JP2002352204A - Access control method for shared information stored in ic card, and ic card - Google Patents

Abstract

PROBLEM TO BE SOLVED: To advance the communization of data stored in an IC card securely step by step. SOLUTION: The IC card 1 stores individual access information generated about a specified service provider in a directory of the applicable service provider in the card, then receives an access request to shared data by the service provider from a card processing terminal 3 and authenticates the individual access information presented by the service provider. In this authentication, the IC card 1 holds the service provider's directory name when the service provider acquires the individual access information by accessing its own directory in the card, collates a directory name to be acquired from authentication information presented from the service provider with the previously held directory name and when they match with each other, allows access to the shared data and when they do not match with each other, refuses the access to the shared data.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an IC card system and the like for sharing data stored in an IC card with a plurality of services.

[0002]

2. Description of the Related Art Conventionally, a multi-application IC card capable of providing a service from a plurality of service providers to one IC card has been realized. In a system using such an IC card, there is a need for a mechanism that allows a service to share the data held in the card with other services in terms of resources and the like. This data sharing includes, for example, a method in which all services are collectively shared and a method in which sharing is gradually performed by sequentially sharing some services. As a specific method of the latter method, for example, a method in which key information for accessing data to be shared (shared data) is prepared, and the key information is used for some services to access the shared data Etc.

[0003]

However, in the method using the key information as described above, if the key information is leaked to another service provider, there is a possibility that the shared data may be illegally used in another service. There is.

As a countermeasure for such a problem, information such as a certificate for authentication is provided to a service provider who permits access to the shared data without passing key information for accessing the shared data. There is a method of confirming the validity of the service provider by supplying the information and checking the information such as the certificate. However, in this case, for example, another service provider illegally obtains information such as a certificate by entering a storage area in the card storing information such as a certain service certificate, and obtains the information such as the certificate. There is a risk of accessing shared data using information.

[0005] The present invention has been made in view of the above circumstances, and has as its object to provide a method and the like that can safely and stepwisely share data stored in an IC card.

[0006]

In order to achieve the above object, an access control method according to a first aspect of the present invention uses a computer to transmit predetermined shared information stored in an IC card to a plurality of service providers. An access control method for gradually opening predetermined access information to be given to a specific service provider; and providing the generated access information to the service provision in an IC card. Storing in a directory corresponding to the user, and in response to an access request to the shared information,
The access information presented by the access requesting service provider is authenticated. If the authentication result indicates normal, the access to the shared information is permitted.If the authentication result indicates an error, the access to the shared information is performed. And an authentication step of rejecting the access of the user.

[0007] According to such a configuration, for example, access information is individually issued to a service provider who wants to permit access to shared information, and the verification result of the access information presented from the access request source is appropriate. In addition, by allowing access to shared information,
The shared information in the IC card can be released (shared) step by step.

[0008] The access information may be generated based on directory information for specifying a directory in an IC card of a service provider to which the access information is to be given. When the service provider accesses the directory of the service provider in the IC card and obtains the access information, holding the directory information of the directory; and presenting the directory information from the service provider of the access request source. The directory information obtained from the authentication information obtained is compared with the directory information held in the holding step, and if the checked directory information matches, access to the shared information is permitted. Denying access to the shared information. It may be.

[0009] In response to a request for access to the directory of the service provider in the IC card, a predetermined authentication code may be obtained from the service provider of the access request source, and the authentication code obtained from the access request source may be authenticated. When the authentication result indicates normal, access to the requested directory is permitted. When the authentication result indicates an error, the existence of the requested directory may be denied.

[0010] Thereby, the service provider performs authentication when accessing the own directory of the IC card,
If the authentication result is an error, the existence of the directory is denied, so that the directory of each service provider can be hidden from other service providers so that no one can enter.

[0011] An IC card according to a second aspect of the present invention is a system IC card that gradually releases predetermined shared information stored in a storage area of the IC card to a plurality of service providers. Then, predetermined access information generated to be given to a specific service provider is transmitted to the IC.
Means for storing in a directory corresponding to the service provider in the card, and, in response to the access request to the shared information, performing authentication on the access information presented by the service provider of the access request source, and the authentication result is normal. And authentication means for permitting access to the shared information when the authentication result indicates an error, and rejecting access to the shared information when the authentication result indicates an error.

According to such a configuration, for example, the access information is individually issued to a service provider who wants to permit access to the shared information, and the verification result of the access information presented from the access request source is appropriate. In addition, by allowing access to shared information,
The shared information in the IC card can be released (shared) step by step.

