JP2023082496A - Electronic information storage medium, processing method and program - Google Patents

Abstract

To provide an electronic information storage medium, processing method and program which can utilize a personal authentication function by managing personal confirmation information that can be used for each of a plurality of applications.SOLUTION: A management application AP0 holds an identifier indicating a type of personal confirmation information that can be used for personal authentication for each application APn, determines whether or not the personal confirmation information specified by an identifier included in a determination request on the basis of the held identifier can be used for personal authentication according to the determination request including the identifier indicating the type of personal confirmation information from the application AP1, and returns the authentication result of personal authentication executed by an OS using the personal confirmation information to the application AP1 when determining that the personal confirmation information can be used for personal authentication.SELECTED DRAWING: Figure 5

Description

TECHNICAL FIELD The present invention relates to a technical field such as an IC card having a plurality of applications and having a person authentication function.

In recent years, an IC card capable of loading multiple applications has been known. In such an IC card, an operating system manages a logical channel, which is a logical communication path. A channel management function can assign different applications to each channel, for example as disclosed in US Pat. On the other hand, for example, Patent Document 2 discloses an IC card incorporating a fingerprint sensor, and such an IC card performs user authentication using fingerprint data read by the fingerprint sensor. .

Japanese Unexamined Patent Application Publication No. 2011-216068 Japanese Patent No. 4164732

By the way, when an IC card has a personal authentication function capable of performing different authentication processes using a plurality of types of personal authentication information (for example, fingerprint data of the index finger, fingerprint data of both the index finger and the middle finger), the conventional With technology, it has been difficult to manage personal identification information that can be used for each of a plurality of applications and use the personal identification function.

Therefore, the present invention has been made in view of such problems and the like. It aims at providing a processing method and a program.

In order to solve the above problems, the invention according to claim 1 is an electronic information storage medium capable of loading a plurality of applications selected according to a selection command received from an external terminal, wherein a plurality of types of personal identification authentication processing means capable of executing different personal authentication using each information; holding means holding an identifier indicating a type of personal identification information that can be used for personal authentication for each application; In response to a determination request containing an identifier indicating a type of confirmation information, the identity verification information specified by the identifier included in the determination request based on the identifier held by the holding means can be used for the identity verification. and a determination means for determining whether or not there is identity authentication performed by the authentication processing means using the identity verification information when the determination means determines that the identity verification information can be used for the identity authentication. and response means for responding to the application with the authentication result of.

The invention according to claim 2 is the electronic information storage medium according to claim 1, wherein the electronic information storage medium comprises a management application comprising the determination means and the response means, and an operating system comprising the authentication processing means. is installed, and the application being selected makes the judgment request to the management application when a command from the external terminal is received via the operating system, and the authentication result returned from the management application is returned to the operating system.

The invention according to claim 3 is the electronic information storage medium according to claim 2, wherein the authentication processing means executes the personal authentication before the command is received from the external terminal, and performs the personal authentication. It is characterized by notifying the management application of the authentication result.

The invention according to claim 4 is the electronic information storage medium according to any one of claims 1 to 3, further comprising a biometric data acquisition sensor for acquiring biometric data from the user's body as the identity verification information, The authentication processing means is characterized in that the biometric data acquired by the biometric data acquisition sensor is used to perform the personal authentication.

The invention according to claim 5 is provided with authentication processing means capable of carrying out a plurality of applications selected according to a selection command received from an external terminal, and executing different identity authentication using each of a plurality of types of identity verification information. and holding means for holding an identifier indicating a type of personal identification information that can be used for personal identification for each application, wherein the personal identification from the selected application is executed by an electronic information storage medium. In response to a determination request containing an identifier indicating a type of information, identity verification information specified by the identifier included in the determination request based on the identifier held by the holding means can be used for the identity authentication. and if it is determined that the identity verification information can be used for the identity verification, the authentication result of the identity verification executed by the authentication processing means using the identity verification information is sent to the and responding to the application.

