JP4757020B2 - Key issuing server, authentication system - Google Patents

Description

  The present invention relates to a key issuing server that issues a public key and a public key of a public key encryption method, an analog chaos random number generation circuit used for the key issuing server, and an authentication system using the key issuing server.

  A random number is used when generating a private key / public key pair used in the public key cryptosystem. As a method for obtaining this random number, it is the easiest and most convenient method to generate and use software by a random number algorithm. However, due to the deterministic nature, digital computer or random number generation algorithm software can only produce the same reproducible random number pattern under the same conditions.

  Therefore, various complex methods such as changing the generation conditions and multistage random number generation algorithm can be considered, but it cannot exceed the framework of the deterministic method by software, and it must be a reproducible random number. It becomes a pattern.

  The key pair of public key cryptography is designed so that it is difficult to guess the other key from one key, but if the key issue algorithm and the random number generation algorithm that contributes to the key issue algorithm are leaked, The key sequence can be estimated by going back to the key generation. In such a case, there is a concern that all key generation sequences are grasped over the past and the future.

  As countermeasures for the above problems, the operator randomly generates a key by randomly hitting the keyboard, or generates a key by randomly moving the mouse and referring to the locus to generate a key. A method using a natural error is adopted. Although there is no doubt about this method itself, when it is desired to issue a large number of key pairs, the load on the operator becomes heavy and inefficient.

In principle, a public key encryption key pair is generated by a personal terminal, and the public key is registered and published in a certificate authority, but the secret key can only exist in the personal terminal (Patent Document 1). .
JP 2003-298574 A

  However, for example, an IC card or a small portable terminal uses a key issued in advance by an external key issuing server because it is difficult to calculate and generate a key pair in the terminal due to a calculation performance problem. Things have been done.

  In such a case, the terminal maker that embeds the key knows the key pair or at least the secret key. If the key pair is already known, the terminal manufacturer purchases the terminal and registers it with the certificate authority, and then uses the public key and personal information from the public information (public key, personal name, email address, etc.) published by the certificate authority. It is considered that information can be linked, and the possibility of leakage of personal information becomes a problem. Even if only the secret key can be known, especially in the case of a mobile phone, it is necessary to inform the personal information in detail at the time of the contract, and at this point, the correspondence between the secret key and the user's personal information is possible. Thereafter, the personal information and the public key may be specified from the public information (public key, personal name, e-mail address, etc.) disclosed by the certificate authority.

  The problem to be solved is that the key generation sequence is easily grasped, the key pair may be leaked, and secure key distribution cannot be secured.

A key issuing server according to the present invention includes a plurality of electronic elements including nonlinear elements, a plurality of switches for connecting or disconnecting the plurality of electronic elements to create one of a plurality of circuit networks, and and a circuit for taking out a current value by applying a voltage to the circuitry, and an analog chaotic random number generation circuit for generating an analog chaotic random number signal by the current value, the analog chaotic random number signal generated by the analog chaotic random number generating circuit Obtaining digital data from the data, and generating a public key and a private key of the public key encryption method based on the digital data, and assigning unique identification information to the generated public key and private key pair Means, a first transmitting means for transmitting the public key and the assigned identification information to a first destination station, and the identification information assigned to the secret key. And second transmitting means for transmitting to the second destination station, and deleting means for deleting, when the identification information assigned a pair of the key, which has finished the transmission,
Control means for controlling the switch to change the configuration of the circuit network, and for controlling the applied voltage value and its frequency, and also the sampling timing of digitization .

An authentication system according to the present invention includes an analog chaos random number generation circuit that generates an analog chaos random number signal, digital data from the analog chaos random number signal generated by the analog chaos random number generation circuit, and a public key based on the digital data. A key generating means for generating a public key and a private key of an encryption method, an assigning means for assigning unique identification information to the generated public key / private key pair, and the public key and the assigned identification information. The first transmitting means for transmitting, the second transmitting means for transmitting the secret key and the assigned identification information, and the key information and the assigned identification information are deleted when the transmission is finished. Receiving and storing a public key and assigned identification information from the first transmission means, and from a personal terminal. When other information and personal information are sent, a public key storage station that takes out the corresponding public key from the stored information based on the identification information and sends the identification information and personal information corresponding to the public key; A secret key writing station that receives the secret key and the assigned identification information from the second transmission means, and writes and stores the secret key and the assigned identification information in a memory set in the personal terminal; and the public key A certificate authority that issues a certificate including the public key and personal information when the identification information and personal information corresponding to the public key are sent from the storage station, and transmits the certificate to the corresponding personal terminal. Authentication system.

