JP2003044436A - Authentication processing method, information processor, and computer program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an improved constitution for authenticating a terminal and a user by using a server. SOLUTION: When an individual's terminal is used and connected to the server, an authenticating process comprises three stages of processes, i.e., (1) an individual authenticating process for the user by the individual's terminal, (2) a mutual authenticating process between the server and individual's terminal, and (3) an individual authenticating process for the user by the server. To pass the authentication, data for individual authentication and data for mutual authentication of the terminal are both needed and it becomes difficult for a 3rd person to impersonate the regular user, thereby increasing the safety. Further, the individual's terminal and server communicate by using data ciphered according to a session key to reduce the possibility of a data leak.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an authentication processing method, an information processing apparatus, and a computer program, and more specifically, to an authentication processing method for securely executing authentication processing between a server and a personal terminal, and The present invention relates to an information processing device and a computer program.

[0002]

2. Description of the Related Art Recently, personal terminals such as ICs in various service fields such as credit cards, bank cash cards, hospital medical cards, employee cards, membership cards of various groups, electronic money systems, commuter passes, etc. Memory devices such as cards are used. IC
The card is a CPU (Central Process
sing unit) and a memory for storing data necessary for processing are incorporated, and data is transmitted and received electrically to a predetermined reader / writer (R / W) or in a non-contact manner using electromagnetic waves or the like.

When an IC card as a personal terminal is used in an electronic money system, a security system, etc., an authentication process is executed with a server that executes data processing, and the personal terminal is not an unauthorized terminal. After the confirmation is performed, various processing such as data processing such as deposit / withdrawal processing and data registration processing in the server, or data transfer between the server and the personal terminal is executed. Personal information is often stored in the data storage means of the server or a memory such as an IC card. To prevent leakage of personal information, communication between the server and the IC card and execution of data processing are performed. Requires a reliable authentication process.

As a mode of the authentication processing between the personal terminal and the server, it is desirable that the personal terminal is directly connected to the server through a communication interface added to the IC card as the personal terminal. There is a strong demand for cost reduction, low power consumption, downsizing, etc., and in many cases there is no communication interface to connect to the server.
In such a case, a communication terminal other than the personal terminal such as an IC card is configured to mediate communication between the IC card and the server. Specifically, the communication terminal is a reader / writer (R / W) connected to a server, a personal computer with an IC card reader, or an A with a card reader.
TM, etc.

A personal terminal (for example, an IC card) has a user who uses it, and it is necessary to execute whether the user is a legitimate user, in addition to the terminal authentication. Conventionally, for example, a user inputs a password to a personal terminal to authenticate between the personal terminal and the user, and further authenticates between the personal terminal set on the communication terminal and the server to establish the authentication. As a condition, various data processes such as deposit / withdrawal, online shopping, and other data input / output between the server and the personal terminal are executed.

[0006]

In the above-mentioned authentication process, only the authentication between the personal terminal and the user and the authentication between the personal terminal and the server are executed, and the authentication between the server and the user is not executed. Until now, there is nothing but the process of assuming that the authentication between the ACs is performed by the authentication between the ABs and the authentication between the BCs.

In such a process, if the IC card, which is a personal terminal, is lost and the password is leaked, an unauthorized third party impersonates the true holder of the IC card, and the personal terminal. It is possible to establish user authentication with respect to, and for personal terminals, authentication can be prevented in advance if it is deleted from the registration data of the server due to, for example, notification of the user, but before the deletion process. When the personal terminal is used, the authentication between the server and the personal terminal is established, and unauthorized data processing can be executed. In other words, the server starts data processing without directly authenticating with the user who uses the personal terminal, and there is a high possibility that unauthorized processing will be executed.

The present invention has been made in view of the above problems, and performs authentication between a personal terminal (for example, an IC card) and a server, authentication between a personal terminal and a user, and authentication between a server and a user. An object of the present invention is to provide an authentication processing method, an information processing apparatus, and a computer program that can be respectively executed to eliminate the possibility of establishing authentication by an unauthorized third party and to safely perform communication. .