According to the sixth aspect of the invention, there is provided an authentication processing means that is capable of executing different identity authentications using multiple types of identity verification information, and that is equipped with a plurality of applications that are selected according to a selection command received from an external terminal. and holding means for holding an identifier indicating a type of personal identification information that can be used for personal authentication for each application, and a computer included in the electronic information storage medium, which stores the type of personal identification information from the selected application. in response to a determination request containing an identifier indicating whether or not the identity verification information specified by the identifier included in the determination request can be used for the identity authentication based on the identifier held by the holding means and, if it is determined that the identity verification information can be used for the identity verification, responding to the application an authentication result of the identity verification executed by the authentication processing means using the identity verification information. It is characterized by executing a step.

According to the present invention, the user authentication function can be used by managing user authentication information that can be used for each of a plurality of applications.

2 is a diagram showing an example of a schematic configuration of an IC card C; FIG. 2 is a diagram showing an example hardware configuration of an IC chip 2; FIG. 2 is a diagram showing a software configuration example of an IC chip 2; FIG. It is a figure which shows an example of usage authority information. FIG. 10 is a flow chart showing an example of processing of the selected application AP1, the management application AP0, and the OS; FIG.

BEST MODE FOR CARRYING OUT THE INVENTION Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings. The embodiments described below are embodiments in which the present invention is applied to an IC card with a fingerprint authentication function.

[1. Configuration and function of IC card C]
First, referring to FIG. 1, the configuration and functions of an IC card C according to this embodiment will be described. FIG. 1 is a diagram showing a schematic configuration example of an IC card C. As shown in FIG. As shown in FIG. 1, the IC card C includes a fingerprint sensor 1, an IC chip 2, etc., and these components are electrically connected via an interface. The IC card C and IC chip 2 are examples of electronic information storage media. Examples of the IC card C include credit cards, cash cards, electronic money cards, and the like.

The IC card C is provided with, for example, an antenna (not shown) capable of transmitting and receiving radio waves. The antenna receives radio waves (RF signals) transmitted from an external terminal T (having a reader/writer) such as a payment terminal, outputs the electrical signal to the IC chip 2, and also receives the electrical signal output from the IC chip 2. is transmitted as radio waves. Thereby, contactless communication can be performed between the IC chip 2 and the external terminal T. FIG. Also, the IC chip 2 may be connected to a PIN (Personal Identification Number) pad. A PIN pad is a small terminal on which numeric keys are arranged for inputting a personal identification number, and is connected to the external terminal T. FIG. Such a personal identification number is an example of the identification information of the user of the IC card C, and is used for the identification of the user.

A fingerprint sensor 1 (an example of a biometric data acquisition sensor) is mounted on the surface of the IC card C, reads the fingerprint from the pad of the finger of the user using the IC card C, and acquires the fingerprint data (an example of biometric data). , outputs the fingerprint data to the IC chip 2 . The fingerprint data is an example of identity verification information of the user of the IC card C, and is used for identity verification of the user. For example, the fingerprint sensor 1 has tens of thousands of electrodes and a contact surface with which a pad of a user's finger contacts. An amount of electric charge accumulates according to the proximity to the contact surface due to the unevenness of the pad of the finger (that is, the unevenness forming the fingerprint). The fingerprint sensor 1 acquires fingerprint data by detecting the amount of charge accumulated in each electrode and converting it into a numerical value (that is, a numerical value corresponding to the amount of charge). Note that the fingerprint sensor 1 may acquire fingerprint data by a method other than the above.

