JP2002288617A - Certification system and certification method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a certification system and a certification method at a low cost, capable of rapidly carrying out a processing between devices, without causing security to be lowered. SOLUTION: When an IC card 1 certifies a card processing device 11, it sets an access method to a data file 23 based on an access method data transmitted from the card processing device 11. Thereby, the card processing device 11 can access all files with one-time certification processing. Accordingly, processing between both devices can be executed rapidly. Since a key stored in the IC card is also reduced, a cost is reduced and low cost can be realized.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

[0001] 1. Field of the Invention [0002] The present invention relates to an authentication system and an authentication processing method for mutually authenticating each other between devices, and more particularly to an authentication system in which one device is an IC card.

[0002]

2. Description of the Related Art Conventionally, there has been an authentication system in which devices mutually authenticate each other. FIG. 6 is a diagram showing a configuration of a conventional authentication system. The authentication system illustrated in FIG. 6 is an authentication system that performs an authentication process between the IC card 50 (one device) and the card processing device 60 (the other device).

An IC card 50 has a control unit 51 for controlling the operation of the main body, and a storage unit 52 for storing a plurality of files.
And a communication unit 53 for performing wireless communication with the card processing device 60
And The storage unit 52 stores a plurality of files in a hierarchical file structure using directories (see FIG. 7). In FIG. 7, 54 is a root directory, 55 is a directory file (DF), and 56 is a data file. An authentication key 57 is applied to each directory file 55. Each data file 56 is provided with a read-only authentication key 58 and a read / write authentication key 59. The authentication key 57 is different for each directory file 55.
The write authentication key 59 differs for each data file 56.

[0004] The card processing device 60 includes a control unit 61 for controlling the operation of the main body, a storage unit 62 for storing a key used in an authentication process with the IC card 50, and a communication for executing wireless communication with the IC card 50. A portion 63.

Hereinafter, the IC card 50 and the card processing device 6
The authentication process with 0 will be described. This authentication process is based on I
Files stored in the storage unit 52 of the C card 50 (the directory file 55 and the data file 5
This is processing for preventing unauthorized access in 6).
Specifically, when accessing a file stored in the IC card 50, a key corresponding to the file is required, thereby preventing access by an unauthorized device having no such key. This ensures system security. Note that a proper device has a key corresponding to a file to be accessed.

Next, an outline of the authentication process will be described, and then the operation will be described in detail with reference to FIGS. 8 and 9.

The IC card 50 includes a card processing device 60
When a request for access to a file is issued from the server, a random number A is generated and transmitted to the card processing device 60. The card processing device 60 transmits the encryption A obtained by encrypting the random number A with the key corresponding to the file to be accessed to the IC card 50. The IC card 50 decrypts the cipher A with the key applied to the file requested to be accessed by the card processing device 60, determines whether or not the cipher A matches the transmitted random number A. Assume that device 60 is the appropriate device.

The IC card 50 informs the card processing device 60 whether or not the card processing device 60 has a key corresponding to the file requested to be accessed by the above-mentioned processing, ie, whether or not the device is an appropriate device. The determination is made by encrypting the random number A.

The card processing device 60 performs the following processes 1 to 3 to determine whether the IC card 50 is a proper device. The processing of is essentially the same as the above processing. The card processing device 60 generates a random number B,
Send to card 50. The IC card 50 transmits the encryption B obtained by encrypting the random number B with the key applied to the file requested to be accessed by the card processing device 60 to the card processing device 60. The card processing device 60 decrypts the encryption B with the key corresponding to the file that has requested access to the IC card 50, determines whether or not it matches the transmitted random number B. Device.

In the authentication process, a predetermined number may be used without using the random numbers A and B. However, in this case, the same number is always used in the authentication process, so that security is reduced.