[0009]

The first aspect of the present invention is as follows.
An authentication processing method for executing data processing between a server having registered user data and a data processing terminal connected to the server, the personal authentication processing step for a user by the data processing terminal, the server and the data processing terminal. An authentication processing method is characterized by executing three authentication processings, that is, a mutual authentication processing step between the two and an individual authentication processing step for the user by the server.

Further, in one embodiment of the authentication processing method of the present invention, the mutual authentication processing step between the server and the data processing terminal is executed on condition that a personal authentication processing for the user by the data processing terminal is established, The personal authentication processing step for the user by the server is performed on condition that mutual authentication processing between the server and the data processing terminal is established.

Further, in one embodiment of the authentication processing method of the present invention, the mutual authentication processing step between the server and the data processing terminal is executed according to a common key method or public key method mutual authentication processing and a session key sharing processing algorithm. In the personal authentication processing step for the user by the server, the data transferred from the data processing terminal to the server as authentication data is transferred as encrypted data by the session key.

Further, in one embodiment of the authentication processing method of the present invention, the personal authentication data applied in the personal authentication processing step for the user by the data processing terminal is stored data unique to the data processing terminal, and the user by the server. The personal authentication data applied in the personal authentication processing step is the server-specific stored data.

Further, in one embodiment of the authentication processing method of the present invention, the personal authentication data applied in the personal authentication processing step for the user by the data processing terminal and the reference target in the personal authentication processing step for the user by the server. The registered individual authentication data is registered in either the server or the data processing terminal by one registration process by the user, and after the mutual authentication process between the server and the data processing terminal, the registered individual authentication data is registered between the server and the data processing terminal. The authentication data is encrypted and transferred, and the registered personal authentication data is shared or divided and shared by both the server and the data processing terminal.

Further, in one embodiment of the authentication processing method of the present invention, the user input personal authentication data in the user personal authentication processing step by the data processing terminal is applied in the user personal authentication processing step by the server, The user input personal authentication data is transferred as encrypted data by a session key from the data processing terminal to the server after mutual authentication processing between the server and the data processing terminal.

Further, in one embodiment of the authentication processing method of the present invention, the personal authentication data applied to the personal authentication processing step for the user by the data processing terminal is biometric information.

Further, in one embodiment of the authentication processing method of the present invention, the personal authentication data applied to the personal authentication processing step for the user by the server is biometric information.

Further, a second aspect of the present invention is an information processing apparatus for executing data processing and having registered user data, wherein the corresponding data of the registered user's user identifier and the registered user's personal authentication data, and registration. In the information processing apparatus, mutual authentication data with a data processing terminal used by a user is stored.

Furthermore, in one embodiment of the information processing apparatus of the present invention, the personal authentication data is biometric information.

Further, in one embodiment of the information processing apparatus of the present invention, the mutual authentication data with the data processing terminal is data necessary for applying either the common key authentication method or the public key authentication method. Is characterized by.

Further, according to a third aspect of the present invention, a data processing is executed, and an authentication processing is executed on a computer system to be executed between a server having registered user data and a data processing terminal connected to the server. It is a computer program that comprises a personal authentication processing step for the user by the data processing terminal, and a mutual authentication processing step between the server and the data processing terminal that is executed on condition that the personal authentication processing is established. And in a computer program.

Further, a fourth aspect of the present invention executes on a computer system an authentication process which executes data processing and is executed between a server having registered user data and a data processing terminal connected to the server. It is a computer program that comprises a mutual authentication processing step between the server and the data processing terminal, and a personal authentication processing step for the user by the server executed on condition that the mutual authentication processing is established. It is in a computer program.

The computer program of the present invention is, for example, a storage medium or communication medium provided in a computer-readable format for a computer system capable of executing various program codes, such as a CD or FD.
It is a computer program that can be provided by a recording medium such as an MO or a communication medium such as a network. By providing such a program in a computer-readable format, processing according to the program is realized on the computer system.

Still other objects, features and advantages of the present invention are as follows.
It will be clarified by a more detailed description based on embodiments of the present invention described below and the accompanying drawings. In this specification, the system is a logical set configuration of a plurality of devices, and is not limited to a device in which each configuration is provided in the same housing.