FIG. 2 is a diagram showing a hardware configuration example of the IC chip 2. As shown in FIG. As shown in FIG. 2, the IC chip 2 includes, as hardware, an I/O circuit 21, a RAM (Random Access Memory) 22, an NVM (Nonvolatile Memory) 23, a ROM (Read Only Memory) 24, and a CPU (Central Processing Unit) 25 and the like. The I/O circuit 21 serves as an interface between the fingerprint sensor 1 and the external terminal T. FIG. A PIN pad may be connected to the I/O circuit 21 . The I/O circuit 21 may include eight contact terminals C1 to C8 defined by ISO/IEC7816, for example. Communication between the IC chip 2 and the external terminal T may be non-contact communication via the antenna and the I/O circuit 21, or contact communication via the I/O circuit 21. . The NVM 23 or ROM 24 stores programs such as an operating system (hereinafter referred to as "OS"), management applications, and multiple applications (including the program of the present invention). These programs function as software (software modules) loaded on the IC chip 2 by being executed by the CPU 25 .

FIG. 3 is a diagram showing a software configuration example of the IC chip 2. As shown in FIG. As shown in FIG. 3, the IC chip 2 operates an OS, a management application AP0, and a plurality of applications APn (n is a natural number equal to or greater than 1). Here, the OS includes a command transmitting/receiving unit 251, an authentication reference information holding unit 252, and an authentication (collation) processing unit 253 (an example of authentication processing means) in addition to the function of managing multiple logical channels. Here, a logical channel is a logical channel for accessing application APn. For example, application AP11 is assigned to logical channel Ch0, and application AP2 is assigned to logical channel Ch1.

The command transmission/reception unit 251 receives a command from the external terminal T via the I/O circuit 21, and transmits the received command to the currently selected application APn. Further, upon receiving a response from the currently selected application APn, the command transmission/reception unit 251 transmits the received response to the external terminal T via the I/O circuit 21 . The application APn being selected is an application APn selected by the OS according to a selection command (SELECT command) received from the external terminal T. FIG. The authentication reference information holding unit 252 pre-stores (holds) authentication reference information for each type to be collated with the personal identification information from the fingerprint sensor 1 or the PIN pad. The authentication reference information is fingerprint data, a personal identification number, or the like acquired prior to the identification information. The authentication reference information is held in association with an identifier indicating the type of the authentication reference information.

The authentication processing unit 253 executes personal authentication (authentication processing) by comparing the personal identification information with the authentication reference information, and notifies the management application AP0 of the authentication result. In such personal authentication, if the personal identification information and the authentication reference information match, the authentication succeeds (identification is successful), and if the personal identification information and the authentication reference information do not match, the authentication fails (identification fails). becomes. In addition, the authentication processing unit 253 can execute different personal authentications using multiple types of personal identification information. For example, in a certain personal authentication, index finger fingerprint data is collated as personal identification information with index finger fingerprint data as authentication reference information. In another personal authentication, the fingerprint data of both the index finger and the middle finger are collated as the personal identification information and the fingerprint data of both the index finger and the middle finger as the authentication reference information. In still another personal authentication, a personal identification number as personal identification information and a personal identification number as authentication reference information are collated. The type of personal identification information can be identified by an identifier indicating the type.

The management application AP0 includes an authentication result acquisition unit 254, an authentication result storage unit 255, a usage authority information storage unit 256 (an example of storage means), and a request control unit 257 (an example of determination means and response means). Note that each part of the management application AP0 may be implemented in the OS. Alternatively, the management application AP0 may be implemented in the IC chip 2 as an API (Application Programming Interface) called from the application APn. The authentication result acquiring unit 254 acquires from the authentication processing unit 253 the authentication result of the user authentication performed by the authentication processing unit 253 and the identifier indicating the type of the user verification information used for the user authentication. The authentication result holding unit 255 holds the authentication result acquired by the authentication result acquisition unit 254 and the identifier indicating the type of the personal identification information in association with each other.

The usage authority information holding unit 256 holds usage authority information including an identifier indicating the type of identity verification information that can be used for identity authentication for each application APn. From the usage authority information, it is possible to determine for each application APn which type of identity verification information can be used for identity authentication (that is, whether use is permitted). For example, when the selected application APn receives a command from the command transmitting/receiving unit 251 of the OS, it requests the management application AP0 for determination including an identifier indicating the type of personal identification information. If it is determined that it can be used for personal authentication, the authentication result of the personal authentication is received from the management application AP0.