[0013] The access information may be generated based on directory information for specifying a directory of a service provider to which the access information is to be given. When the access information is obtained by accessing the directory of the service provider, the directory information of the directory may be held, and the directory information is obtained from the authentication information presented by the service provider of the access request source. The directory information is collated with the stored directory information. If the collated directory information matches, access to the shared information is permitted, and if not, access to the shared information is denied. It may be.

In response to the service provider's access request to the directory, a predetermined authentication code may be obtained from the service provider of the access request source, and the authentication code obtained from the access request source is authenticated. If the result indicates success, grant access to the requested directory; if the authentication result indicates an error,
The existence of the requested directory may be denied.

[0015] Thereby, the service provider performs authentication when accessing the own directory of the IC card,
If the authentication result is an error, the existence of the directory is denied, so that the directory of each service provider can be hidden from other service providers so that no one can enter.

[0016]

DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, an IC card system according to an embodiment of the present invention will be described with reference to the drawings.
This system is for a user to receive a service provided by a plurality of service providers using one IC card, and a predetermined data in the IC card is shared stepwise by a plurality of service providers. It is a system for doing.

The IC card system according to the embodiment of the present invention includes an IC card 1 and a card processing terminal 3, as shown in FIG.

The IC card 1 includes a storage unit 11 and a control unit 1
2 and an input / output I / F (interface) 13. The storage unit 11 includes a ROM, RA
M, EEPROM, etc., and a directory for each service provider is formed as shown in FIG. Each directory contains, for example, shared data used by each service provider in common, individual access information (such as a certificate) for accessing the shared data, and an individual access information generation key used to generate individual access information. And information such as an individual access verification key used for verifying individual access information, a directory selection key (decryption key) used when each service provider accesses its own directory, and the like. The individual access information generation key and the individual access verification key are, for example, a pair of an encryption key and a decryption key.

For example, in FIG. 2, shared data is stored in the directory of service provider A, and individual access information for accessing the shared data is stored in the directory of service provider B. The state at the stage when the service provider B can access the shared data held is shown.

The control unit 12 performs processing such as reading and writing of data stored in the storage unit 11 in response to a request from the card processing terminal 3. For example, the control unit 12
When the service provider receives a request for access to its own directory in the card by the service provider, the service provider is authenticated by a predetermined authentication process, and then the access to the corresponding directory is permitted. Control unit 1
2, when receiving a request to access shared data in another person's directory, the control unit verifies the individual access information presented by the service provider by a predetermined verification process, Allow access to data. Further, the control unit 12 generates the access right information for the specified service provider by a predetermined individual access information generation process in response to the access right information generation request from the service provider of the storage source of the shared data. Then, the generated access right information is stored in the directory of the service provider.

The input / output I / F 13 is connected to the card processing terminal 3 for communication according to an instruction from the control unit 12.

The card processing terminal 3 is provided, for example, for each service provider, and includes a control unit 31 and a card R / W
(Reader / Writer) unit 32, storage unit 33, and input unit 3
4 and a display unit 35.

The control unit 31 executes a program stored in the storage unit 33, thereby controlling the user's IC card 1
And performs various processes for the service provider to provide the service to the user by using the data stored therein. In accessing the storage area of the IC card 1, for example, when accessing the directory of the service provider, the control unit 31 needs to be authenticated from the IC card 1 for the service provider by a predetermined authentication process. When the authentication result indicates normal, access to the directory of the service provider is permitted. When accessing the directory of another service provider in the card in order to access the shared data, the control unit 31 obtains the individual access information stored in the directory of the service provider, and obtains the obtained individual access information. It is necessary to present information to the IC card 1 and undergo verification by a predetermined verification process. If the verification result indicates normal, access to the shared data stored in the directory of another service provider is permitted.

The control unit 31 requests the IC card 1 to generate individual access information for a specific service provider in response to, for example, a predetermined request input from the input unit. Thus, the individual access information is stored in the directory of the specific service provider in the IC card 1. The function of requesting the generation of the individual access information is provided, for example, in the card processing terminal 3 corresponding to the service provider that holds the shared data.