[0024]

DETAILED DESCRIPTION OF THE INVENTION The configuration of the present invention will be described in detail below with reference to the drawings. INDUSTRIAL APPLICABILITY The present invention executes data processing with a personal terminal such as an IC card, and enables secure authentication between the server, the personal terminal, and the user during communication processing between the server (information processing apparatus) having the registered user data. The configuration is presented.

[Outline of Description] In this embodiment, each user has a personal terminal (for example, an IC card) as a data processing terminal.
Shall be owned. The authentication process of the present invention is: Personal (user) authentication by personal terminal 2. Mutual authentication between personal terminal and server 3. It has three phases of individual (user) authentication by the server.

The security level can be improved by adopting the above authentication process form. That is, in the authentication processing configuration by the above process, in order for an unauthorized third party to successfully attempt to impersonate an individual, it is necessary to obtain both the information for personal (user) authentication and the information for personal terminal authentication. Because it will be necessary. Also,
Data on the network to the server is shared by sharing the encryption key (for example, session key) at the time of authentication between the personal terminal and the server, applying the encryption key, and encrypting the data communication for personal authentication after that. It is possible to prevent the leakage.
If data leaks, it is possible to easily impersonate the individual, but in this configuration, the transfer data in the communication network connecting the server and the communication terminal is encrypted, and the possibility of data leakage is reduced.

An embodiment of the present invention will be described. FIG. 1 shows a configuration example in the case of executing data processing using a personal terminal. It is assumed that the user receives the service from the server and receives the service. There are various services that can be used, such as the use of computer networks and terminals of a company or school, withdrawal of deposits from bank accounts, and online shopping.

The user owns, for example, an IC card as the personal terminal 101 which is a data processing terminal. The server 103 is an information processing device that executes data processing and has registered user data. Although it is desirable that the personal terminal 101 be directly connected to the server 103 via a communication interface, there are strong demands for cost reduction, power consumption reduction, downsizing, etc. of IC cards and the like, and direct communication with the server. It is possible that you cannot have an interface. In such a case, as shown in FIG. 1, the communication terminal 102 having a reader / writer function for the IC card and having a communication interface with the server 103 mediates communication between the personal terminal 101 as an IC card and the server 103. To do. The communication terminal 102 is, for example, a personal computer with an IC card reader, an ATM with a card reader, or the like.

[Configuration of Personal Terminal (Data Processing Terminal)] I
A configuration example of a personal terminal (data processing terminal) configured as a memory device such as a C card will be described with reference to FIG. As shown in FIG. 2, the personal terminal 200 has a CPU (Central
Processing unit) 201, and a communication interface 202 having an interface function for communication processing with an external device such as a reader / writer as a device access device,
A ROM (Read Onl) storing various programs executed by the CPU 201, such as an encryption processing program.
y Memory) 203, load area of execution program, RAM (Random Access Memory) 204 functioning as a work area in each program processing, authentication processing with external device, generation of electronic signature, verification processing, encryption of stored data, Cryptographic processing unit 2 that executes cryptographic processing such as decryption processing
05, card-specific information including various key data, that is, an identifier (Machine ID) of a personal terminal, data for performing personal terminal authentication (encryption key, etc.), and program-corresponding data such as an EEPROM (Electrically Erasab)
memory part 20 configured by a le Programmable ROM)
6, a display unit 207 such as an LCD, and an input unit 208 capable of inputting characters and numbers. The input unit 208 is
In addition to a keyboard for inputting numbers, for example, a fingerprint reading device is provided as a biometric information input unit, and the user's fingerprint can be read by touching the fingerprint reading device with the user's finger.

There are common key authentication in which the server and the terminal share the same encryption key for authentication, and public key authentication in which the authentication is performed using each individual encryption key.
The data (encryption key or the like) for performing the personal terminal authentication stored in is the common key shared with the server when the configuration is such that the common key authentication is performed. Further, in the case of the configuration for performing public key authentication, the data (encryption key or the like) for performing personal terminal authentication stored in the memory unit 206 is the private key and public key of the user. If the common key authentication and public key authentication are selectively executed, all of the common key required for common key authentication, the private key required for public key authentication, and the public key pair are stored in the memory section. It stores in 206.

