WO2002103535A1

WO2002103535A1 - Qualification certifying method using variable certification information

Info

Publication number: WO2002103535A1
Application number: PCT/JP2001/005994
Authority: WO
Inventors: Ryuji Kai
Original assignee: Micromice Co., Ltd.
Priority date: 2001-06-13
Filing date: 2001-07-11
Publication date: 2002-12-27
Also published as: TW522702B; JP2002366523A

Abstract

Connection is cut while certification information determined on the basis of connection history information recorded chronogically in a log file at the connection time is stored in storage devices on both the certified and certifying sides. At the next connection time, the qualification is certified by comparing the certification information stored on the certified side and the certification information stored on the certifying side.

Description

Certification document Certification method using variable authentication information

The present invention relates to, for example, a qualification authentication method in which a certifier authenticates a person to be authenticated in order to ensure security in a network, and in particular, certification information using variable authentication information which is different every time authentication is performed. It relates to the method. Background art

With the advancement of information communication technology, an information communication network using a network has been developed, but security is required in the fields of transfer of confidential information and electronic commerce, so that a certifier authenticates a subject. Various qualification certification measures are adopted or presented.

Also, conventionally, the connection service provider authenticates the certificationee's qualification using fixed authentication information such as a password and an ID. However, these methods are roughly classified by applying public key cryptography. There are ones that use common key cryptography and ones that use common key cryptography, and for incorporating into Internet-related or communication protocols, for example, means that applies common key cryptography that can be processed at high speed such as a pass-word is used. .

However, in the qualification by password authentication, the password may be stolen from the connected line if the password is stored in the authentication side, and the subject may disclose his password, which is his / her confidential information. It was extremely difficult to reliably ensure the security reasons such as it is necessary to ₍ Therefore, for example, the prover registers the authentication information to which the one-way function is applied to the verifier, and the same one-way function is applied to the pass received by the verifier at the time of authentication, and the results are compared. Although various encryption methods have been adopted, it can not be prevented that authentication information is stolen from the connected line.

In addition, although it can be applied to customer authentication such as commerce, it is not suitable for the qualification of users of the same level, in that the password needs to be disclosed.

Therefore, as means for solving the above-mentioned problems, means for achieving higher security by making authentication information such as a path variable variable is disclosed, for example, in Japanese Patent Application Laid-Open No. 2-654. — Presented in the publication No. 3 6 5 22 2 etc.

The qualification authentication method presented in Japanese Patent Application Laid-Open No. 2-6 5 5 4 2 is the authentication information under the authentication information that has been verified in the previous registration, and authentication information used for authentication one after another. The authentication information can be successively chained to authentication while the authentication information is safely updated by transmitting three information of the validity verification information of the authentication information that has been sent last time and used for the next authentication every authentication phase. It is possible.

However, in order to receive certification from the certification party, the certification party needs to use the two previously generated certification information (random numbers), and a processing program that occupies a relatively large area is required. It is necessary to store certification information in a storage medium such as an IC card, and there is a problem that a device for reading and writing such information and a device for generating random numbers are required. Further, according to the conventional qualification authentication method presented in the above-mentioned publication, the authentication side calculates the present authentication information and the next authentication information using a one-way function based on the random number, the user ID and the password, This is further subjected to an exclusive OR operation. It is encrypted so that it can not be decrypted except by the certifier, and these are combined with the user ID of the certifier's own and sent to the certifier, and the validity calculated using the one-way function based on the certification information this time. The verification parameter and the authentication information registered in the previous verification phase are compared, and if they match, it is judged that the current authentication has been established, and the next authentication information is registered as the next authentication parameter. It can be realized with a small program size and can perform secure authentication with little concern of being stolen on the connection line.