Hereinafter, the authentication processing will be described in detail. FIG. 8 is a flowchart showing the operation of the card processing device in the authentication processing, and FIG. 9 is an IC in the authentication processing.
6 is a flowchart showing the operation of the card. The card processing device 60 transmits an access request to a specific file (directory file 55 or data file 56) to the IC card 50 (s51). This access request includes information specifying a file (directory file 55 or data file 56) stored in the storage unit 52 of the IC card 50, and an access method (data reading or data reading and writing) for the file. ) Is included.

When receiving an access request from the card processing device 60 (s71), the IC card 50 generates a random number A (s72), and transmits the generated random number A to the card processing device 50 (s73).

When the card processing device 60 receives the random number A (s52), it encrypts the received random number A (s5).
3). The card processing device 60 stores the key corresponding to the file requested to be accessed in s51 in the storage unit 62. In s53, the random number A is encrypted with a key corresponding to the file requested to be accessed in s51. The card processing device 60 transmits the random number A encrypted in s53 (hereinafter, referred to as encryption A) to the IC card 50 (s54).

When the IC card 50 receives the encryption A transmitted from the card processing device 60 (s74), the IC card 50 decrypts the received encryption A with the key applied to the file requested to be accessed by the card processing device 60. (S7
5).

When the file requested by the card processing device 60 to access is the data file 56,
Read-only authentication key 5 according to the requested access method
8 or the read / write authentication key 59 is selected, and the encryption A is decrypted with the selected key.

The IC card 50 determines whether or not the random number A generated at s72 matches the encryption A decrypted at s75 (s76). Is authenticated (s77). If they do not match, it is determined that the card processing device 60 is not an appropriate device, and this processing ends. IC card 50
Authenticates the card processing device 60 as a proper device in s77, and transmits an authentication result to the card processing device 60 (s78).

The card processing device 60 authenticates itself in the IC card 50 (receives an authentication result).
(S55), a random number B is generated (s56). Then, the card processing device 60 transmits the random number B generated in s56 to the IC card 50 (s57).

Note that the card processing device 60 terminates this processing when it does not receive the authentication result from the IC card 50 within a predetermined time after transmitting the encryption A.

Upon receiving the random number B (s79), the IC card 50 encrypts the received random number B (s8).
0). In s80, the card processing device 60 encrypts the random number B with the key applied to the file requested to be accessed. The IC card 50 stores the encrypted random number B (hereinafter, referred to as an encrypted random number B).
Call it Code B. ) To the card processing device 60 (s8).
1), end this processing.

When the card processing device 60 receives the cipher B transmitted from the IC card 50 (s58), the card processing device 60
The received encryption B is decrypted with the key corresponding to the file that has requested access to the card 50 (s59). Then, the card processing device 60 compares the random number B generated in s56 with s59.
Then, it is determined whether or not the cipher B decrypted in step 1 matches (s60), and if they match, the IC card 50 is authenticated as an appropriate device (s61). If they do not match, it is determined that the IC card 50 is not appropriate, and this processing ends.

In the above authentication process, the IC card 50,
Only when the card processing device 60 and the card processing device 60 both authenticate the other party as an appropriate device, the card processing device 60
Thus, access to the file that has requested access to the IC card 50 becomes possible. However, other files cannot be accessed.

Therefore, the card processing device 60 operates the data file-1A, the data file-2A, and the data file-3A stored in the storage unit 52 of the IC card 50.
(See FIG. 7), the directory 55 (DF-A) managing these data files 56 is accessed.
The above-described authentication processing is performed on four files including (the four files surrounded by broken lines in FIG. 7). That is, the authentication process has to be performed four times between the IC card 50 and the card processing device 60.

As described above, in the conventional authentication system, the authentication process is performed for each file to be accessed.
The processing executed between the card 50 and the card processing device 60 could not be performed quickly.

