authentication information shared with the first terminal device is transmitted by the communication. Said second terminal device for transmitting to;
In the computer of the first terminal device of the authentication system comprising:
An information transmission function for transmitting the transmission information including the authentication information shared with the second terminal device to the authentication device;
Computer program for realizing. An authentication device;
A first terminal device for transmitting transmission information including authentication information shared with a second terminal device to the authentication device;
Notification information is received from the authentication device by communication, and authentication request information based on the authentication acceptance information included in the notification information and the authentication information shared with the first terminal device is transmitted to the authentication device by communication. The second terminal device;
A computer of the authentication device of the authentication system comprising:
An information receiving function for receiving the transmission information from the first terminal device;
A notification function for notifying the notification information including the authentication acceptance information used for authentication of the second terminal device by communication;
Validity of authentication request information received by communication is verified based on the authentication information included in the transmission information received by the information reception function and the authentication acceptance information included in the notification information notified by the notification function. Authentication acceptance function to
Computer program for realizing. A second terminal device;
A first terminal device for transmitting transmission information including authentication information shared with the second terminal device to the authentication device;
The transmission information is received from the first terminal device, notification information including authentication acceptance information used for authentication of the second terminal device is notified by communication, and the validity of the authentication request information received by communication is confirmed. The authentication device for verifying based on authentication information included in the transmission information and the authentication acceptance information;
In the computer of the second terminal device of the authentication system comprising:
A notification information receiving function for receiving the notification information from the authentication device by communication;
Authentication for transmitting the authentication request information based on the authentication acceptance information included in the broadcast information received by the broadcast information reception function and the authentication information shared with the first terminal device to the authentication device by communication Request function,
Computer program for realizing.

Images