JP2002197422A - Security method, ic card and information recorder - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a security method, capable of strengthening secrecy holding of information recorded within a card, even when an electronic card is held by a third person due to missing, a theft, etc., an IC card and an information recorder both of which are to be used for the method. SOLUTION: This method has a step for recording a ciphering key K1 for ciphering in an IC and M1 and a step for recording ciphered information C ciphered, by using the key K1 in an IC card M2 which differs from the IC card M1.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a security method, an IC card, and an information recording apparatus suitable for use in applications requiring prevention of leakage or tampering of personal information or financial information related to electronic commerce.

[0002]

2. Description of the Related Art Cards, such as credit cards, telephone cards, and commuter passes, which are generally used at present, magnetically record information. A card for magnetically recording information has an advantage that it can be easily handled and can be manufactured at low cost. However, it has been pointed out that it is easy to decipher the recorded information, and it is also easy to falsify, and to record information that is required to be prevented from leaking to another person, such as personal information and monetary information related to electronic commerce. It is difficult to use as a medium.

Therefore, in recent years, an IC card that incorporates an IC chip for storing information and that makes it difficult to leak or falsify information has been realized. In the current situation where electronic commerce is becoming more common, IC cards having such properties are attracting attention. Even if the IC card has a built-in IC chip, the thickness of the card is only slightly increased,
It has the same portability as a card that magnetically records information.

A conventional IC card has a PIN for authenticating whether or not the holder of the IC card is a valid holder.
(Personal Identification Number) information (PIN)
Together with personal information, money information, and the like (hereinafter, such information recorded on the IC card is referred to as stored information). When reading or updating the stored information of the IC card, authentication is performed based on whether or not the number input by the holder of the IC card matches the PIN number.

[0005]

The conventional IC
Since the card records the PIN information for authenticating the holder together with the storage information, if the holder loses the IC card or the IC card is stolen, the card is stored in the IC card by a third party. The decrypted PIN information may be decrypted. In the conventional IC card, if the PIN information stored in the IC card can be decrypted, the information stored in the IC card can be read and further updated. Therefore, the conventional IC card that records the PIN information and the stored information has a high possibility that the personal information of the owner of the IC card will be leaked to a third party or falsified when the IC card is lost. There was a problem.

The present invention has been made in view of the above circumstances, and enhances the confidentiality of information recorded on a digital card even if the electronic card is in the hands of a third party due to loss or theft. It is an object of the present invention to provide a confidentiality protection method, an IC card and an information recording device used in the method.

[0007]

