JP2002359614A - Key control method and system therefor and data processor - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a key control method that can effectively avoid IC (Inte grated Circuit) key data from illegally being leaked and falsified. SOLUTION: A key control device 2 issues a unique identification data to each IC respectively to a plurality of ICs 5, the key control device 2 issues a base key data BK, and a key control source 12 provides the identification data ID and the base key data BK to an IC issue source 13. An IC issue device 3 applies processing based on a prescribed key generating algorithm to the identification data ID and the base key data BK to generate IC key data respectively corresponding to a plurality of the ICs 5 and writes the generated IC key data to the corresponding ICs 5.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a key management method, a system and a data processing device having a feature in issuing and managing key data stored in an IC (Integrated Circuit) used for personal authentication and the like.

[0002]

2. Description of the Related Art An IC used for personal authentication or the like stores IC key data used when the IC performs an authentication process with an authentication device. Such IC key data is stored in the IC at the time of issuance of the IC, for example, at the issuer of the IC (hereinafter, also referred to as the IC issuer). It is often carried out by a key management source that is an institution.

[0003] Since the IC key data is used for personal authentication, the IC key data issued by the key management source must be provided to the IC issuer through a secure route so as not to be falsified or leaked. For this reason, conventionally, for example, IC key data issued by a key
Provided to C issuers. A plurality of IC key data is usually stored in each IC. Conventionally, a plurality of IC key data is issued by a key management source and provided to the IC issuer.

[0004]

However, in the above-described conventional system, the key management source sends an IC to the IC issuer.
In the process of providing the C key data, there is a problem that the encryption of the IC key data is illegally broken and the IC key data may be leaked or falsified. Further, in the above-described conventional system, all of a plurality of IC key data stored in individual ICs are issued by the key management source and provided to the IC issuer, so that the key management source distributes to the IC issuer. There is a problem that the data amount of the IC key data becomes very large.

An object of the present invention is to provide a key management method, a system and a data processing device capable of effectively preventing IC key data from being illegally leaked and falsified in view of the above-mentioned prior art. And It is another object of the present invention to provide a key management method, a system and a data processing device capable of reducing the amount of IC key data delivered from a key management source to an IC issuer.

[0006]

In order to solve the above-mentioned problems of the prior art and to achieve the above-mentioned object, a key management method according to a first aspect of the present invention is to issue key information to an integrated circuit by issuing integrated circuit key data. A key management method for performing writing processing using a computer, wherein a key management source issues identification data unique to an integrated circuit for each of a plurality of integrated circuits, and the key management source issues base key data. And providing the identification data and the base key data from the key management source to a key writing source, wherein the key writing source performs a predetermined process using the identification data and the base key data received from the key management source. Perform processing based on the key generation algorithm,
Integrated circuit key data corresponding to each of the plurality of integrated circuits is generated, and the key writer writes the generated integrated circuit key data to the corresponding integrated circuit.

In the key management method according to the first aspect of the invention, as described above, the key management source provides not the integrated circuit key data but the identification data and base key data which are the material thereof, instead of the integrated circuit key data. Therefore, if the key generation algorithm is secured, the confidentiality of the integrated circuit key data itself can be maintained even when the identification data and the base key data leak in the process of providing them. In the key management method of the first invention, as described above, when the key writing source generates the integrated circuit key data of a plurality of integrated circuits, the key writing source can share the key writing data by sharing the base key data. The amount of data to be provided can be reduced.

In the key management method according to the first invention, preferably, the key management source generates a plurality of the integrated circuit key data by using a single piece of the identification data at the key writing source. Issue the base key data including a plurality of key data to be enabled, the key writing source generates a plurality of the integrated circuit key data using a single piece of the identification data, and the generated plurality of the integrated circuits. Write the key data to a single integrated circuit.

In the key management method according to the first invention, preferably, the key management source generates a random number and issues the base key data based on the random number. Further, in the key management method of the first invention, preferably, the key management source provides the same base key data to the key writing source for a predetermined number of the identification data, and stores the predetermined number of the identification data. The base key data is updated as a unit.