FIG. 4 is a diagram showing an example of usage authority information. In the example of FIG. 4, for AID (Application Identifier) "A001" of application AP1, identifier "03" indicating the type of fingerprint data of the index finger of the left hand and identifier "09" indicating the type of fingerprint data of the middle finger of the right hand are assigned. tuples are associated. This indicates that the application AP1 can use a set (AND condition) of fingerprint data of the index finger of the left hand and fingerprint data of the middle finger of the right hand for personal authentication. Also, the AID "A002" of the application AP2 is associated with the identifier "01" indicating the type of the personal identification number. This indicates that the application AP2 can use the personal identification number for personal authentication. AID "A003" of application AP3 is associated with identifier "05" indicating the type of fingerprint data of the ring finger of the left hand. This indicates that the application AP3 can use the fingerprint data of the ring finger of the left hand for personal authentication.

The request control unit 257, in response to a determination request including an identifier indicating the type of identity verification information from the currently selected application APn, based on the usage authorization information including the identifier held by the usage authorization information holding unit 256, It is determined whether or not the identity verification information specified by the identifier included in the determination request can be used for identity verification. When the request control unit 257 determines that the personal identification information can be used for personal authentication, the request control unit 257 stores the authentication result of the personal identification previously performed using the personal identification information as the authentication result holding unit 255. , and responds (notifies) to the selected application APn. As a result, the selected application APn receives the authentication result of the personal authentication as described above, and returns a response including the authentication result to the command transmission/reception unit 251 of the OS.

[2. Operation of IC card C]
Next, the operation of the IC card C will be described with reference to FIG. In the operation example below, it is assumed that the application AP1 is selected from among the plurality of applications APn. FIG. 5 is a flow chart showing an example of processing of the selected application AP1, management application AP0, and OS. For example, when the user holds up the IC card C to the external terminal T while touching the fingerprint sensor 1 of the IC card C with the pad of the finger, the voltage induced by the antenna supplies power to the IC card C, thereby supplying the IC chip 2 with power. is activated, and the external terminal T recognizes the IC chip 2 . When power is supplied from the activated IC chip 2 to the fingerprint sensor 1, the fingerprint sensor 1 reads the fingerprint from the pad of the user's finger and outputs the fingerprint data to the IC chip 2 as personal identification information. By inserting the IC card C into the PIN pad and inputting the personal identification number by the user, the personal identification number may be output to the IC chip 2 as the personal identification information.

Next, when the OS of the IC chip 2 inputs identity verification information via the I/O circuit 21 (step S1), it identifies the type of identity verification information (for example, specifies from the data format of the identity verification information), and identifies the identity verification information. The authentication reference information associated with the identifier of the type obtained is acquired (acquired from the authentication reference information holding unit 252) (step S2). Next, the OS executes identity authentication by comparing the identity verification information input in step S1 with the authentication reference information acquired in step S2 by the authentication processing unit 253 (step S3), and the authentication result of the identity authentication And, the management application AP0 is notified of the identifier indicating the type of the personal identification information used for the personal identification (step S4). Next, the management application AP0 acquires the authentication result from the OS and an identifier indicating the type of identity verification information by the authentication result acquisition unit 254 (step S5), and receives the authentication result and the identifier indicating the type of identity verification information as the authentication result. It is held in the holding section 255 (step S6).

On the other hand, when the external terminal T recognizes the IC chip 2 , the external terminal T transmits to the IC chip 2 a command indicating an authentication request (for example, verify command). The OS of the IC chip 2 receives the command from the external terminal T through the I/O circuit 21 and the command transmitter/receiver 251 (step S7). It is desirable that the authentication processing unit 253 completes the authentication of the user before receiving such a command, and notifies the management application AP0 of the result of the authentication of the user. This is because the completion of personal authentication may not be completed in time if personal authentication is started after the OS receives the command. Next, the OS transmits the command received in step S7 to the selected application AP1 (step S8).