The card R / W unit 32 communicates with the IC card 1 according to an instruction from the control unit 31. Storage unit 3
Reference numeral 3 stores information such as a directory selection key (encryption key) of the corresponding service provider. In addition, the storage unit 33
While storing the program executed by the control unit 31,
Various data required for processing are stored. The input unit 34
The control unit 31 is notified of the input data. Display 35
Displays a processing screen or the like for providing a service in accordance with an instruction from the control unit 31.

Next, the operation of the IC card system according to the present embodiment will be described by taking as an example the case where the shared data held by the service provider A is shared stepwise with the service providers B and C.

As a first step, the service provider A
With reference to FIG. 3, a description will be given of an individual access information generation process in a case where individual access information for the service provider B is generated so that the service provider B can use the shared data held by the service provider B.

For example, if the IC card 1 is the service provider A
The operator (user, person in charge of the service provider A, or the like) inputs a request for generating individual access information for the service provider B to the card processing terminal 3 corresponding to. In response, the card processing terminal 3
Transmits a request to generate individual access information for the service provider B to the IC card 1 (L1).

When the IC card 1 receives the request for generating the individual access information from the card processing terminal 3, the IC card 1 encrypts the directory name of the service provider B, the generated random number, and the padding byte using the individual access information generation key. Then, individual access information is generated (L2). Then, the generated individual access information is stored in the directory of the service provider B in the card (L3), and a completion signal is supplied to the card processing terminal 3 (L4). Thereby, IC
The individual access information of the service provider B is generated in the card 1, and thereafter, the service provider B can access the shared data.

Next, when the service provider B accesses the shared data in the IC card 1 to provide the service to the user, the service provider B accesses its own directory in the card and stores the individual access information. The authentication process in the case of acquiring will be described with reference to FIG.

For example, when the user's IC card 1 is set in the card processing terminal 3 corresponding to the service provider B, the card processing terminal 3 transmits a random number generation request to the IC card 1 (L11). In response, the IC card 1
Generates a random number, stores it in the storage unit 11, and transmits it to the card processing terminal 3 (L12). Card processing terminal 3
Receives the random number and generates an authentication code by encrypting the random number with a directory selection key (encryption key) (L1
3). Then, the authentication code, the directory name of the service provider B, and the ID of the directory selection key (decryption key) paired with the directory selection key (encryption key) are transmitted to the IC card 1 together with the authentication request (L14). .

In response, the IC card 1 searches for the directory selection key (decryption key) from the directory name and the key ID of the argument, and when the corresponding directory selection key is detected, the IC card 1 uses the key. Decrypt the authentication code. Then, the code acquired by the decryption is stored in the storage unit 11 first.
Is checked against the random numbers stored in the step (L15). Then, a response based on the check result is transmitted to the card processing terminal 3 (L16). This completes the authentication process.

In this example, the check result is normal,
It is assumed that a reply indicating that access to the directory of the service provider B is permitted is made. In this case, the card processing terminal 3 transmits, for example, a request to acquire the individual access information in the directory of the service provider B in the IC card 1 to the IC card 1. The IC card 1 stores information indicating the directory to which the card processing terminal 3 accesses (current directory information) in the storage unit 11 and reads out the individual access information in the requested directory of the service provider B to read the card processing terminal 3. Supply 3 Thereby, the card processing terminal 3 can acquire the individual access information of the service provider B.

In the above authentication process, if the check result of the authentication code indicates an error, the IC card 1
Sends a response to the effect that no corresponding directory exists to the card processing terminal 3.

Next, a verification process in a case where the service provider B accesses the shared data using the obtained individual access information will be described with reference to FIG.

The card processing terminal 3 of the service provider B
An access request to the shared data is transmitted to the IC card 1 together with the individual access information (L21). In response, the IC card 1 obtains the directory name, the random number, and the padding byte by decrypting the individual access information received from the card processing terminal 3 with the individual access verification key. Then, the directory name of the acquired information is checked against the directory name indicated by the current directory information stored in the storage unit 11, and it is checked whether or not they match (L22). Then, a response based on the check result is transmitted to the card processing terminal 3 (L23). This completes the verification process.

In this example, the check result is normal,
It is assumed that a reply to permit the service provider B to access the shared data is sent. In this case, the card processing terminal 3 is, for example, a service provider A in the IC card 1.
Request for reading shared data in the directory
Send to C card 1. The IC card 1 reads out the shared data in the directory of the requested service provider A and supplies it to the card processing terminal 3. As a result, the card processing terminal 3 can acquire the shared data, and the service provider B can provide a service using the shared data.