In the key management method according to the first invention, preferably, the key management source creates signature data of the identification data and the base key data using secret key data of the key management source. Using the common key data, the identification data, the base key data and the signature data are encrypted and provided to the key writer. Further, in the key management method of the first invention, preferably, the key writer uses the identification data, the base key data, and the signature data provided from the key management source by using the common key data. And verify the validity of the decrypted signature data.
Verification is performed using the public key data of the key management source. Also,
In the key management method of the first invention, preferably, the integrated circuit key data is key data used when the integrated circuit exchanges data with another device.

A key management system according to a second aspect of the present invention is a key management system that uses a computer to perform processing of issuing integrated circuit key data and writing the same in an integrated circuit.
Having a data processing device and a second data processing device,
The first data processing device uses identification data unique to the integrated circuit together with identification data issuing means for issuing each of the plurality of integrated circuits, and the identification data when generating the integrated circuit key data. Base key issuing means for issuing base key data to be obtained, and storage means for storing the issued identification data and base key data, wherein the second data processing device is configured such that the first data processing device An integrated circuit key generation unit that performs processing based on a predetermined key generation algorithm using the issued identification data and base key data to generate integrated circuit key data corresponding to each of the plurality of integrated circuits; Writing means for writing integrated circuit key data to the corresponding integrated circuit.

A data processing device according to a third aspect of the present invention is a data processing device that generates data used when generating integrated circuit key data used for processing of each of a plurality of integrated circuits. Means for issuing identification data unique to the integrated circuit for each of the plurality of integrated circuits; and issuing base key data used together with the identification data when generating the integrated circuit key data. Base key issuing means, and storage means for storing the issued identification data and base key data, wherein the base key issuing means updates the issued base key data in units of a predetermined number of the identification data. I do.

The data processing apparatus according to a fourth aspect of the present invention is an input / output device for inputting identification data uniquely defined for each of a plurality of integrated circuits and base key data commonly used for the plurality of integrated circuits. Integrated circuit key generation means for performing processing based on a predetermined key generation algorithm using the input identification data and base key data to generate integrated circuit key data corresponding to each of the plurality of integrated circuits. And the integrated circuit key data,
Writing means for writing to the corresponding integrated circuit.

[0014]

Embodiments of the present invention will be described below with reference to the accompanying drawings. FIG. 1 is an overall configuration diagram of a key management system 1 of the present embodiment. As shown in FIG. 1, the key management system 1 includes, for example, a key management device 2 used by a key management source 12 and an IC issuing device 3 used by an IC issuing source 13. Here, the key management source 12 corresponds to the key management source of the present invention, and the IC issuer 13 corresponds to the key writing source of the present invention. The key management device 2 corresponds to the first data processing device of the present invention, and the IC issuing device 3 corresponds to the second data processing device of the present invention.
Of data processing devices. FIG. 2 is a diagram for explaining processing of the key management system 1 shown in FIG. In FIG. 2, n and m are arbitrary integers. In the key management system 1, for example, the key management device 2
ID data (ID_1 to ID_m) unique to
Issued for each of the m ICs issued by the C issuing device 3. Further, the key management device 2 stores a predetermined number of identification data I
The base key data BK (BK_1 to BK_n) commonly used for the predetermined number (for example, 100,000) of the identification data IDs is issued in units of D. Key management device 2
Records the identification data ID and the base key data BK on a recording medium, and provides the recording medium from the key management source 12 to the IC issuer 13. Then, the IC issuing device 3 reads out the identification data ID and the base key data BK from the recording medium, and uses these for each of the m ICs.
Generate IC key data. For example, if k is an integer satisfying 1 ≦ k ≦ m, the IC issuing device 3
Is assigned to the IC key data K_IC
_K_1 to K_IC_k_n are issued. And IC
The issuing device 3 writes the IC key data into the corresponding IC 5 and issues the IC.