In order to solve the above-mentioned problems, a security method according to the present invention uses an encryption key (K) for encryption.
Recording 1) on a first recording medium (M1);
The encrypted information (C) obtained by encrypting the input information (IM) using the encryption key (K1) is stored in the first storage medium (M
1) and recording the encrypted information (C) generated by using the encryption key (K1) on a second recording medium (M2) different from the first recording medium (M1). And decrypting the encrypted information (C) recorded on the second recording medium (M2) in the first recording medium (M1) using the encryption key (K1). It is characterized by. Here, the encryption key according to the present invention includes a common key using the same key at the time of encryption and decryption, and a public key and a secret key using different keys at the time of encryption and decryption. That is, when the encryption key is a common key, encryption is performed using the encryption key, and the encrypted information is decrypted using the encryption key. When the encryption key is a public key, encryption is performed using the public key, and decryption is performed using the secret key. The second recording medium is not particularly limited as long as it can record encrypted information. For example, flexible disk, CD-ROM, CD-R, CD-RW, D
VD-ROM, DVD-RAM, DVD-R, DVD-
It may be a recording medium such as an RW, an IC card, and a magneto-optical disk (here, DVD is a registered trademark). Also,
Encrypted information refers to encrypted information. According to the present invention, the first encryption key for encrypting the encryption information recorded on the second recording medium is different from that of the second recording medium.
Therefore, even if the second recording medium is lost or stolen, the decryption of the encryption key is required to decrypt the content of the encrypted information recorded on the second recording medium. Information security can be enhanced as required. Further, according to the present invention, the encryption information to be recorded on the second recording medium is created in the first recording medium on which the encryption key is recorded, and the encryption information read from the second recording medium is further created. Is decrypted in the first recording medium on which the encryption key is recorded, so that the encryption key
Is not read out of the recording medium, and confidentiality can be maintained with high reliability. In order to solve the above problem, an IC card (M1) of the present invention comprises an input / output unit (10) for inputting / outputting information (IM) and a key storage unit for storing an encryption key (K1) for encryption. (12)
Using the encryption key (K1) stored in the key storage unit (12), encryption information (C) is generated by encrypting information input from the input / output unit (10), and the encryption information (C) is generated. C) is input from the input / output means (10) using the encryption means (14) for outputting the input / output means (10) to the input / output means (10) and the encryption key (K1) stored in the key storage means (12). Decryption means (1) for generating information obtained by decrypting encrypted information (C), and outputting the information to the input / output means (10).
6). In order to solve the above-mentioned problems, an information recording device (1) of the present invention includes an output unit (22) for outputting input information (IM) to the IC card (M1), and the IC card (IM). The encrypted information (C) output from the predetermined information recording medium (M2)
Recording means (26) for recording information on the information recording medium (M
2) a reading unit (28) for reading the encrypted information (C) recorded in (2), and the encrypted information (C) read by the reading unit (28) are transmitted to the I through the output unit (22).
An input unit (24) for inputting information (IM) output from the IC card (M1) when outputting to the C card (M1). here,
The predetermined information recording medium may be any medium that can record encrypted information in the same manner as the second recording medium,
There is no particular limitation. For example, flexible disk, CD-ROM, CD-R, CD-RW, DVD-
ROM, DVD-RAM, DVD-R, DVD-RW,
It may be a recording medium such as an IC card or a magneto-optical disk.

[0008]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, a security protection method, an IC card, and an information recording device according to an embodiment of the present invention will be described in detail with reference to the drawings. FIG. 1 is an explanatory diagram schematically showing a security protection method according to an embodiment of the present invention.
In the present embodiment, an IC card M as a first recording medium
1 and an IC card M2 as a second recording medium or a predetermined information recording medium, and a card control device 1 as an information recording device, thereby realizing a security protection method. Before describing the security protection method of the present invention, the configuration of the IC card M1 and the configuration of the card control device 1 will be described.

FIG. 2 is a functional block diagram schematically showing the internal configuration of the IC card M1. As shown in FIG.
The C card M1 includes an input / output unit 10, an encryption key storage unit 12, an encryption unit 14, and a decryption unit 16. The input / output unit 10 is an interface for various types of information exchanged with the outside. The encryption key storage unit 12 corresponds to a key storage unit according to the present invention, and stores an encryption key input via the input / output unit 10. In this embodiment, for simplicity of description, it is assumed that the encryption key stored in the encryption key storage unit 12 is a common key. That is, the information is encrypted using the encryption key, and the information encrypted using the encryption key used for the encryption is decrypted. The encryption key is created in advance by the holder of the IC card M1 and stored in the encryption key storage unit 12.

The encryption unit 14 corresponds to an encryption unit according to the present invention, and transmits information input into the IC card via the input / output unit 10 to the encryption key stored in the encryption key storage unit 12. The data is encrypted using the key and output to the outside via the input / output unit 10. The decoding unit 16 corresponds to a decoding unit according to the present invention, and receives an IC through the input / output unit 10.
The encryption information (encrypted information) input to the card is decrypted using the encryption key stored in the encryption key storage unit 12 and output to the outside via the input / output unit 10.

The outline of the internal configuration of the IC card M1 has been described above. Next, the outline of the internal configuration of the card control device 1 will be described. FIG. 3 is a functional block diagram illustrating an outline of the internal configuration of the card control device 1. The card control device 1 shown in FIG.
2, an input unit 24, a recording unit 26, a reading unit 28, and an information output unit 30. The information input unit 20 inputs information output from an external device (for example, an information device such as a personal computer). The output unit 22 corresponds to an output unit according to the present invention, and outputs information input via the information input unit 20 to the IC card M1.
The input unit 24 corresponds to an input unit according to the present invention, and when the encrypted information is read from the IC card M1, the recording unit 2
6 and reads out the unencrypted (decrypted) information to the information output unit 30.