For example, in an authentication system in which the IC card 50 is used as a ticket such as a commuter pass and the card processing device 60 is applied to an automatic ticket gate installed at a station, a user having the IC card 50 operates a gate. During the passage, the card processing device 60 must access some files stored in the IC card 50 to read and write data. However, in the above-described method in which the authentication process is performed for each file, it takes a long time to perform the authentication process. Therefore, there is a high possibility that the above-described process cannot be completed while the user passes through the gate, and the operation is not stable. was there.

Therefore, one key (hereinafter, referred to as a degenerate key) is generated from a plurality of keys applied to a plurality of files (the directory file 55 and the data file 56) accessed by the card processing device 60, and the degenerate key is generated. An authentication system has been proposed in which all the files locked with the key used for generating the degenerate key can be accessed if the other party is authenticated by performing the above authentication process with the key (Japanese Patent Application Laid-Open No. HEI 9-163572). 10-327142). In this authentication system, the authentication process only needs to be performed once irrespective of the number of files accessed by the card processing device 60, so that the process executed between the IC card 50 and the card processing device 60 can be performed quickly.

[0026]

However, in the conventional authentication system, a different key is applied to each of the directory file 55 and the data file 56, so that a large number of keys must be stored in the IC card 50. Did not. Therefore, the IC card 50 is stored in the storage unit 5
2 had to be increased in storage capacity and was expensive.

In a system that does not perform the above-described authentication processing, it is not necessary to store a key in the IC card 50, so that the IC card 50 can be made inexpensive. 56 is likely to be rewritten illegally, and the security of the system cannot be ensured.

An object of the present invention is to provide an authentication system and an authentication method which can perform processing between devices at low cost without lowering security.

[0029]

An authentication system according to the present invention has the following arrangement to solve the above-mentioned problems.

(1) In an authentication system for performing an authentication process in which devices mutually authenticate each other, one device includes a file management unit that manages a plurality of files, and the other device includes a file management unit that manages a plurality of files. Access method data storage means for storing access method data indicating an access method for each file to be accessed among a plurality of files managed, and access method data transmitting means for transmitting the access method data to the one device With
Further, the one device may access a file managed by the file management means based on the access method data transmitted from the other device on condition that the other party is authenticated in the authentication processing. Is provided.

In the present invention, authentication processing is performed between one device and the other device. The other device stores access method data indicating an access method for each file to be accessed, and transmits the access method data to one device.

One of the devices accesses the file managed by the file management means based on the access method data transmitted from the other device on condition that the other device has been authenticated in the authentication processing. Allow

Therefore, if one key is set in one device for all the files accessed by the other device and the above-mentioned authentication process is performed with this key, the other device can operate regardless of the number of files accessed. All files can be accessed with one authentication process. As a result, processing between the two devices can be executed quickly. Also, since the number of keys to be stored in one device is reduced, the storage capacity required for one device is reduced. Therefore, the cost of one device can be reduced and the cost can be reduced.

Further, one device permits access to the file managed by the file management means based on the access method data transmitted from the other device authenticated in the above-described authentication process, ie, an appropriate device. So
It does not reduce the security of the system.

(2) The access method data stored in the other device is encrypted data, and the one device performs access method data decryption for decrypting the encrypted access method data. Means.

According to the present invention, since the other device stores the encrypted access method data, the security can be further improved.

(3) The access method data stored in the other device includes authentication data used for the authentication process, and the one device authenticates the other device using the authentication data. .

According to the present invention, the authentication accuracy in the authentication processing is improved by including the authentication data used in the authentication processing in the access method data.

(4) The one device manages a plurality of files in groups classified based on predetermined conditions, and performs an authentication process for authenticating the other device accessing the files for each of the groups.

As a method of managing a plurality of files in groups, for example, there is a hierarchical file structure using directories.

In this case, it is sufficient to lock the directory file for managing the data file and to manage all the data files accessed by the other device in this directory file.

The data file managed in the directory file does not have to be locked.

The directory file may be provided for each application of one device.

(5) The access method data is data indicating whether each of reading and writing of data to and from a file is permitted.