The key management device 2 and the IC shown in FIG.
The issuing device 3 will be described in detail. [Key Management Device 2] FIG. 3 is a functional block diagram of the key management device 2 shown in FIG. As shown in FIG. 3, the key management device 2
Has, for example, an ID issuing unit 21, a base key issuing unit 22, a storage unit 23, a recording medium access unit 24, and a control unit 25. The ID issuing unit 21 issues a unique identification data ID for each of a plurality of ICs issued by the IC issuer 13. The base key issuing unit 22 has a predetermined number (for example, 10
The base key data BK commonly used for generating the IC key data using the (ten thousand) identification data IDs is generated by random numbers and issued. Further, the base key issuing unit 22 issues the base key data BK to be issued for each of the predetermined number of identification data IDs.
To update.

The storage unit 23 is a database that stores the identification data ID issued by the ID issuing unit 21 and the base key data BK issued by the base key issuing unit 22. The recording medium access unit 24 reads the identification data ID and the base key data BK provided to the IC issuer 13 from the storage unit 23, and writes them on a recording medium such as a CD-R (Compact Disk-Recordable).

The control unit 25 uses the secret key data SK_2 of the key management device 2 to generate the identification data ID and the signature data CER of the base key data BK. The signature data CER is written on the recording medium and is stored in the IC issuer 1
3 provided. Further, the control unit 25 controls the identification data I
D, base key data BK and signature data CER are generated using the common key data K_C. The control unit 25
Uses the public key data KP_3 of the IC issuing device 3,
The common key data K_C is encrypted. The encrypted common key data K_C is provided to the IC issuing device 3 via the recording medium or the network. Control unit 25
Controls the processing of the key management device 2.

[IC issuing device 3] FIG.
FIG. 3 is a functional block diagram of a C issuing device 3. As shown in FIG. 4, the IC issuing device 3 includes, for example, a recording medium access unit 3
1, IC key generation unit 32, storage unit 33, IC access unit 3
4 and a control unit 35.

The recording medium access unit 31 is provided with the key management source 12
The identification data ID, the base key data BK, and the signature data CER are read from the recording medium provided by. I
After the control unit 35 authenticates the validity of the signature data CER, the C key generation unit 32 performs processing based on a predetermined key generation algorithm, and for each IC, the corresponding identification data ID and the base key data BK. Is used to generate IC key data K_IC. At this time, the IC key generation unit 32
Generation of the IC key data K_IC by the IC key data K
In order to prevent tampering and leakage of the _IC, it is performed in a predetermined work unit (lot unit) immediately before the write operation to the IC. The key generation algorithm used by the IC key generation unit 32 is centrally managed by the key management source 12. As a result, in the key management device 2, the same IC
Key data K_IC can be generated. In this case, the key management device 2 stores the identification data ID and the base key data BK in the storage unit 23 shown in FIG. 3 and, if necessary, identifies the identification data ID and the base key data based on the key generation algorithm. The IC key data K_IC is generated using the data BK.

The storage unit 33 is a database for storing the IC key data K_IC generated by the IC key generation unit 32. The IC access unit 34 writes the IC key data K_IC read from the storage unit 33 to the corresponding IC5.
The IC access unit 34 is connected to, for example, a device dedicated to writing the IC key data K_IC to the IC. In this case, in order to prevent the IC key data K_IC transmitted between the IC access unit 34 and the write-only device from being illegally monitored or falsified, the IC access unit 34 converts the IC key data K_IC into transfer key data. And encrypts it and sends it to the write-only device. Then, the IC key data K_IC is decrypted in the IC 5 using the transfer key data, and is written in a predetermined secure storage area. Thereby, the tamper resistance of the entire key management system 1 can be improved.

The control unit 35 decrypts the common key data K_C provided from the key management source 12 using the secret key data KS_3. The control unit 35 includes the recording medium access unit 31
The identification data ID, base key data BK and signature data CER read by
Is decrypted using. The control unit 35 checks the validity of the decrypted signature data CER with the public key data KP
Verify using _2. Further, the control unit 35 controls the processing of the IC issuing device 3 as a whole.