[Configuration of Server (Information Processing Device) and Communication Terminal] Next, communication terminal 102 and server (information processing device) 1
A configuration example of No. 03 will be described. The communication terminal 102 needs to be provided with interface means capable of inputting / outputting data to / from a card to be set, but other configurations are as follows.
The server 103 and the communication terminal 102 are CPUs as control means
It can be realized by a similar data processing unit including a (Central processing Unit), for example, a data processing unit such as a PC.

FIG. 3 shows a configuration example of the communication terminal 102 and the server 103. The configuration example of the communication terminal 102 and the server 103 shown in FIG. 3 is one example, and the communication terminal 102 and the server 103 are not necessarily required to have all the functions shown here. CPU (Cen shown in FIG.
A tral processing unit) 301 is a processor that executes various application programs and an OS (Operating System). ROM (Read-Only-Memory) 302
Stores a program executed by the CPU 301 or fixed data as a calculation parameter. RAM (Ra
The ndom access memory) 303 is used as a storage area and a work area for programs executed in the processing of the CPU 301 and parameters that change appropriately in the program processing.

The HDD 304 controls the hard disk, and stores and reads various data and programs to and from the hard disk. Registered user information is stored in the hard disk, for example. The encryption processing means 305 executes encryption processing, decryption processing, authentication processing, etc. of transmission data. Here, an example in which the cryptographic processing means is an individual module is shown, but such an independent cryptographic processing module is not provided, and, for example, the cryptographic processing program is stored in the ROM 302, and the CPU 301 reads and executes the ROM storage program. It may be configured to do so. The memory (secure module) 306 is configured as a memory having a tamper resistant structure, for example, and can be used as a storage area for key data necessary for encryption processing, personal (user) authentication data, and an access permit. Note that these data can also be stored in another memory area or storage medium.

The bus 321 is a PCI (Peripheral Compone)
nt Internet / Interface) bus, etc., and enables data transfer with each module and each acquisition device via the input / output interface 322.

The input unit 311 is an input unit including, for example, a keyboard, a pointing device, and a card interface. When the input unit 311 detects that the card has been set, or when the input unit 311 is operated via a keyboard, a mouse, or the like, or
When the communication unit 313 receives data from the card, a command is input to the CPU 301, and the ROM (Read Only
The program stored in the memory 302 is executed. The output unit 312 is, for example, a CRT, a liquid crystal display, or the like, and displays various kinds of information by text or images.

The communication unit 313 communicates with the connected personal terminal, communication terminal, server, or other entity such as a service provider, database server, or the like.
Under the control of the CPU 301, the data supplied from each storage unit or the CPU is executed under the control of the CPU 301.
A process of transmitting data processed by 301, encrypted data, or the like, or receiving data from another entity is executed.

The drive 314 is a floppy (registered trademark) disc or a CD-ROM (Compact Disc Read Only).
Memory), MO (Magneto optical) disk, DVD (Dig
Ital Versatile Disc), a magnetic disk, a semiconductor memory, and the like, which is a drive for performing recording / reproduction of the removable recording medium 315. Reproduction of a program or data from each removable recording medium 315, removable recording medium 3
Execute program or data storage for 15.

When the program or data recorded in each storage medium is read and executed or processed by the CPU 301, the read program or data is supplied to, for example, the connected RAM 303 via the input / output interface 322 and the bus 321. To be done.

[Data Registration Processing] In the system of the present invention, in order to execute the authentication processing, it is necessary to previously register data necessary for the authentication processing. There are two types of data required for the authentication process: (1) data required for mutual authentication between the personal terminal and the server, and (2) data required for user authentication, that is, personal authentication.

(1) Mutual Authentication Data Registration Between Personal Terminal Servers First, the data registration processing required for mutual authentication between personal terminal servers will be described. The authentication processing method between devices includes a common key authentication method and a public key authentication method. It is possible to select which method is to be executed, but the registered data in each device varies depending on which method is executed. Each authentication method will be described with reference to the drawings.