(6) The one device and the other device are:
Communicate wirelessly.

(7) The one device is an IC card.

[0047]

FIG. 1 is a diagram showing a configuration of an authentication system according to an embodiment of the present invention. The authentication system of this embodiment includes an IC card 1 and a card processing device 11. In this embodiment, the IC card 1 corresponds to one device according to the present invention, and the card processing device 11 corresponds to the other device according to the present invention. The authentication system of this embodiment is applied to, for example, a station ticket gate system. In this case, the IC card 1 is a commuter pass, a coupon, SF
(Stored Fare) Used as a ticket such as a card, and the card processing device 11 is applied to an automatic ticket gate that restricts the entrance and exit of a user to the station premises. The SF card is a prepaid card that can be used directly at a ticket gate.

Next, the configurations of the IC card 1 and the card processing device 11 will be described. The IC card 1 includes a control unit 2 that controls the operation of the main body, a storage unit 3 that stores a file described later, and a communication unit 4 that wirelessly communicates with the card processing device 11. This IC card 1 is generally called a non-contact card. Card processing device 1
Reference numeral 1 denotes a control unit 12 for controlling the operation of the main body, a storage unit 13 for storing access method data described later and a key used for authentication processing, and a communication unit 14 for wirelessly communicating with the IC card 1.
And

The IC card 1 stores a plurality of files in the storage unit 3. FIG. 2 is a diagram showing a file structure of the storage unit of the IC card. The storage unit 3 of the IC card 1 stores a plurality of files in a hierarchical file structure using directories. In FIG. 2, 21 is a root directory, 22 is a directory file, and 23 is a data file.

The IC card 1 of this embodiment is a versatile card. Directory file 22 (DF-A, D
FB, DF-C,...) Are provided for each use of the IC card 1. Each directory file 22 manages a data file 23 that stores data that needs to be accessed when used for a corresponding purpose.

Specifically, the IC card 1 is a card that can be used by a plurality of railway companies. Directory file 2
2 is provided for each railway company to which the IC card 1 can be used. For example, DF-A shown in FIG. 2 is a directory file 22 corresponding to the railway company A, DF-B is a directory file 22 corresponding to the railway company B,
DF-C is a directory file 22 corresponding to the railway company C. DF-A (directory file 2)
2) manages four data files 23 (data files-1A to 4A) storing data required when using the railway company A. For example, data file-1A is a file storing an expiration date, data file-2A is a file storing an effective section,
The data file -3A is a file storing the via-stations, and the data file -4A is a file storing the names of the users.

DF-B (directory file 2)
2) manages three data files 23 (data files -1B to 3B) storing data required when using the railway company B. For example, data file-1B is a file storing an expiration date, data file-2B is a file storing a usage log,
The data file-3B is a file storing the value balance.

Further, the DF-C (directory file 22) manages three data files 23 (data files -1C to 3C) storing data required when using the railway company C. For example, the data file-1C is a file storing an expiration date, the data file-2C is a file storing a usage log, and the data file-3C is a file storing a value balance.

As described above, the IC card 1 of this embodiment
Classifies a plurality of data files 23 by use (here, by railway company) and manages them in groups. A directory file 22 is provided for each group.

When the IC card 1 is used for an application corresponding to any one of the directory files 22, access to the data file 23 managed by another directory file 22 does not occur. In addition, there are data files 23 managed by the directory file 22 corresponding to the application, but not accessed by the card processing device 11.

Each directory file 22 stored in the storage unit 3 is provided with a mutual authentication key 25 and an access authentication key 26. When the IC card 1 authenticates that the other device, that is, the card processing device 11, is an appropriate device in the authentication process using the two keys applied to the directory file 22, the IC card 1 Access to the data file 23 managed by the directory file 22 is permitted.
That is, access to a plurality of data files 23 managed by the directory file 22 subjected to the authentication process in one authentication process is permitted. Details will be described later. Further, each directory file 22 includes
The access authentication number 27 used for determining whether or not the other device is appropriate in the authentication process is associated.