As the next step, in order to make the shared data held by the service provider A available to the service provider C, the individual access information generation processing (FIG. 3) is performed in the same manner as in the case of the service provider B described above. ), The individual access information for the service provider C is generated, and stored in the directory C of the IC card 1. This allows
Since the individual access information of the service provider C is generated, the service provider C can access the shared data thereafter.

Next, for example, when the user's IC card 1 is set in the card processing terminal 3 corresponding to the service provider C, the card processing terminal 3 first accesses the shared data in the IC card 1. , And obtains individual access information in its own directory. In this case, an authentication process (see FIG. 4) similar to that of the service provider B is performed between the card processing terminal 3 and the IC card 1, and
Authentication of the service provider C is performed.

When the authentication of the service provider C is properly completed, access to the directory of the service provider C in the IC card 1 is permitted. In response, the card processing terminal 3 transmits a request for obtaining individual access information in the directory of the service provider C to the IC card 1. The IC card 1 stores information (current directory information) indicating the directory of the access destination in the storage unit 11, reads out the individual access information in the directory of the requested service provider C, and supplies it to the card processing terminal 3. . Thereby, the card processing terminal 3 can acquire the individual access information of the service provider C.

If the check result in the authentication processing indicates an error, the IC card 1 sends a reply to the effect that no corresponding directory exists to the card processing terminal 3.

Subsequently, the card processing terminal 3 transmits an access request to the shared data to the IC card 1 in order to access the shared data in the IC card 1. This allows
The same verification processing as in the case of the service provider B (FIG. 5)
Is performed, and the individual access information presented by the service provider C together with the access request is verified.

When the verification of the individual access information of the service provider C is properly completed, the access to the shared data by the service provider C is permitted. In response to this, the card processing terminal 3 transmits a read request for the shared data to the IC card 1, and the IC card 1 reads the requested shared data and supplies the read shared data to the card processing terminal 3. As a result, in the card processing terminal 3, a service can be provided by the service provider C using the shared data.

As described above, the individual access information (certificate, etc.) is individually issued to the service provider permitted to access the shared data, and the verification result of the individual access information presented from the access request source is issued. Allow access to shared data when appropriate. As a result, the shared data can be safely released to a plurality of service providers in a stepwise manner. In addition, the individual access information of each service provider is stored in the directory of each service provider in the IC card 1, and the service provider performs authentication when accessing its own directory in the IC card 1, and the authentication result is In the case of an error, since the existence of the directory is denied, the directory of each service provider can be hidden from other service providers, so that others cannot enter. As a result, it is possible to prevent individual access information for accessing the shared data from being illegally acquired by another person, and to ensure security.

In the above description, the card processing terminal 3 is provided for each service provider. However, the present invention is not limited to this. For example, a single card processing terminal can provide services by a plurality of service providers. May be performed. In this case, the storage unit 33 of the card processing terminal 3 stores a processing program and data of each service provider,
In response to a predetermined request, the card processing terminal 3 may read and execute a processing program or the like of any service provider. The criterion for selecting the service to be executed is arbitrary, and may be determined in response to an external request (for example, when a selection input of a service is received from the input unit 34), or may be performed according to an internal request (for example, a card). (For example, when the processing terminal 3 selects a service based on the information stored in the IC card 1).

The card processing terminal 3 may be connected to a network or stand alone. Further, the subject of use of the data in the IC card 1 is not limited to the service provider, and is arbitrary. Further, in the above description, in the authentication when the access request to the directory is accepted, if the check result indicates an error, the existence of the directory is denied. A response to deny access may be sent.

Further, in the above description, the individual access information is generated inside the IC card. However, the present invention is not limited to this.
, Etc.) to generate the individual access information.
For example, when generating the individual access information of the service provider B with respect to the shared data held by the service provider A, first, the card processing terminal 3 of the service provider B is transmitted to the card processing terminal 3 of the service provider A. , The directory name of the service provider B. Then, the card processing terminal 3 of the service provider A encrypts the received information such as the directory name of the service provider B, the generated random number, and the padding byte by using the individual access information generation key. The individual access information is generated, and the generated individual access information is supplied to the card processing terminal 3 of the service provider B. The card processing terminal 3 of the service provider B that has received the individual access information accesses its own directory in the IC card and stores the individual access information in the directory. When the processing programs of the service provider A and the service provider B are executed by the same card processing terminal 3, for example, the control unit 31 executes each processing program as described above, Each data (directory name of service provider B, generated individual access information, etc.) is exchanged between the processing program of service provider A and the processing program of service provider B.