FIG. 4 is a sequence diagram showing an example of the common key authentication method and showing mutual authentication and key sharing processing using a cryptographic check function (MAC).

In FIG. 4, the server A and the device B (for example, a personal terminal) that execute the authentication process have a common key Kab.
To store. It should be noted that the server A uses each common key Ka applied to the authentication of the plurality of mutual authentication devices C, D, E ....
c, Kad ... Are stored in the memory. Here, a mutual authentication process with one personal terminal (device B) will be described. First, the device B generates a random number Rb,
Send to server A. The symbol “||” in FIG. 4 represents a connection.

Next, the server A generates random numbers Ra and Sa, and MAC (Kab, Ra || Rb || S together with Ra and Sa.
Send a) to device B. MAC (Kab, Ra || Rb ||
Sa) uses Kab as a key for the cryptographic check function,
Indicates that Ra || Rb || Sa is input as data.
The cryptographic check function (MAC) can be configured using the Data Encryption Standard (DES) of FIPS 46-2 as shown in ISO / IEC 9797.

The device B itself calculates the MAC (Kab, Ra || Rb || Sa) using the received data and checks whether this matches the received one. If they match, the server A, which is the communication partner, recognizes that the server is legitimate and continues the processing, but if they do not match, it judges that the server A is invalid and stops the processing.

Next, the device B generates a random number Sb and sends it and the MAC (Kab, Rb || Ra || Sb) to the server A. Server A also uses the received data to MAC itself
(Kab, Rb || Ra || Sb) is calculated and it is confirmed whether or not it matches the received one. If they match, the device B, which is the communication partner, is recognized as valid and the processing is continued, but if they do not match, it is determined to be invalid and the processing is stopped. Finally,
Both sides compute MAC (Kab, Sa || Sb) and use this as the session key for the session.

By the above, the data transmitting / receiving devices can check the validity of each other and can securely share the session key.

FIG. 5 shows an authentication method using public key cryptography (IE
It is a sequence diagram showing C / ISO9798-3). In FIG. 5, the server A and the device B have their own public key (PubKey) and private key (PriKey), respectively. Also, each has a public key (PubKey) certificate (Cert). Public key certificate (Cert)
Is a certificate that stores the public key and certifies the validity of the public key. The signature is added with the private key of the certification authority (CA), and the validity can be verified by tampering check. ing. Public key of the certificate authority (PubKeyC) required for signature verification of the public key certificate
Each device has A).

Further, each device has a revocation list (Rev) and a registration list (Reg). The revocation list is also called an illicit list or a black list. For example, the ID of a device whose secret key has been exposed is listed up.
A digital signature of the center (key issuing institution) is added together with a monotonically increasing version number, and it is configured as a tamper-proof list. The registration list, also known as the legitimate list or registration list, is the ID of the device that is trusted at the time (no secret is revealed).
Are listed, and a digital signature of the center (key issuing institution) is given along with a monotonically increasing version number, and the list is configured as a falsification checkable list.

In FIG. 5, device B generates a random number Rb and sends it to server A. The server A generates a random number Ka, applies the elliptic curve cryptosystem, which is an algorithm of the public key cryptosystem, multiplies the system common point (base point) G and Ka on the elliptic curve E to obtain Va. The data (Ra || Rb || Va || RevVa || RegVa) calculated with the private key (PriKeyA) of its own, together with the signature (for example, IEEE1363) given to the public key certificate and other data ( CertA || Ra || Rb || Va) to device B.

The device B checks the validity of the public key certificate (CertA) of the server A and the validity of the signature. If the user stores the revocation list, the ID of the other party is not on the revocation list. If the user stores the registration list, the other party's ID is on the registration list. Make sure you are registered. If the above confirmation cannot be performed normally, the device B determines that the server A is an unauthorized person and ends the process. If the above confirmation is successful, the device B generates a random number Kb and performs the same calculation as that performed by the key issuing institution, and the public key certificate and other data (Ce
rtB || Rb || Ra || Vb) together with your private key (P
riKeyB) to obtain the data Rb || Ra || Vb || Re
The signature data applied to vVb || RegVb is sent to the server A.