In the authentication system according to the present invention , a certificate issuing request transmission instruction and personal information are input to the personal terminal, and a certificate issuing request transmission instruction and personal information are input from the input means. In this case, a certificate issuance request means for adding the identification information stored in the memory to a certificate issuance request transmission instruction and personal information and transmitting it to the public key storage station is provided .

In the authentication system according to the present invention, the public key storage station deletes the public key when the stored public key has passed for a predetermined period .

In the authentication system according to the present invention, the analog chaos random number generation circuit includes a plurality of electronic elements including non-linear elements and a plurality of circuit elements for creating one of a plurality of circuit networks by connecting or disconnecting the plurality of electronic elements. An analog chaos random number generating circuit for generating an analog chaos random number signal based on the current value, comprising a switch and a circuit for extracting a current value by applying a voltage to the created circuit network, the switch and the application The voltage value and its frequency are controlled from the outside.

  In the present invention, digital data is obtained from the generated analog chaos random number signal using an analog chaos random number generation circuit that generates an analog chaos random number signal, and a public key and a secret key of a public key encryption method are obtained based on the digital data. Since it is generated, there is an effect that it is difficult to grasp the key generation sequence. Also, unique identification information is assigned to the generated public key / private key pair, the transmission path for public key and private key disclosure is separated, and the identification information assigned to the key in the destination public key storage station When the identification information and personal information are sent from the personal terminal, the corresponding public key is extracted from the stored information based on the identification information, and the identification information and personal information corresponding to the public key are extracted. Is sent to the certificate authority and the certificate is issued, so that the possibility of leakage of the key pair is reduced and secure key distribution is ensured.

  An object of the present invention is to use an analog chaos random number generation circuit that generates an analog chaos random number signal, and to generate a public key and a secret key generated for the purpose of reducing a possibility that a key generation sequence is difficult to grasp and a key pair is leaked. This is achieved by assigning unique identification information to each pair and separating the public key and secret key public delivery route. Embodiments of a key issuing server according to the present invention, an analog chaos random number generating circuit used for the key issuing server, and an authentication system using the key issuing server will be described below with reference to the accompanying drawings. In the drawings, the same components are denoted by the same reference numerals and redundant description is omitted.

  FIG. 1 shows a configuration diagram of an authentication system according to the present invention. The authentication system includes a key issuing server 1, a public key storage station 2, a secret key writing station 3, an authentication station 4, and a personal terminal 5. The key issuing server 1 issues a public key encryption key pair, and generates an analog chaos random number generation circuit 11 that generates an analog chaos random number signal, and a digital signal from the analog chaos random number signal generated by the generation circuit 11. Key generating means 12 for obtaining data and generating a public key and a private key of a public key encryption system based on the digital data, and an assigning means for assigning unique identification information to the generated public key / private key pair 13, first transmission means 14 for transmitting the public key and assigned identification information, second transmission means 15 for transmitting the secret key and assigned identification information, and the key pair Deletion means 16 for deleting when the transmission with the assigned identification information is completed.

  FIG. 2 shows a configuration example of the analog chaos random number generation circuit 11. The analog chaos random number generation circuit 11 connects electronic elements L1 to Ln (coil elements), R1 to Rn (nonlinear resistance), and C1 to Cn (capacitors) via switches SWL1 to SWLn, SWR1 to SWRn, and SWC1 to SWCn. A circuit having an interface 220 that applies a voltage from a voltage source V0 to extract a current value in the signal extraction unit 210 and applies digitized data to a computer port. The switches SWL1 to SWLn, SWR1 to SWRn, SWC1 to SWCn, the applied voltage value, and the frequency thereof are controlled from the computer. For example, the switches SWL1 to SWLn, SWR1 to SWRn, SWC1 to SWCn are relay contacts, and the voltage source V0 is a variable power supply. The interface 220 includes a relay that switches the relay contacts and a controller that controls the voltage and frequency of the voltage source V0 that constitutes the variable power source.