However, the conventional qualification authentication method presented in the above-mentioned publication does not require as much as four types of accreditation information as the qualification authentication method disclosed in the above-mentioned Japanese Patent Application Laid-Open No. 2-6 5 54 2 Although it can be realized with a relatively small program size, it is still possible to use a one-way function based on random numbers, user IDs, and passwords and calculate the one using a certain exclusive OR, except for the certifier. It needs to be encrypted so that it can not be deciphered, and the expense of creating programs and storage becomes an economic burden.

In addition, the certification information used for qualification is originally a fixed information, which is calculated using a one-way function based on a random number, a user ID, and a password, and is encrypted using a certain exclusive OR. For further security, it is necessary to change the random number, user ID, password, etc. regularly, and the program itself has to be rewritten also about the part to be encrypted using exclusive OR. It also has the disadvantage of having to

Therefore, the present invention solves the problems associated with the conventional qualification authentication method using variable authentication information, and exerts more secure security in a simple manner, economically and economically, with no human burden. Is what makes it possible. Disclosure of the invention

The present invention relates to a connection track that is recorded in a log file over time when connected. The authentication information determined based on the history information is stored in the storage devices of the authentication side and the authentication side, respectively, and the connection is disconnected, and the authentication stored in the authentication side at the next connection. The information is compared with the authentication information stored in the authentication side to perform qualification authentication.

Since the authentication information is determined based on the connection history information recorded in the log file over time at the time of connection, that is, based on the information which changes every moment, the authentication information changes in each authentication phase, and There is no regularity between certification information each time, and even if stolen at connection time, necessary certification information is selected and determined in a moment, so it is not useful. In addition, there is no need to calculate necessary parameters and the like using a specific program when generating and confirming certification information, and machine management can be performed without requiring human management on both the certified side and the certification side. Therefore, the risks related to confidential disclosure are reduced. In particular, except for the first connection on the certifier side, there is no need to manage the password storage and input as in the past, and the opportunity for disclosure plagiarism can be extremely reduced. Here, the log file is a file that records the usage status and connection usage history of a system that is widely used in storage devices such as disks, and is not limited to the network application.

Further, in the present invention, generation of accreditation information when a part of the character string in each item constituting each connection history in which the authentication information is recorded in the log file is determined arbitrarily. Management is extremely easy and easy. Furthermore, in the present invention, when the authentication information is a collection of character strings for a plurality of items in the selected log file, the authentication information is compared with the authentication information generated based on the character string in a single item. As a result, the combination of strings becomes complicated, and the security effect can be enhanced.

Furthermore, in the present invention, when the authentication information is generated, authentication is performed on fixed information such as a password, license number, etc. known only to the person being authenticated. If the connection device itself, such as a terminal to be authenticated, is stolen after the authentication information is set to be incorporated in a predetermined position of the authentication information, the authentication information to be used from the next time is the above-mentioned person to be authenticated. The part of the fixed information only known to you is missing, or you can not get the certification even with the connection device. Brief description of the drawings

FIG. 1 is an explanatory view showing an outline when the present invention is applied to a network, FIG. 2 is an explanatory view showing a generation process of variable authorization information according to the present invention, and FIG. It is a schematic block diagram of an invention. BEST MODE FOR CARRYING OUT THE INVENTION

In order to describe the invention in more detail, it will be described according to the attached drawings.

The drawings show an outline of a preferred embodiment in the case where the present invention is applied to a computer network, and a WWW server 1 on the service providing side and the WWW server 1 are connected to receive services. Connection history information of the connection terminal and the WWW server 1 which is stored every moment in the log file of the WWW server 1 by connecting to the connection terminal 2 on the side of the side and further the WWW server 1 necessary for practicing the present invention Based on the information collected by the information collection server 3 and the information collection server 3, the next authentication information is generated and stored, and the authentication information stored last time is sent from the connection terminal 2 at the time of the current connection. It comprises the authentication information issuing server 4 for authenticating the authentication information stored in the incoming connection terminal 2.