Next, when the selected application AP1 receives a command from the OS (step S9), it transmits a determination request to the application AP1 (step S10). Here, the determination request preferably includes the AID of the currently selected application AP1 in addition to the identifier indicating the type of personal identification information that the application AP1 wishes to use. Also, a plurality of identifiers indicating the types of personal identification information may be included in the determination request. For example, an identifier “01” indicating the type of personal identification number and an identifier “05” indicating the type of fingerprint data of the ring finger of the left hand are included in the determination request as an OR condition.

Note that when the management application AP0 is implemented in the IC chip 2 as an API called from the application AP1, such a determination request is an argument (including an identifier indicating the type of personal identification information) given from the application AP1 to the management application AP0. becomes. In this case, the management application AP0 recognizes the AID of the caller application AP1 when called.

Next, when the management application AP0 receives the determination request from the currently selected application AP1 (step S11), it checks the usage authority information held in the usage authority information holding unit 256 (step S12). Next, the management application AP0 determines whether or not the identity verification information specified by the identifier included in the determination request can be used for identity verification by the request control unit 25 based on the use authority information (step S13). For example, in the usage authority information, if an identifier indicating the type of identity verification information included in the determination request is associated with the AID of the application AP1, it is determined that the identity verification information can be used for identity verification. be. In addition, when a plurality of identifiers indicating the types of personal identification information are included in the determination request, and when any one of the plurality of identifiers is associated with the AID of the application AP1, the single identifier identifies the identity verification information. It is determined that the obtained personal identification information can be used for personal authentication.

Then, if it is determined in step S13 that the identity verification information can be used for identity verification (step S13: YES), the management application AP0 associates the identity verification information with the identifier indicating the type of the identity verification information in step S6. The authentication result held by the request controller 25 is obtained from the authentication result holding unit 255 (step S14), and the request control unit 25 responds to the currently selected application AP1 with the obtained authentication result (step S15). For example, the authentication result is sent back to application AP1 as a response code. Examples of such response codes include "0000" (authentication not performed), "0001" (authentication in progress), "0002" (authentication successful), and "0003" (authentication failure). If the management application AP0 is implemented in the IC chip 2 as an API called from the application AP1, the response code is returned to the application AP1 as a return value.

On the other hand, if it is determined in step S13 that the personal identification information cannot be used for personal authentication (step S13: NO), the management application AP0 causes the request control unit 25 to send an error response to the selected application AP1 ( step S16). For example, an error code "FFFF" is returned to the application AP1 as an error response. If the management application AP0 is implemented in the IC chip 2 as an API called from the application AP1, the error code is returned to the application AP1 as a return value.

Next, the selected application AP1 performs reception processing for receiving the authentication result or error response from the management application AP0 (step S17), and returns a response including the authentication result or a response indicating an error code to the OS ( step S18). Next, when the OS receives a response from the currently selected application APn (step S19), the command transmission/reception unit 251 transmits the received response to the external terminal T via the I/O circuit 21 (step S20 ).

As described above, according to the above-described embodiment, the management application AP0 holds an identifier indicating the type of identity verification information that can be used for identity verification for each application APn. In response to a determination request containing an identifier indicating a type, determining whether or not the identity verification information specified by the identifier included in the determination request can be used for identity authentication based on the held identifier, When it is determined that the identity verification information can be used for identity verification, the result of identity verification performed by the OS using the identity verification information is returned to the application AP1. The personal authentication function can be used by managing personal identification information that can be used for each of a plurality of installed applications APn. Therefore, the personal identification information of the IC card C can be used more safely, and the security of the IC card C can be improved.