  The public key storage station 2 is provided in the registration agency and receives the public key sent from the first transmission means 14 of the key issuing server 1 and the assigned identification information via the receiving unit 22 to the storing unit 21. When the identification information and personal information are sent from the personal terminal 5 while being stored under the control of the control unit 20, the control unit 20 uses the public information corresponding to the information stored in the storage unit 21 based on the identification information. And the identification information and personal information corresponding to the public key are transmitted from the transmitting unit 23 to the certificate authority 4.

  The secret key writing station 3 is provided in a manufacturer such as a mobile phone, for example, and the control unit 30 receives the secret key and the assigned identification information from the second transmitting unit 15 in the key issuing server 1 via the receiving unit 31. The writing unit 33 writes and stores the secret key and the assigned identification information in the memory 32 that is received and set in a terminal (such as a mobile phone) before shipment as the personal terminal 5 under the control of the control unit 30. . The memory 32 is built in the terminal, and the terminal is shipped to become the personal terminal 5.

  The personal terminal 5 has an input means 510 for inputting a certificate issuance request transmission instruction and personal information, and the memory 32 when a certificate issuance request transmission instruction and personal information are input from the input means 510. And a certificate issuance request means 520 that adds the identification information stored in the information to the certificate issuance request transmission instruction and personal information and transmits the information to the public key storage station 2 via the transmission unit 530.

  When the certification authority 4 receives the identification information and personal information corresponding to the public key from the public key storage station 2, the control unit 40 receives the identification information and the personal information via the reception unit 41. A certificate including personal information is created and issued, and transmitted to the corresponding personal terminal via the transmission unit 42.

  The key issuing server 1, the public key storage station 2, the secret key writing station 3, the authentication station 4 and the personal terminal 5 basically have a computer shown in FIG. 3, and have a CPU 51 for overall control of the apparatus. The CPU 51 is connected to a main storage device 52 in which information such as programs and data used by the CPU 51 is stored. Further, a keyboard control unit 54, a display control unit 55, a printer control unit 56, a communication interface 57, a mouse control unit 58, and a magnetic disk control unit 59 are connected to the CPU 51 via a system bus 53. The keyboard control unit 54 is connected to a keyboard input device 60 capable of inputting various information, the display control unit 55 is connected to an LCD display device 61 for displaying information, and the printer control unit 56 prints information. A printer device 62 for output is connected, a communication processing unit 63 for performing communication via a line is connected to the communication interface 57, a mouse 64 as a pointing device is connected to the mouse control unit 58, and magnetic The disk controller 59 is connected to a magnetic disk device 65 that is an auxiliary storage device. In addition to the personal terminal 5 of each device in FIG. 1, at least a CPU 51, a main storage device 52, a magnetic disk control unit 59, a magnetic disk device 65, a communication interface 57, and a communication processing unit 63 are provided. Each of the devices constituting the authentication system is provided with a flexible disk drive, a magnetic card or IC card reader, an MO (magneto-optical disk) drive, or the like as necessary. Further, when the personal terminal 5 is a mobile phone, the printer control unit 56 and the printer device 62 are not provided. The secret key writing station 3 is provided with a ROM writer and the like, and writing to the memory 32 is performed. This memory 32 is a part of the main storage device 52 in the personal terminal 5. When the secret key writing station 3 writes the secret key and identification information in the memory of the IC card, the personal terminal 5 is provided with a card reader.

  In the authentication system configured as described above, the key issuing server 1 includes the key pair issuing program P corresponding to the flowchart shown in FIG. The key pair issuing program P is executed by the CPU 51. The analog chaotic random number generation circuit 11 is connected to an expansion slot not shown in FIG.