The root directory 21 and the data file 23 are not locked. Thereby, IC
The number of keys to be stored in the storage unit 3 of the card 1 is reduced,
Since the key storage capacity required for the storage unit 3 of the IC card 1 is reduced, the IC card 1 can be made inexpensive.

The card processing device 11 stores a mutual authentication key 15 and access method data 16 used in the authentication process with the IC card 1 in the storage unit 13. The access authentication key 15 is a key valid for a specific directory file 22 in the IC card 1.

FIG. 3 is a diagram showing access method data stored in the card processing device. FIG. 3 shows an example of the access method data 16 of the card processing device 11 which stores a mutual authentication key 15 valid for the DF-A (directory file 22) shown in FIG. The access method data 16 individually sets the access method for all data files 23 managed in the directory file 22 of the IC card 1 in which the mutual authentication key 15 stored in the storage unit 13 is valid. Data. The access method includes Read for executing only data reading, Write for executing only data writing, Read / Write for executing both data reading / writing, and none for accessing the data file 23.
There are four types. The access method data 16 also has information for specifying the data file 23 corresponding to each access method.

Even if the mutual authentication key 15 stored in the storage unit 13 is the same card processing device 11, the access to each data file 23 depends on the type of the device to which the card processing device 11 is applied. The method can be different. For example, even with devices of the same railway company, the method of accessing the data file 23 can be different depending on the type of device to which the card processing device 11 is applied, such as a ticket gate, a checkout machine, a ticket vending machine, and the like.

The access method data 16 includes the access authentication number. The number of access authentications is determined by the number of times that the mutual authentication key 15 stored in the storage unit 13 is valid.
This is the same number as the access authentication number 27 corresponding to the directory file 22 of the C card 1.

Further, the access method data 16 stored in the card processing device 11 is encrypted. The card processing device 11 does not store a key for decrypting the encrypted access method data. Therefore, the card processing device 11 cannot decrypt the encrypted access method data 16.

The IC card 1 stores a key for decrypting the encrypted access method data 16. Specifically, in order to decrypt the access method data 16 in which the access authentication key 26 applied to the directory file 22 of the IC card 1 in which the mutual authentication key 15 of the card processing device 11 is valid is encrypted. Is the key to

Hereinafter, the authentication processing in the authentication system of this embodiment will be described. First, an outline of the authentication processing in the authentication system of this embodiment will be described. In this embodiment, the authentication process is not performed for each data file 23 to be accessed, but is performed for each directory file 22. The authentication process is performed by the directory file 22 that is targeted in one authentication process. Access to all the data files 23 is permitted.

When the IC card 1 receives an access request from the card processing device 11, it generates a random number A and transmits it to the card processing device 11. The card processing device 60 generates a random number B and a random number C.

The access method data 16 obtained by encrypting the random number A and the random number C with the key corresponding to the file to be accessed, the cipher A, the cipher C, and the random number C (this access method data is encrypted twice. Is transmitted) and the random number B is transmitted to the IC card 50. The IC card 1 decrypts the cipher A and determines whether or not the cipher A matches the transmitted random number A. If the cipher A agrees, the IC card 1 tentatively authenticates the card processing device 11. The IC card 1 decrypts the doubly-encrypted access method data 16, and the access authentication number included in the access method data 16 matches the access authentication number 27 stored in the IC card 1 itself. Judge whether or not
If they match, the card processing device 11 is authenticated. When authenticating that the card processing device 11 is an appropriate device, the IC card 1 sets an access method for each data file 23 managed in the directory file 22 based on the decrypted access method data.

The IC card 1 has a key corresponding to the file requested to be accessed by the card processing device 11 in the above processing and whether the IC card 1 stores appropriate access method data (access authentication number). Have judged. In addition, by using the access method data 16 (the number of access authentications) for authentication of the card processing device 11, authentication accuracy is increased and security is ensured.