In the above embodiment, the case where the present invention is applied to the IC card C with a fingerprint authentication function has been described, but the present invention can also be applied to an IC chip mounted on a user's mobile device. is. Such an IC chip may be detachably mounted on a mobile device, or an eUICC (Embedded Universal Integrated IC chip) mounted (for example, soldered) on a board so that it cannot be easily removed or replaced from a mobile device. Circuit Card). Further, in the above embodiment, the case where the fingerprint sensor 1, which is an example of the biometric data acquisition sensor, is mounted on the IC card C has been described as an example. Invention is applicable. In this case, the fingerprint sensor 1 is mounted in a user's mobile device or equipment installed in a predetermined place such as a store, and is connected to the IC chip 2 in the above embodiment. In the above embodiment, fingerprint data was used as biometric data for authenticating the identity of a user. Alternatively, the iris of the user's eye may be acquired as biometric data, and the present invention can be applied to such a case as well.

1 fingerprint sensor 2 IC chip 21 I/O circuit 22 RAM
23 NVM
24 ROMs
25 CPUs
251 Command transmission/reception unit 252 Authentication reference information storage unit 253 Authentication processing unit 254 Authentication result acquisition unit 255 Authentication result storage unit 256 Usage authority information storage unit 257 Request control unit C IC card T External terminal

Claims (6)

An electronic information storage medium capable of loading a plurality of applications selected according to a selection command received from an external terminal,
authentication processing means capable of executing different identity authentication using multiple types of identity verification information;
holding means for holding an identifier indicating a type of identity verification information that can be used for identity authentication for each application;
In response to a determination request including an identifier indicating a type of the identity verification information from the selected application, the identity verification information specified by the identifier included in the determination request based on the identifier held by the holding means. Determination means for determining whether or not it can be used for personal authentication;
Responding means for responding to the application with an authentication result of personal authentication executed by the authentication processing means using the personal identification information when the judgment means determines that the personal identification information can be used for the personal authentication. and,
An electronic information storage medium comprising: The electronic information storage medium is equipped with a management application including the determination means and the response means, and an operating system including the authentication processing means,
The application being selected makes the determination request to the management application when a command from the external terminal is received via the operating system, and sends a response including the authentication result received from the management application to the operating system. 2. The electronic information storage medium according to claim 1, wherein the information is sent back to the system. 3. The electronic information according to claim 2, wherein said authentication processing means executes said personal authentication before said command is received from said external terminal, and notifies a management application of said authentication result of said personal authentication. storage medium. further comprising a biometric data acquisition sensor that acquires biometric data from the user's body as the identity verification information;
4. The electronic information storage medium according to any one of claims 1 to 3, wherein said authentication processing means executes said personal authentication using biometric data acquired by said biometric data acquisition sensor. authentication processing means having a plurality of applications selected according to a selection command received from an external terminal and capable of executing different identity authentication using multiple types of identity verification information, respectively; A processing method executed by an electronic information storage medium comprising holding means for holding an identifier indicating a type of usable personal identification information,
In response to a determination request including an identifier indicating a type of the identity verification information from the selected application, the identity verification information specified by the identifier included in the determination request based on the identifier held by the holding means. a step of determining whether or not it can be used for personal authentication;
a step of responding to the application an authentication result of the identity verification executed by the authentication processing means using the identity verification information when it is determined that the identity verification information can be used for the identity verification;
A processing method comprising: authentication processing means having a plurality of applications selected according to a selection command received from an external terminal and capable of executing different identity authentication using multiple types of identity verification information, respectively; a computer included in an electronic information storage medium comprising holding means for holding identifiers indicating types of usable personal identification information,
In response to a determination request including an identifier indicating a type of the identity verification information from the selected application, the identity verification information specified by the identifier included in the determination request based on the identifier held by the holding means. a step of determining whether or not it can be used for personal authentication;
a step of responding to the application an authentication result of the identity verification executed by the authentication processing means using the identity verification information when it is determined that the identity verification information can be used for the identity verification;
A program characterized by causing the execution of

Images