After that, Ka and Vb in the server A and Kb and Va in the device B are respectively multiplied on the elliptic curve E to obtain the session key Ks.

By the method as described above, mutual authentication is performed between the content transmission side device and the content reception side device, and the session key Ks is held.

As described above, the registration data in the device that executes the authentication process differs depending on whether the common key authentication or the public key authentication method is executed.

(2) Data Registration for Personal Authentication Next, the data registration processing required for personal authentication will be described. In the server, in addition to the data required for personal terminal authentication described above, user-specific data required for personal authentication, that is, user authentication, is registered. The data registered at this time is biometric information of the user, such as fingerprint data, the password of the user, a set of questions to the user and their correct answers. These data are recorded together with the user identifier (User ID). Here, when a fingerprint is registered as data, it is registered as a set of a large number of data, such as the end points and branch points of each line (mountain) of the fingerprint. The question and the correct answer are, for example, the place of birth of the user? Or the maiden name of the user's mother?
A set of many questions that the user knows, but the probability that other people do not know so much, and the correct answers to them are set. In order to overcome the drawback that the authentication using the question and the answer is that it is easily spoofed once it is seen, as opposed to the individual authentication that was conventionally performed using a password or a PIN.
Basically, a different question is asked each time authentication is performed, and a different answer is requested, so that spoofing cannot be performed immediately even if a sneak peek is made.

Next, user data required for personal authentication is registered in the personal terminal. This registers the same data as that registered in the server together with the user's ID. At this time, new data may be registered, but a part of the above-mentioned data registered in the server may be registered in the personal terminal. For example, when the user's fingerprint is registered as m data in the server, n (<m) of them may be registered in the personal terminal.

Through the above processing, the server holds the personal terminal authentication data for authenticating each personal terminal and the personal authentication data for authenticating each user. Further, the personal terminal holds server authentication data for authenticating the server and personal authentication data as data for authenticating the user who owns the server.

[Authentication Process] Next, the authentication process executed in the system of the present invention will be described.
FIG. 6 shows a diagram for explaining the sequence of the authentication process.
The authentication process of the present invention comprises (1) personal authentication processing for the user by the personal terminal, (2) mutual authentication processing between the server and the personal terminal, and (3) personal authentication processing for the user by the server. . In addition, the above (2),
The process (3) is executed via the communication terminal connected between the server and the personal terminal. If the personal terminal has an interface applicable to communication with the server, it may be executed between the server and the personal terminal. Hereinafter, each process will be described.

(1) Personal Authentication Process for User by Personal Terminal First, the user operates his personal terminal. At this time, the personal terminal executes personal authentication for the user.

The personal authentication process for the user by the personal terminal is executed based on the personal authentication data registered in the personal terminal. For example, if the user's password is registered as personal authentication data on the personal terminal, the terminal inputs the password to the personal terminal, and only when the correct password is input, the terminal performs subsequent processing, for example, with the server. To communicate.

Further, for example, when the user's fingerprint data is registered as personal authentication data in the personal terminal,
When the user touches the fingerprint reading unit configured in the input unit of the personal terminal with the user's finger, the personal terminal reads the user's fingerprint and verifies whether the personal data matches the registered data to perform personal authentication processing. To execute. Only when the authentication is successful, the personal terminal executes subsequent processing, for example, communication with the server.

(2) Mutual Authentication Process Between Server and Personal Terminal Next, the personal terminal and the server perform mutual authentication and key exchange, provided that personal authentication of the user by the personal terminal is established. This is performed by executing the mutual authentication and key exchange processing of the above-mentioned common key method or public key method. The data required for the authentication method to be executed on the personal terminal and the server, that is, the common key for the common key method authentication, the public key, the private key pair, the public key certificate for the public key authentication method, The revocation list, registration list, and public key of the certificate authority are stored.