The card processing device 11 performs the following processing to determine whether the IC card 1 is a proper device. The IC card 1 transmits the encryption B obtained by encrypting the random number B to the card processing device 11.
The card processing device 11 decrypts the code B, determines whether or not it matches the transmitted random number B, and authenticates that the IC card 1 is a proper device if it matches.

Hereinafter, the authentication processing in the authentication system of this embodiment will be described in detail. 4 and 5
9 is a flowchart showing an authentication process performed between the IC card and the card processing device. FIG. 4 shows the operation of the card processing device, and FIG. 5 shows the operation of the IC card. The card processing device 11 transmits an access request to the IC card 1 (s1). The access request includes information for specifying the directory file 22 that manages the data file 23 for which access is requested.

Upon receiving the access request from the card processing device 11 (s21), the IC card 1 generates a random number A (s22). Then, the generated random number A is transmitted to the card processing device 11 (s23).

When the card processing device 11 receives the random number A (s2), the mutual authentication key 15 stored in the storage unit 13 is received.
Encrypts the random number A received in step (s3). Hereinafter, the encrypted random number A is referred to as encryption A. Next, the card processing device 1
1 generates a random number B and a random number C (s4), and encrypts the random number C generated by the mutual authentication key 15 (s5). Less than,
The encrypted random number C is called cipher C.

Further, the card processing device 11 accesses the access method data 1 stored in the storage unit 13 using the random number C as a key.
6 is encrypted (s6). As described above, the access method data 16 stored in the storage unit 13 of the card processing device 11 is encrypted. In s6, the encrypted access method data 16 is further encrypted with a random number C. Hereinafter, the access method data 16 encrypted in s6 is referred to as “double-encrypted access method data 1”.
6]. The access method data 16 stored in the storage unit 13 of the card processing device 11 is referred to as “encrypted access method data 16”.

The card processing device 11 includes a cipher A, a random number B,
The cipher C and the doubly-encrypted access method data 16 are transmitted to the IC card 1 (s7).

The IC card 1 stores the encryption A, the random number B, the encryption C, and the double-encrypted access method data 16.
Is received (s24), first, the encryption A is decrypted with the mutual authentication key 25 (s25). Note that the IC card 1 uses the mutual authentication key 25 applied to the directory file 22 that manages the data file 23 requested to be accessed by the card processing device 11 in decrypting the encryption A. The IC card 1 uses the card processing device 11 in s23.
It is determined whether or not the random number A transmitted in step S2 matches the encryption A decrypted in step s25, and if they match, the card processing device 11 is provisionally authenticated as an appropriate device (s2).
6, s27).

If the random number A transmitted in s23 does not match the encryption A decrypted in s25, the card processing device 11 determines that the card processing device 11 is not an appropriate device, and does not execute the subsequent processing. The process ends. This prevents the inappropriate card processing device 11 from illegally accessing the data file 23 stored in the storage unit 3 of the IC card 1.

When the IC card 1 provisionally authenticates the card processing device 11 as an appropriate device in s27, the IC card 1 decrypts the code C with the mutual authentication key 25 (s28). Then, the access method data 16 that is double-encrypted is decrypted using the decrypted encryption C as a key (s29). IC card 1 is
At 29, the encrypted access method data 16 stored in the storage unit 13 of the card processing device 11 is obtained.

Further, the IC card 1 transmits the encrypted access method data 26 obtained in s29 to the access authentication key 2
The decoding is performed in step 6 (s30). The IC card 1 has the access authentication number included in the access method data 16 decrypted in s30 and the access authentication number 2 stored in the storage unit 3.
7 is determined to be a match, and if they match, the card processing device 11 is authenticated as a proper device (s31, s32).