It should be noted that the system of the present invention can be realized by using a general computer system without using a dedicated system. For example, a computer readable recording medium (F
D, CD-ROM, DVD, etc.), and the program may be installed in a computer to configure the card processing terminal 3 or the like that executes the above-described processing. Alternatively, the program may be stored in a disk device of a server device on a network such as the Internet, and may be superimposed on a carrier wave and downloaded to a computer. In the case where the above-described functions are realized by the OS sharing or the OS and the application being jointly used, only the part other than the OS may be stored in the medium and distributed. You may download it.

[0049]

As described above, according to the present invention,
The shared information in the IC card can be released (shared) step by step safely.

[Brief description of the drawings]

FIG. 1 is a system configuration diagram of an IC card system according to an embodiment of the present invention.

FIG. 2 is a diagram for explaining a data structure in a storage unit of the IC card used in the IC card system of FIG. 1;

FIG. 3 is a diagram for explaining individual access information generation processing.

FIG. 4 is a diagram for explaining an authentication process when accessing a directory in an IC card.

FIG. 5 is a diagram illustrating a verification process when accessing shared data.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 1 IC card 11 Storage part 12 Control part 13 Input / output I / F 3 Card processing terminal 31 Control part 32 Card R / W part 33 Storage part 34 Input part 35 Display part

Continued on the front page (72) Inventor Naohisa Ichihara 3-3-3 Toyosu, Koto-ku, Tokyo Inside NTT Data Corporation (72) Inventor Shinya Yamamoto 3-3-1 Toyosu, Koto-ku, Tokyo No. F-term in NTT Data Corporation (reference) 2C005 MA05 MB10 SA07 SA12 SA22 5B035 AA13 BB09 CA29 CA38 5B058 CA23 CA27 KA31 KA35

Claims (6)

[Claims] 1. An access control method for gradually releasing predetermined shared information stored in an IC card to a plurality of service providers by a computer, wherein the predetermined control information is provided to a specific service provider. Generating access information; storing the generated access information in a directory in the IC card corresponding to the service provider; and responding to the access request to the shared information, the service of the access request source. Perform authentication on the access information presented by the provider, permit access to the shared information when the authentication result indicates normal, and reject access to the shared information when the authentication result indicates an error. An access control method, comprising: an authentication step. 2. The method according to claim 1, wherein the access information is generated based on directory information for specifying a directory in an IC card of a service provider to which the access information is to be given. When the service provider accesses the directory of the service provider in the IC card and obtains the access information, holding the directory information of the directory; and presenting the directory information from the service provider of the access request source. The directory information obtained from the authentication information obtained is compared with the directory information held in the holding step, and if the checked directory information matches, access to the shared information is permitted. Denying access to the shared information. 2. The access control method according to claim 1, wherein: 3. In response to a request for access to a directory of a service provider in an IC card, a predetermined authentication code is obtained from a service provider of an access request source, and authentication is performed on the authentication code obtained from the access request source. Performing the authentication, if the authentication result indicates normal, permits the access to the requested directory, and if the authentication result indicates an error, denies the existence of the requested directory. 3. The access control method according to 1 or 2. 4. An IC card for a system that gradually releases predetermined shared information stored in a storage area of the IC card to a plurality of service providers, and is generated to be given to a specific service provider. Means for storing the obtained predetermined access information in a directory corresponding to the service provider in the IC card, and an access presented by the service provider of the access request source in response to the access request to the shared information. Authentication means for authenticating the information, permitting access to the shared information when the authentication result indicates normal, and denying access to the shared information when the authentication result indicates an error. An IC card characterized by the above-mentioned. 5. The access information is generated based on directory information for specifying a directory of a service provider to which the access information is to be given. When accessing the directory of the service provider and obtaining the access information, holding the directory information of the directory; and obtaining the directory information obtained from the authentication information presented by the service provider of the access request source. Collating with the stored directory information, permitting access to the shared information when the collated directory information matches, and denying access to the shared information when not matching. The IC card according to claim 4, wherein 6. In response to an access request to a directory of a service provider, a predetermined authentication code is obtained from a service provider of an access request source, authentication is performed on the authentication code obtained from the access request source, and an authentication result is obtained. Indicates that the access to the requested directory is permitted when indicates normal, and denies the existence of the requested directory when the authentication result indicates an error. The described IC card.