Then, the present invention establishes the authentication qualification using the history of the log file recorded at the time of connection as the authentication information, and performs qualification at the time of the first connection. There is no connection history that is the basis of authentication information for authentication. Therefore, connection is made after authentication of credentials using fixed authentication information such as a pass or ID to which conventional common key encryption is applied. At this time, for example, connection can be made securely by adopting a conventionally known encryption method, but usually, the plagiarism from the connection route is performed after the first connection, that is, after the publication. And plagiarism and detection at the time of initial connection are extremely rare, and there is almost no concern. In particular, in the present embodiment, since the qualification based on fixed information is switched to the qualification based on variable certification information at the same time as the initial connection is made, there is no concern about plagiarism etc. on the first connection. I can not say that.

Then, when the first connection is made, the connection history with the connection terminal 2 recorded every moment in the log file in the WWW server 1 is sent to the information collecting server 3.

At this time, in the connection history recorded in the log file, many files exist over many items even if only text files are used. Therefore, sending all such a huge amount of connection history to the information collecting server 3 is not preferable because it causes a large burden both in terms of area and processing. In the present invention, it is sufficient to pay attention to at least one item in the history of variable information excluding the history based on fixed information such as password among these items and send it to the information collecting server 3 However, in the present embodiment, as shown in FIG. 2 (a), histories of five items including password, session log, access log date, access log, and other usage information, for example, are collected. This is because the variable certification information created when there are few items to be selected is short-circuited, leaving safety concerns and creating a burden on area and processing if the number is more than necessary.

The certification information collected in the information collection server 3 in this manner is, for example, as shown in FIG. 2 (a), for example, among the plurality of items at any given time, Select the four character strings, edit the character string in which the selected string is gathered as shown in Fig. 2 (b) to generate the certification information, send it to the certification information issuance server 4, and issue the certification information. The server 4 saves it as the next certification information and sends it to the WWW server 1. That is, unlike the case where seemingly irregular identification information is generated by calculating and encrypting necessary parameters and the like using a specific program as in the past, it is possible to be sure by merely editing the simple character string Irregular and difficult to steal variable authentication information very easily and mechanically. In addition, the variable authentication information in the present invention can freely change not only the contents but also the number of digits itself each time, and can further enhance security as a random thing.

Further, the authorization information sent to the WWW server 1 is sent to the connection terminal 2. Therefore, at the time of connection termination, variable authentication information generated based on the connection history recorded in the log file in the information collection server 3 is stored in the authentication information issuance server 4 and the connection terminal 2. At this time, the connection history based on the variable authentication information is constantly changing, and it becomes a problem as to when to generate authentication information by using the connection history, for example, at the time of disconnection, that is, the final In the present invention, at least the last time, that is, certification information different from the certification information at the start of connection may be stored, and the connection history at any point in time may be considered. It is less important to use. However, if the content of the variable certification information changes continuously during connection, it is extremely effective for preventing theft through the connection line. Then, the next time connection is made from the connection terminal 2, the stored authentication information is automatically sent to the authentication information issuance server 4 via the WWW server 1 and stored in the authentication information issuance server 4 by itself. If there is a match by comparing with a certain variable authorization information search, it is determined that the present authentication has been established, and the result can be sent to the WWW server 1 to advance to the next page. Also compare As a result, if they do not match, an indication to that effect is sent to the connected terminal 2 via the WWW server 1 to reject the connection.

In the case of comparison and authentication, matching, and qualification and connection, similar to the above, the next variable certification information is generated and stored based on the connection history.

Further, in FIG. 1, reference numeral 5 is a management terminal connected to the information collecting server 3 and, among the history sent to the WWW server 1, collected in the information collecting server 3 in order to generate authentication information. Editing conditions such as the number of items, the number of digits, etc., are set at a point away from the network, and while it is possible to achieve full automation, whether the entire facility functions regularly or irregularly. By changing the type and editing method of the information collected to generate variable recognition information, a higher security effect can be achieved.