Between the server and the personal terminal, common key method or public key method mutual authentication and key exchange processing are executed, and when the authentication is established, the session key as the encryption processing key of the subsequent communication data is shared. can do.

(3) Personal authentication processing for the user by the server Finally, the personal authentication process for the user by the server is executed on condition that the authentication between the server and the personal terminal is established. The personal authentication process by the server is executed based on the personal authentication data registered in the server.

For example, when the fingerprint data of the registered user is registered in the server as personal authentication data in association with the user ID, the user again inputs the fingerprint to the personal terminal, and the personal terminal transmits to the server. The input data can be transmitted to the server and executed as a process of confirming whether the data matches the data registered in advance in the server.

Alternatively, when personal information (for example, place of birth, address, name of relative, etc.) of a registered user is registered in the server as personal authentication data in association with the user ID, the server notifies the user to the user. , Present some of the questions registered in advance, the user answers the question using the input device of the personal terminal, sends it to the server, and the server judges whether the registered data match. It is executed as a process.

As described above, the personal authentication process for the user by the server is executed based on the personal authentication data registered in the server. The user is specified by transmitting a user ID (User ID) registered in the personal terminal in advance from the personal terminal to the server. In addition, the ID of the personal terminal and the user ID (UserI
D) Corresponding data is stored and the user is identified based on the personal terminal ID transmitted from the personal terminal to identify the user.
May be selected to extract the personal authentication data associated with the user ID.

In either direction, the communication between the personal terminal and the server is encrypted based on the session key shared in the authentication between the personal terminal and the server in the above (2), and the data transfer is performed. It is executed to prevent data leakage. By using the session key, even if the communication path is eavesdropped, data for authenticating an individual such as fingerprint data or a question and its response is not leaked, so that the safety is improved.

The server starts providing the service to the user on condition that all the authentications constituted by the respective phases (1), (2) and (3) have been established.

FIG. 7 shows a flow chart summarizing the above-mentioned authentication processing sequence. Each step in FIG. 7 will be described. In step S101, the user activates the personal terminal,
Authentication data for user authentication by the personal terminal is input to the personal terminal, and the personal terminal executes personal authentication of the user in step S102. This process corresponds to the above-mentioned (1) personal authentication process for the user by the personal terminal. This authentication processing is executed based on the personal authentication data stored in the personal terminal. The personal authentication data is, for example, a password or fingerprint data.

Next, in step S103, authentication and key sharing between the personal terminal and the server are executed. This corresponds to the above-mentioned (2) mutual authentication processing between the server and the personal terminal. This process is executed according to the mutual authentication algorithm of the common key system or the public key system as described above, and the server and the personal terminal share the session key based on the establishment of the authentication.

Next, in step S104, authentication data for user authentication by the server is input to the personal terminal, and in step S105 the personal authentication data is transferred from the personal terminal to the server, and in step S106. , Execute user authentication by the server. This corresponds to the personal authentication process for the user by the server (3) described above. This authentication processing is executed based on the personal authentication data stored in the server. The personal authentication data is, for example, fingerprint data or user personal information. When these are input by the user and transferred from the personal terminal to the server, they are encrypted with the session key generated in the mutual authentication process between the server and the personal terminal.

[Authentication Processing Process Example 2] In the above-described authentication processing process example, an example has been described in which individual personal authentication data is used in the personal authentication process for the user by the personal terminal and the server. In this case, the user needs to input personal authentication data in the personal authentication process of each device (personal terminal and server). In the following, as the authentication process example 2,
An example will be described in which personal authentication data is input only once by a user and personal authentication is executed in each device (personal terminal and server). In this example, an example will be described in which fingerprint data is used as authentication data in both the personal terminal and the server.

Also in the present embodiment, the authentication process is as follows: (1) personal authentication process for the user by the personal terminal (2) mutual authentication process between the server and the personal terminal (3) personal authentication process for the user by the server It consists of 3 phases. In addition, the above (2),
The process (3) is executed via the communication terminal connected between the server and the personal terminal. If the personal terminal has an interface applicable to communication with the server, it may be executed between the server and the personal terminal. Hereinafter, each process will be described.