Hereinafter, an operation example of the key management system 1 shown in FIG. 1 will be described. FIGS. 5 and 6 are flowcharts for explaining an operation example of the key management system 1 shown in FIG. Step ST1: The ID issuing unit 21 of the key management device 2 shown in FIG. 3 uses the unique identification data ID_1 to I for each of the m ICs issued by the IC issuer 13.
Issue D_m.

Step ST2: The identification data ID_ issued by the ID issuing unit 21 of the key management device 2 in step ST1.
1 to ID_m are written in the storage unit 23.

Step ST3: The base key issuing section 22 of the key management device 2 generates a random number and issues base key data BK which is commonly used for generating IC key data using the identification data ID_1 to ID_m. .

Step ST4: The base key issuing unit 22 of the key management device 2 writes the base key data BK issued in step ST3 into the storage unit 23.

Step ST5: Control unit 2 of key management device 2
5, identification data ID_1 to ID_1 read from the storage unit 23;
The signature data CER is generated using the ID_m, the base key data BK, and the secret key data SK_2 of the key management device 2.

Step ST6: Control unit 2 of key management device 2
5, identification data ID_1 to ID_1 read from the storage unit 23;
ID_m and base key data BK, and step ST5
And the signature data CER generated in
And encrypt it.

Step ST7: Control unit 2 of key management device 2
5 encrypts the common key data K_C using the public key data KP_3 of the IC issuing device 3.

Step ST8: The recording medium access unit 24 of the key management device 2 records the identification data ID_1 to ID_m encrypted in step ST6, the base key data BK, and the signature data CER on the recording medium. Key management source 12
Provides the recording medium to the IC issuer 13. Further, the key management source 12 records the common key data K_C encrypted in step ST7 on the recording medium and provides the same to the IC issuer 13, or transmits the common key data K_C to the IC issuer 3 via a network.

Step ST9: The control unit 35 shown in FIG.
Is a key management source 1 via a recording medium or a network.
2 is decrypted using the secret key data KS_3 of the IC issuing device 3.

Step ST10: The control unit 35 of the IC issuing device 3 shown in FIG. 4 uses the common key data K_C decrypted in step ST9 to read the identification data ID_1 to ID_1 to ID_1 read from the recording medium via the recording medium access unit 31. ID_
m, base key data BK and signature data CER are decrypted.

Step ST11: The control unit 35 of the IC issuing device 3 executes the signature data CE decrypted in step ST10.
The validity of R is verified using the public key data KP_2 of the key management device 2.

Step ST12: IC of IC issuing device 3
The key generation unit 32 determines in step ST11 that the signature data CER
When the validity of the IC key is confirmed, the IC key data K for each IC 5 is obtained using the identification data ID_1 to ID_m decrypted in step ST10 and the base key data BK.
_IC is generated. Specifically, the IC key generation unit 32
For IC5 to which ID_k is assigned, IC key data K_IC_k_1 to K_IC_k_n are generated.

Step ST13: IC of IC issuing device 3
The access unit 34 determines whether the IC generated in step ST12
The key data K_IC is written to the corresponding IC5. Then, the IC issuer 13 issues the IC 5 to the user. When the user mounts the IC 5 on a predetermined authentication device,
Authentication processing using the IC key data K_IC is performed between the IC 5 and the authentication device.

FIG. 7 is a diagram for explaining the process of updating the base key data BK to be issued by the base key issuing unit 22 shown in FIG. 3 in step ST3 shown in FIG. As shown in FIG. 7, the base key issuing unit 22 issues the previous base key data B
It is determined whether the number of issued identification data IDs corresponding to K has reached a predetermined number (for example, 100,000) (step ST21). If it is determined that the number has been reached, the base key data BK Is updated (step ST22), and if it is determined that the number has not reached the predetermined number, the base key data BK is not updated.