If the number of access authentications included in the access method data 16 decrypted in s30 and the number of access authentications 27 stored in the storage unit 3 do not match, the IC card 1 It is determined that the processing device 11 is not an appropriate device, and this processing ends without executing the subsequent processing.

As described above, the IC card 1 performs the temporary authentication using the random number A and the main authentication using the access authentication number 27 to authenticate whether the card processing device 11 is an appropriate device. I have.

When the IC card 1 authenticates the card processing device 11 as a proper device in s32, the IC card 1 requests the card processing device 11 to access based on the access method data 16 decrypted in s30. File 23
An access method is set for each (s33). And IC
The card 1 encrypts the random number B with the mutual authentication key 25 (s
34). Hereinafter, the encrypted random number B is referred to as encryption B. I
The C card 1 transmits the encryption B to the card processing device 11 (s35).

At this point, the IC card 1 completes the authentication processing in which the card processing device 11 requesting access to the data file 23 has been authenticated as a proper device. Thereafter, the IC card 1 waits for access to the data file 23 from the card processing device 11.

On the other hand, the card processing device 11
When the encryption B is received from the storage unit 13 (s8), the encryption B is decrypted with the mutual authentication key 15 stored in the storage unit 13 (s8).
9). Then, the card processing device 11 determines whether the random number B transmitted in s7 matches the encryption B decrypted in s9, and if they match, the IC card 1 is determined to be an appropriate device. Authentication is performed (s10, s11).

If the random number B transmitted in s7 does not match the encryption B decrypted in s9, the IC card 1
Is not an appropriate device, and this process is terminated.

When the card processing device 11 determines in step s10 that the IC card 1 is a proper device, the card processing device 11 terminates the authentication processing and accesses the data file 23 stored in the storage unit 3 of the IC card 1. To start.

More specifically, the card processing device 11 requests the IC card 1 to read data stored in a specific data file 23 or to write data. The IC card 1 determines whether the request from the card processing device 11 is appropriate, and if not, ignores the request. The determination as to whether or not this is appropriate is made based on the access method set in s33. For example,
An access request to a data file 23 that is not managed by the directory file 22 that has undergone the authentication process, or a data file 23 that is only allowed to be read.
It is determined that the request to write data to is not appropriate, and this is ignored.

As described above, in the authentication system of this embodiment, the card processing device 11 can access all the necessary data files 23 in one authentication process. Therefore, the processing executed between the IC card 1 and the card processing device 11 can be performed quickly.

Further, the IC card 1 authenticates whether the card processing device 11 is appropriate by the temporary authentication using the random number A and the personal identification using the access authentication number 27.
The authentication accuracy of the card processing device 11 is also sufficiently ensured. The IC card 1 permits access to the data file 23 by the card processing device 11 based on the access method data 16 transmitted from the card processing device 11 that has been authenticated, so that sufficient security is ensured. Have been.

Further, since the number of keys to be stored in the storage unit 3 of the IC card 1 is reduced, and the storage capacity of the keys required for the storage unit 3 of the IC card 1 is reduced, the IC card 1 can be manufactured at low cost.

In wireless communication, it is usually better to reduce the number of times of communication even if the amount of data per one time increases.
Overall processing time is reduced. In this embodiment,
In the authentication processing, the IC card 1 and the card processing device 11 are transmitted by collectively transmitting the cipher A, the random number B, the cipher C, and the double-encrypted access method data 16 in s7.
And the number of times of wireless communication performed between them has been reduced. Thereby, there is almost no increase in the time required for the authentication process.

Further, even if the access method to the data file 23 is changed after the operation of the system, a simple operation of rewriting the access method data 16 to the corresponding data file 23 in the card processing device 11 can cope with the change. it can.

[0091]

As described above, according to the present invention, the other device can access all files by one authentication process regardless of the number of files to be accessed.
Therefore, processing between the two devices can be executed quickly.

Further, one device can be inexpensive because the storage capacity of the storage unit can be reduced.