  Then, the key pair issuing program P is started and the operation is performed as follows. The condition information for chaos generation is determined (S1). This condition is a parameter composed of the on / off state of the switches SWL1 to SWLn, SWR1 to SWRn, SWC1 to SWCn, the voltage and frequency of the voltage source V0, the sampling frequency of the signal, the sampling start time, the number of digits after digitization, and the like. These parameters may be input from the keyboard input device 60, or the parameters tabulated in advance can be arbitrarily extracted by a program. This parameter information is sent from the CPU 51 to the interface 220 connected to the expansion slot. The interface 220 sets the on / off state of the switches SWL1 to SWLn, SWR1 to SWRn, SWC1 to SWCn, and sets the voltage and frequency of the voltage source V0. Etc., and analog chaos random number generation is performed. The output signal is digitized, and a predetermined digit is sent to the CPU 51 as output random number data.

  In the CPU 51, a public key encryption key generation algorithm is executed (S2), and a public / private key pair is obtained. The CPU 51 associates the obtained key pair with a unique ID (identification information), and directs the public key storage station 2 and the secret key writing station 3 to the communication interface 57. The communication interface is instructed to send the ID and send the secret key and the ID to the secret key writing station 3 (S3). The transmission is confirmed (S4). When transmission is performed, the transmitted key pair and unique ID are all deleted from the computer (S5). In other words, the temporarily held registers and various memory areas are reset. As a result, the key pair including the assigned ID disappears from the computer, and even when an intrusion from the outside is received, there is no trace of the key pair and it does not leak outside.

  Next, the completion of the issuance of a predetermined number of key pairs is detected (S6). If not completed, the process returns to step S1 to continue the process, and the operation is terminated when the completion is detected. In this way, a key pair that is difficult to grasp a key generation sequence is issued using an analog chaotic random number.

  The operations in the public key storage station 2, the secret key writing station 3, the certificate authority 4 and the personal terminal 5 are as follows. The public key accumulation station 2 receives the public key sent from the first transmission means 14 of the key issuing server 1 and the assigned identification information via the reception unit 22 and sends it to the accumulation unit 21 under the control of the control unit 20. To accumulate.

  In the secret key writing station 3, the control unit 20 receives the secret key and the assigned identification information from the second transmitting means 15 in the key issuing server 1 via the receiving unit 31 and becomes the personal terminal 5 before shipping. Under the control of the control unit 20, the writing unit 33 writes and stores the secret key and the assigned identification information in the memory 32 set in the terminal (such as a mobile phone). The memory 32 is built in the terminal, and the terminal is shipped to become the personal terminal 5.

  In the personal terminal 5, when a user needs it, an instruction to send a certificate issuance request and personal information (personal name, e-mail address, etc., for example, according to X.509 recommendation in PKI) are input from the input means 510. To do. In response to this, the certificate issuance request unit 520 adds the ID (identification information) stored in the memory 32 to the certificate issuance request transmission instruction and personal information and sends the transmission unit 530 to the public key storage station 2. Send through. If it is not necessary, personal information is not entered.

  When identification information and personal information are sent from the personal terminal 5, the control unit 20 of the public key storage station 2 takes out the corresponding public key from the information stored in the storage unit 21 based on this identification information, The identification information and personal information corresponding to the key are sent from the transmitter 23 to the certificate authority 4. The public key storage station 2 deletes the stored public key when a predetermined period has elapsed.

  When the certification authority 4 receives the identification information and personal information corresponding to the public key from the public key storage station 2, the control unit 40 receives the identification information and the personal information via the reception unit 41. A certificate including personal information is created and issued, and transmitted to the corresponding personal terminal 5 via the transmission unit 42. Actually, a PIN number is generated simultaneously with the issuance of the certificate and transmitted to the mail address of the personal terminal 5. When the personal terminal 5 requests a certificate using this PIN number, the certificate is transmitted to the receiving unit 540.