As described above, according to the key management system 1, the identification data ID and the base key data BK are delivered from the key management source 12 to the IC issuer 13, and the IC key data K_IC itself is not delivered. Since the key generation algorithm in the IC issuing device 3 is secure,
Even if the identification data ID and the base key data BK leak during the delivery process, the confidentiality of the IC key data K_IC itself can be maintained. Further, the data amount of data delivered from the key management source 12 to the IC issuer 13 can be reduced as compared with the conventional case. Further, the storage unit 23 and the I
The load on the storage unit 33 of the C issuing device 3 can be reduced as compared with the related art.

Further, according to the key management system 1, the base key issuance unit 22 of the key management apparatus 2 shown in FIG.
, The security of the system can be further increased.

According to the key management system 1, the IC access unit 34 of the IC issuing device 3 shown in FIG. 4 encrypts the IC key data K_IC using the transfer key data and
5 and provided in the IC 5 using the transfer key data.
By decrypting the key data K_IC, the key management system 1
Can be improved in tamper resistance.

The present invention is not limited to the embodiment described above. For example, the method of delivering the identification data ID and the base key data BK from the key management device 2 to the IC issuing device 3 is not limited to the method using the secret key data and the common key data as long as the method is in a secure state. Further, in the key management system 1 described above, the identification data ID and the base key data BK are mainly recorded on the recording medium, and the key management
Although the delivery to the IC issuer 13 is described above, for example, the delivery may be performed via a public line such as the Internet or a dedicated line.

[0040]

As described above, according to the present invention,
It is possible to provide a key management method, a system, and a data processing device capable of effectively preventing an integrated circuit key data from being leaked or tampered with illegally. Further, the present invention can provide a key management method, a system, and a data processing device capable of reducing the amount of integrated circuit key data delivered from a key management source to a key writing source.

[Brief description of the drawings]

FIG. 1 is an overall configuration diagram of a key management system according to an embodiment of the present invention.

FIG. 2 is a diagram for explaining processing of the key management system shown in FIG. 1;

FIG. 3 is a functional block diagram of the key management device shown in FIG. 1;

FIG. 4 is a functional block diagram of the IC issuing device shown in FIG. 1;

FIG. 5 is a flowchart for explaining an operation example of the key management system shown in FIG. 1;

FIG. 6 is a flowchart for explaining an operation example of the key management system shown in FIG. 1, and is a continuation of FIG. 5;

FIG. 7 is a diagram illustrating an operation of step ST3 shown in FIG. 5;
FIG. 4 is a diagram illustrating a process in which a base key issuing unit illustrated in FIG. 3 updates base key data to be issued.

[Explanation of symbols]

DESCRIPTION OF SYMBOLS 1 ... Key management system, 2 ... Key management device, 3 ... IC issuing device, 12 ... Key management source, 13 ... IC issuing source, 5 ... IC, I
D_1 to ID_m ... identification data, BK_1 to BK_n ...
Base key data, K_IC ... IC key data, 21 ... ID
Issuing unit, 22: Base key issuing unit, 23: Storage unit, 24 ...
Recording medium access unit 25 Control unit 31 Recording medium access unit 32 IC key generation unit 33 Storage unit 34
IC access unit, 35 ... control unit

Claims (19)