The recording section 26 corresponds to the recording means according to the present invention, and records the encryption information output from the IC card M1 on the IC card M2. The reading unit 28 corresponds to a reading unit according to the present invention, and reads the encrypted information recorded on the IC card M2 and outputs the encrypted information to the output unit 2.
Output to 2. Thus, in the present embodiment, I
Since the encryption unit 14 and the decryption unit 16 are provided in the C card M1, the card control device 1 receives the information (including the information before encryption and the information after decryption) and the encryption information. Only output and recording / reading control functions are provided.

The outline of the internal structure of the IC card M1 and the card control device 1 according to one embodiment of the present invention has been described above. Next, FIGS. This will be described in detail with reference to FIG. I
The holder of the C card M1 creates an encryption key in advance and
It is stored in the encryption key storage unit 12 provided in the C card M1. Specifically, the encryption key generated by using the dedicated IC card reading / writing device for generating the encryption key is stored in the encryption key storage unit 1.
2 or the encryption key generated by the personal computer may be stored in the encryption key storage unit 12 of the IC card M1 by an IC card read / write device connected to the personal computer. This step corresponds to the “step of recording an encryption key for encryption on the first recording medium” according to the present invention.

Next, after the holder of the IC card M1 inserts the IC card M1 and the IC card M2 into the card controller 1, for example, a personal computer (not shown) connected to the card controller 1 When information IM for recording in M2 is input, the information IM is input to the card control device 1. The information IM input to the card control device 1 is output from the output unit 22 to the IC card M1 via the information input unit 20. At this time, the card control device 1 sends the output information I to the IC card M1.
It also outputs a control signal indicating that M is unencrypted information.

Information IM and information I from the card control device 1
When a control signal indicating that M is unencrypted information is input, the encryption unit 14 reads the encryption key K1 stored in the encryption key storage unit 12, and uses the encryption key K1 to input the key. The encrypted information C is generated by encrypting the encrypted information IM (step S10). The encryption information C generated by the encryption unit 14 is input from the input / output unit 10 to the input unit 24 of the card control device 1 and output to the recording unit 26. Recording unit 26
Records the encrypted information C on the IC card M2. Through the above processing, the information IM input to the card control device 1 is encrypted in the IC card M1 using the encryption key K1 stored in the encryption key storage unit 12 of the IC card M1, and the encrypted information C Is recorded on the IC card M2.

When reading the encrypted information recorded on the IC card M2, the holder of the IC card M1 inserts the IC card M1 and the IC card M2 into the card control device 1. After that, the holder issues an IC to the card control device 1.
When an instruction to read the encrypted information recorded on the card M2 is issued, the reading unit 28 of the card controller 1
And outputs the encrypted information C to the output unit 22. The output unit 22 outputs the encrypted information C to the IC card M1, and also outputs a control signal indicating that the output encrypted information C is encrypted information to the IC card M1.

When the encrypted information C and a control signal indicating that the encrypted information C is encrypted are input from the card control device 1, the decryption unit 16 stores the encrypted information C in the encryption key storage unit 12. The encryption key K1 is read out, and the encryption key K1 is read.
And decrypts the input encrypted information C to generate information IM (step S20). The information IM generated by the decoding unit 16 is transmitted from the input / output unit 10 to the input unit 2 of the card control device 1.
4 and output from the information output unit 30. Through the above processing, the encrypted information C recorded on the IC card M2 is decrypted in the IC card M1, and the decrypted information IM is output from the card control device 1.

According to the embodiment described above, the encryption key K1 for encrypting the encryption information C recorded on the IC card M2 is recorded in the IC card M1 different from the IC card M2. Even if the IC card M2 is lost or stolen, it is necessary to decrypt the encryption key K1 in order to decrypt the contents of the encrypted information C recorded on the IC card M2. it can.