Although this embodiment has described the case where the present invention is applied to a normal network having a clear and most applied security policy, the present invention can be applied to many other types such as a stand-alone PC or a server on a LAN. For example, it is easy to define client passwords managed by a network operating system on a LAN, network logs, session history of each client, mail transmission / reception history, etc. In addition, although the present invention issues variable authorization information for each number of clients on the LAN, there is no need to generate variable authorization information, so the increase in the number of clients does not reduce the effect of the present invention. Furthermore, according to the present invention, authentication information can be generated also for a portable terminal such as a mobile phone, for example, from connection history information such as a telephone number of a connected party, incoming call history, incoming time and connection time. Furthermore, it can be considered that an IC card or the like can be considered as one of connection terminals connected to a server via an interface, and it is likewise possible to practice the present invention. Nor.

In addition, a storage medium such as a hard disk installed in an ordinary terminal can be considered as a storage location of variable recognition information in the connection terminal. For example, storage locations such as storage and transmission microchips It is desirable to place in By doing this, once saved, there is no fear of damage, failure or accidental loss as in the case of saving to a hard disk, and there is no need to perform the initial connection operation again. In particular, since there is no need for a complicated program that handles random numbers on the connection terminal side, a very low-capacity recording medium and program can be used, and there is no concern of economic burden even if a separate storage location is provided. in addition, by separately from such as an ordinary program, the user is advantage force ^s that can be performed comfortably connection operation without being aware of the procedure of credentials to be aware of the conventional connection at the time. Industrial applicability

As described above, the present invention is determined based on the connection history information recorded in the log file over time as authentication information used for authentication of credentials required at the time of connection. It changes with each certification phase, and there is no regularity between certification information of each time, and even if stolen at connection time, necessary certification information is selected and decided within a moment, so it is not useful. It can be used as perfect security. .

In addition, there is no need to calculate necessary parameters and the like using a specific program when generating and confirming certification information, and machine management can be performed without requiring human management on both the certified side and the certification side. As a result, the risk of confidential disclosure is reduced. In addition, it is also applicable to the same level of user-to-user qualification as it is not necessary to disclose the password. In particular, there is no need to manage the storage and input of the path as in the past, except in the case of the first connection on the side of the certifier, and even if the path is stolen from the path file at the time of publication or connection. Since the passcode itself is not used as a basis for generating the certification information, it can be used without any problem.

In addition, it is extremely easy and easy to generate and manage certification information if the authentication information is determined by arbitrarily selecting a part of the character strings in each item constituting the connection history recorded in the log file. It is easy to use.

Furthermore, if the authentication information is a collection of strings for a plurality of items in the selected log file, the authentication information may be compared to the authentication information generated based on the strings in a single item. The combination is complicated and security effect can be enhanced, and when generating authentication information, authentication of fixed information such as pass number and license number etc. known only to the certified party is required after authentication information is specified. In the case where the connection device itself such as a terminal to be authenticated has been stolen when it is set to be incorporated in the position, the authentication information to be used from the next time is fixed information known only to the person to be authenticated. It is best if you are sure to require security as parts are missing or you can not obtain certification even with the connection device.

Claims

The scope of the claims

1. The connection is disconnected while the authentication information determined based on the connection history information recorded in the log file over time at the time of connection is stored in the storage devices of the authentication side and the authentication side. The variable authentication information is characterized by comparing the authentication information stored in the authentication side with the authentication information stored in the authentication side when connecting next time. Certification method.

2. The claim that the authentication information is determined by arbitrarily selecting a part of the character string in each item constituting the connection history recorded in the log file.

A qualification authentication method using variable authentication information described in item 1.

3. A qualification authentication method using variable authentication information according to claim 1 or 2, wherein the authentication information is a collection of character strings in the plurality of selected items.

4. A qualification authentication method using variable authentication information according to claim 1, 2 or 3 in which fixed information is included in the authentication information.