[Claims] 1. A key management method for performing, using a computer, a process of issuing integrated circuit key data and writing the integrated circuit key data in an integrated circuit, wherein a key management source transmits identification data unique to the integrated circuit to a plurality of integrated circuits. The key management source issues base key data, the key management source provides the identification data and the base key data to the key writing source, and the key writing source issues the key management source. Performing a process based on a predetermined key generation algorithm using the identification data and the base key data received from, generating integrated circuit key data corresponding to each of the plurality of integrated circuits; And a key management method for writing the generated integrated circuit key data to the corresponding integrated circuit. 2. The base key data including a plurality of key data enabling a plurality of the integrated circuit key data to be generated using a single piece of the identification data at the key writing source. The key writing source uses the single identification data,
The key management method according to claim 1, wherein a plurality of the integrated circuit key data is generated, and the generated plurality of integrated circuit key data is written to a single integrated circuit. 3. The key management method according to claim 1, wherein the key management source generates a random number and issues the base key data based on the random number. 4. The method according to claim 1, wherein the key management source provides the same base key data to the key writing source for a predetermined number of the identification data, and updates the base key data in units of a predetermined number of the identification data. Item 2. The key management method according to Item 1. 5. The key management source creates signature data of the identification data and the base key data using secret key data of the key management source, and uses the common key data to generate the identification data, The key management method according to claim 1, wherein the base key data and the signature data are encrypted and provided to the key writer. 6. The key writing source decrypts the identification data, the base key data, and the signature data provided from the key management source using the common key data,
6. The key management method according to claim 5, wherein the validity of the decrypted signature data is verified using public key data of the key management source. 7. The integrated circuit key data according to claim 6, wherein the key writing source generates the integrated circuit key data using the decrypted identification data and the base key data after determining that the signature data is valid. Key management method described. 8. The key management method according to claim 1, wherein the key management source records the identification data and the base key data on a recording medium, and provides the recording medium to the key writing source. 9. The key management method according to claim 1, wherein the integrated circuit key data is key data used when the integrated circuit exchanges data with another device. 10. A key management system for performing, using a computer, a process of issuing integrated circuit key data and writing the same in an integrated circuit, comprising: a first data processing device and a second data processing device; A data processing device for issuing identification data unique to the integrated circuit for each of the plurality of integrated circuits; and a base used together with the identification data when generating the integrated circuit key data. A base key issuing unit that issues key data; and a storage unit that stores the issued identification data and base key data. The second data processing device issues the key data issued by the first data processing device. A process based on a predetermined key generation algorithm is performed using the identification data and the base key data, and a process corresponding to each of the plurality of integrated circuits is performed. A key management system comprising: integrated circuit key generation means for generating integrated circuit key data; and writing means for writing the integrated circuit key data to a corresponding integrated circuit. 11. The key management system according to claim 10, wherein said base key issuing means of said first data processing device updates said issued base key data in units of a predetermined number of said identification data. 12. The base key issuing means of the first data processing device can generate a plurality of the integrated circuit key data by using a single piece of the identification data in the second data processing device. The integrated circuit key issuing means of the second data processing device generates a plurality of the integrated circuit key data using a single piece of the identification data. The key management system according to claim 10, wherein: 13. A data processing device for generating data used when generating integrated circuit key data used for processing of each of a plurality of integrated circuits, wherein identification data unique to the integrated circuit is provided. Identification data issuing means for issuing each of the plurality of integrated circuits; base key issuing means for issuing base key data used together with the identification data when generating the integrated circuit key data; A data processing device comprising: storage means for storing identification data and base key data, wherein the base key issuing means updates the issued base key data in units of a predetermined number of the identification data. 14. The data processing apparatus according to claim 13, wherein said base key issuing means generates a random number and issues said base key data based on said random number. 15. Creating signature data of said identification data and said base key data using secret key data, encrypting said identification data, said base key data and said signature data using common key data, 14. The control unit according to claim 13, further comprising a control unit that provides the encrypted identification data, the base key data, and the signature data to a key writing source that generates the integrated circuit key data and writes the integrated circuit key data into an integrated circuit. Data processing device. 16. An input means for inputting identification data uniquely defined for each of the plurality of integrated circuits and base key data commonly used for the plurality of integrated circuits, wherein the input identification data and the base are inputted. An integrated circuit key generation unit that performs processing based on a predetermined key generation algorithm using key data to generate integrated circuit key data corresponding to each of the plurality of integrated circuits; and And a writing means for writing to the integrated circuit. 17. The input means further inputs signature data for authenticating the identification data and the validity of the base key data, and the data processing device further comprises: the input identification data; the base key data; 17. The data according to claim 16, further comprising control means for decrypting the signature data using common key data, and verifying the validity of the decrypted signature data using public key data of the signature data creation source. Processing equipment. 18. The data processing apparatus according to claim 17, wherein said integrated circuit key generation means generates said integrated circuit key data after said control means has authenticated said signature data. 19. The data processing device according to claim 16, wherein said integrated circuit key data is key data used when said integrated circuit exchanges data with another device.