Further, since the authentication accuracy of the authentication process between the two devices is increased, security does not deteriorate.

Further, even if the access method to the data file stored in one device changes after the operation of the system, it can be dealt with by a simple operation of rewriting the access method data in the other device.

[Brief description of the drawings]

FIG. 1 is a diagram showing a configuration of an authentication system according to an embodiment of the present invention.

FIG. 2 is an IC of an authentication system according to an embodiment of the present invention;
FIG. 3 is a diagram illustrating a file configuration in a card.

FIG. 3 is a diagram showing access method data stored in a card processing device according to an embodiment of the present invention.

FIG. 4 is a flowchart illustrating an authentication processing operation of the card processing apparatus according to the embodiment of the present invention;

FIG. 5 is a flowchart showing an authentication processing operation of the IC card according to the embodiment of the present invention.

FIG. 6 is a diagram showing a configuration of a conventional authentication system.

FIG. 7 is a diagram showing a file configuration in an IC card of a conventional authentication system.

FIG. 8 is a flowchart showing an authentication processing operation of the conventional card processing device.

FIG. 9 is a flowchart showing a conventional IC card authentication processing operation.

[Explanation of symbols]

 1-IC Card 2-Control Unit 3-Storage Unit 4-Communication Unit 11-Card Processing Device 12-Control Unit 13-Storage Unit 14-Communication Unit 15-Mutual Authentication Key 16-Access Method Data 21-Root Directory 22- Directory file 23-data file 25-mutual authentication key 26-access authentication key 27-access authentication number

──────────────────────────────────────────────────続 き Continued on the front page (51) Int.Cl. ⁷ Identification symbol FI Theme coat ゛ (Reference) G06K 17/00 G06K 19/00 P 5J104 H04L 9/10 H04L 9/00 621A 9/32 675A F-term (reference) ) 2C005 MA40 MB01 NA08 NA09 SA06 5B017 AA01 BA05 BA06 CA14 5B035 AA13 BB09 CA23 CA29 CA38 5B058 CA15 CA23 CA27 KA31 KA33 KA35 5B082 GA11 JA08 5J104 AA07 KA02 KA04 KA06 NA02 NA35 NA37

Claims (8)

[Claims] 1. An authentication system for performing an authentication process for mutually authenticating a partner between devices, wherein one device includes a file management unit that manages a plurality of files, and the other device is managed by the file management unit. An access method data storage unit that stores access method data indicating an access method for each file to be accessed among a plurality of files being accessed, and an access method data transmission unit that transmits the access method data to the one device. Further, the one device, on condition that the other party has been authenticated in the authentication processing, to a file managed by the file management means based on the access method data transmitted from the other device. An authentication system comprising an access permitting means for permitting the access of the user. 2. The access method data stored in the other device is encrypted data, and the one device is an access method data decryption unit that decrypts the encrypted access method data. The authentication system according to claim 1, further comprising: 3. The access method data stored in the other device includes authentication data used for the authentication process, and the one device authenticates the other device using the authentication data. Item 3. The authentication system according to item 1 or 2. 4. The one device according to claim 1, wherein the one device manages a plurality of files in groups classified based on predetermined conditions, and performs an authentication process for authenticating the other device accessing the files for each group. 3. The authentication system according to any one of 3. 5. The authentication system according to claim 1, wherein the access method data is data indicating whether each of reading and writing of data to and from a file is permitted. 6. The authentication system according to claim 1, wherein the one device and the other device communicate wirelessly. 7. The authentication system according to claim 1, wherein said one device is an IC card. 8. An authentication method for mutually authenticating a partner between devices, wherein, among a plurality of files managed by one device, access method data indicating an access method for each file to be accessed is transmitted from the other device. Transmit to one device, and permit access to the file managed based on the access method data transmitted from the other device on condition that one device authenticates the other party in the authentication process. Authentication method.