  The user who wishes to register the certificate authority receives the certificate from the certificate authority 4 after the public key storage authority 2 of the registration agency has registered with the certificate authority 4 and the certificate authority 4 has completed the necessary processing. The important point here is that only the user who wishes to receive the authentication service performs the registration procedure, and the user who does not wish to do so is who owns the personal terminal 5 or the personal information of the user to a third party. There is no possibility of leakage. The general user who has completed the registration procedure receives the certificate and the public key from the certificate authority 4 for the first time after registration, and only the general user can know the key pair information.

The block diagram which shows the structure of the authentication system which concerns on this invention. The block diagram of the analog chaos random number generation circuit used in the authentication system which concerns on this invention. The block diagram which shows the computer which comprises each apparatus of the authentication system which concerns on this invention. The figure containing the flowchart explaining operation | movement of the key issuing server in the authentication system which concerns on this invention.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Key issuing server 2 Public key storage station 3 Secret key writing station 4 Authentication station 5 Personal terminal 11 Analog chaos random number generation circuit 12 Key generation means 13 Assignment means 14 First transmission means 15 Second transmission means 16 Deletion means 20 , 30, 40 Control unit

Claims (5)

A plurality of electronic elements including non-linear elements; a plurality of switches for connecting or disconnecting the plurality of electronic elements to create one of the plurality of circuit networks; An analog chaos random number generation circuit that generates an analog chaos random number signal according to the current value,
Key generation means for obtaining digital data from an analog chaos random number signal generated by the analog chaos random number generation circuit, and generating a public key and a secret key of a public key encryption system based on the digital data;
An assigning means for assigning unique identification information to the generated public / private key pair;
First transmitting means for transmitting the public key and the assigned identification information to a first destination station;
Second transmitting means for transmitting the secret key and the assigned identification information to a second destination station;
Deleting means for deleting the key pair and the assigned identification information when the transmission is completed;
A key issuing server comprising: control means for controlling the switch to change the configuration of a circuit network, and to control the applied voltage value and its frequency, and further digitization sampling timing. An analog chaos random number generation circuit that generates an analog chaos random number signal, and obtains digital data from the analog chaos random number signal generated by the analog chaos random number generation circuit. Based on the digital data, a public key and a secret of a public key cryptosystem Key generating means for generating a key, assigning means for assigning unique identification information to the generated public / private key pair, and first transmitting means for transmitting the public key and the assigned identification information; A key issuing unit comprising: a second transmitting unit configured to transmit the secret key and the assigned identification information; and a deleting unit configured to delete the key pair and the allocated identification information when the transmission is completed. Server,
  The public key and the assigned identification information are received and stored from the first transmission means, and when the identification information and personal information are sent from the personal terminal, the corresponding public information is obtained from the stored information based on the identification information. A public key storage station that takes out the key and sends identification information and personal information corresponding to the public key;
  A secret key writing station that receives the secret key and the assigned identification information from the second transmission means, and writes and stores the secret key and the assigned identification information in a memory set in the personal terminal;
  A certificate authority that issues a certificate including the public key and personal information when the identification information and personal information corresponding to the public key are sent from the public key storage station, and transmits the certificate to the corresponding personal terminal;
An authentication system comprising: In the personal terminal, an input means for inputting a certificate issuance request transmission instruction and personal information,
  When a certificate issuance request transmission instruction and personal information are input from this input means, the identification information stored in the memory is added to the certificate issuance request transmission instruction and personal information and transmitted to the public key storage authority. Certificate issuance request means
  The authentication system according to claim 2, further comprising: The authentication system according to claim 2 or 3, wherein the public key storage station deletes the public key when the stored public key has passed for a predetermined period. Analog chaos random number generation circuit
  A plurality of electronic elements including non-linear elements;
  A plurality of switches for connecting or disconnecting the plurality of electronic elements to create one of a plurality of circuit networks;
  And a circuit for extracting a current value by applying a voltage to the created network,
  An analog chaos random number generation circuit for generating an analog chaos random number signal according to the current value,
The authentication system according to any one of claims 2 to 4, wherein the switch, the voltage value to be applied, and the frequency thereof are controlled from the outside.

Images