Further, according to the present invention, the encryption information C to be recorded on the IC card M2 is generated in the IC card M1 in which the encryption key K1 is recorded, and the encryption information C read from the IC card M2 is further generated. Is decrypted in the IC card M1 in which the encryption key K1 is recorded, so that the encryption key K1 is not read out of the IC card M1 at the time of encryption and decryption. It can be performed. Furthermore, since the IC card M1 storing the encryption key K1 can be managed by an individual, the possibility that the encryption key K1 stored in the IC card M1 is stolen by a third party can be reduced. In the above embodiment, the case where the encryption key K1 is a common key has been described for the sake of simplicity, but the present invention can be applied to a case where the encryption key is a public key. In the case of a public key, the information IM is encrypted using the public key, and the encrypted information C is decrypted using the secret key. In this case, both the public key and the secret key are stored in the encryption key storage unit 12 of the IC card M1.

Although the security method, IC card, and information recording device according to one embodiment of the present invention have been described above, the present invention is not limited to the above embodiment, and can be freely changed within the scope of the present invention. It is. For example, in the above embodiment, the information recording medium for recording the encrypted information C is an IC
Although the case of the card M2 has been described as an example, this information recording medium is not limited to the IC card M2, and may be a flexible disk, a CD-ROM, a CD-R,
CD-RW, DVD-ROM, DVD-RAM, DVD
Recording media such as -R, DVD-RW, IC card, and magneto-optical disk may be used.

[0021]

As described above, according to the present invention, the encryption key for encrypting the encryption information recorded on the second recording medium is different from that of the first recording medium. Since the information is recorded on the recording medium, even if the second recording medium is lost or stolen, it is necessary to decrypt the encryption key in order to decrypt the contents of the encrypted information recorded on the second recording medium. Therefore, there is an effect that information security can be strengthened. Further, according to the present invention, the encryption information to be recorded on the second recording medium is created in the first recording medium on which the encryption key is recorded, and the encryption information read from the second recording medium is further created. Is decrypted in the first recording medium on which the encryption key is recorded, so that the encryption key is not read out of the first recording medium during encryption and decryption.
There is an effect that confidentiality can be maintained with high reliability.

[Brief description of the drawings]

FIG. 1 is an explanatory diagram schematically showing a security protection method according to an embodiment of the present invention.

FIG. 2 is a functional block diagram schematically showing an internal configuration of an IC card M1.

FIG. 3 is a functional block diagram schematically showing an internal configuration of the card control device 1.

[Explanation of symbols]

REFERENCE SIGNS LIST 1 card control device (information recording device) 10 input / output unit (input / output unit) 12 encryption key storage unit (key storage unit) 14 encryption unit (encryption unit) 16 decryption unit (decryption unit) 22 output unit (output unit) ) 24 input unit (input means) 26 recording unit (recording means) 28 reading unit (reading means) C encryption information IM information K1 encryption key M1 IC card (first recording medium) M2 IC card (second recording medium) , Predetermined recording medium)

Claims (3)

[Claims] Recording an encryption key for encryption on a first recording medium; and generating encrypted information in the first recording medium by encrypting input information using the encryption key. Recording the encrypted information generated using the encryption key on a second recording medium different from the first recording medium; and recording the encrypted information on the second recording medium using the encryption key. Decrypting the encrypted information in the first recording medium. 2. An input / output unit for inputting / outputting information, a key storage unit for storing an encryption key for encryption, and an input from the input / output unit using the encryption key stored in the key storage unit. Encrypting means for generating encrypted information obtained by encrypting information to be output, and outputting the encrypted information to the input / output means; input from the input / output means using an encryption key stored in the key storage means; A decryption means for generating information obtained by decrypting encrypted information and outputting the information to the input / output means. 3. An output unit for outputting input information to the IC card according to claim 2, a recording unit for recording encrypted information output from the IC card on a predetermined information recording medium, and the information recording Reading means for reading the encrypted information recorded on the medium; and outputting the encrypted information read by the reading means to the IC card according to claim 2 via the output means.
An input unit for inputting information output from the IC card.