(1) Personal Authentication Processing for User by Personal Terminal Fingerprint data of the user is registered as personal authentication data in the personal terminal. The user brings his / her finger into contact with the fingerprint reading unit formed in the input unit of the personal terminal,
Enter fingerprint data into your personal device. The personal terminal reads the user's fingerprint, verifies whether it matches the registration data, and executes personal authentication processing. Only when the authentication is successful, the personal terminal executes subsequent processing, for example, communication with the server.

(2) Mutual Authentication Process Between Server and Personal Terminal Next, the personal terminal and server perform mutual authentication and key exchange, provided that personal authentication of the user by the personal terminal is established. This is performed by executing the mutual authentication and key exchange processing of the above-mentioned common key method or public key method. The data required for the authentication method to be executed on the personal terminal and the server, that is, the common key for the common key method authentication, the public key, the private key pair, the public key certificate for the public key authentication method, The revocation list, registration list, and public key of the certificate authority are stored.

Between the server and the personal terminal, common key system or public key system mutual authentication and key exchange processing are executed, and when the authentication is established, the session key as an encryption processing key for the subsequent mutual communication data is shared. can do.

(3) Personal Authentication Processing for User by Server The server finally executes the personal authentication process for the user by the server, provided that the authentication between the server and the personal terminal is established. The personal authentication process by the server is executed based on the personal authentication data registered in the server.

In the above-mentioned example, the server newly requests the user to input the data necessary for the personal authentication processing executed by the server, but in this example, the personal terminal by the personal terminal executed previously is used. The fingerprint data acquired from the user at the time of authentication is transmitted from the personal terminal to the server. This data transmission is performed by encrypting with the session key shared during the mutual authentication between the personal terminal and the server.

The server registers the fingerprint data of the registered user as the personal authentication data in association with the user ID, and at least a part of the fingerprints of the user read by the personal authentication process of the personal terminal (for example, the personal fingerprint). (Data not used by the data terminal) is sent to the server and it is confirmed whether the data matches the data registered in advance in the server.

In this example, the personal authentication process for the user by the server is performed by acquiring the personal authentication data (fingerprint data) input by the user from the personal terminal at the time of personal authentication of the user of the personal terminal, and acquiring the acquired data. And execute based on the personal authentication data registered in the server.
Therefore, the user can input the personal authentication data only once.

In either direction, the communication between the personal terminal and the server is encrypted based on the session key shared in the authentication between the personal terminal and the server in (2) above, and the data transfer is performed. It is executed to prevent data leakage. By the encryption using the session key, even if the communication path is eavesdropped, personal authentication data such as fingerprint data is not leaked, and the safety is improved. The server starts providing the service to the user on condition that all the authentications constituted by the phases (1), (2), and (3) have been established.

FIG. 9 shows a flow chart summarizing the above-mentioned authentication processing sequence. Each step of FIG. 9 will be described. In step S201, the user activates the personal terminal,
Authentication data for user authentication by the personal terminal is input to the personal terminal, and the personal terminal executes personal authentication of the user in step S202. This process corresponds to the above-mentioned (1) personal authentication process for the user by the personal terminal. This authentication processing is executed based on the personal authentication data stored in the personal terminal. The personal authentication data is, for example, fingerprint data.

Next, in step S203, authentication and key sharing between the personal terminal and the server are executed. This corresponds to the above-mentioned (2) mutual authentication processing between the server and the personal terminal. This process is executed according to the mutual authentication algorithm of the common key system or the public key system as described above, and the server and the personal terminal share the session key based on the establishment of the authentication.

Next, in step S204, authentication data for user authentication by the server is transferred from the personal terminal to the server. This data is obtained in step S201.
All or part of the personal authentication input data in the personal terminal of. In step S205, the server performs user authentication based on the user input data received from the personal terminal. This corresponds to the personal authentication process for the user by the server (3) described above. This authentication processing is executed based on the personal authentication data stored in the server. The personal authentication data is, for example, fingerprint data. Transfer data from the personal terminal to the server is encrypted with the session key generated in the mutual authentication process between the server and the personal terminal.

As is apparent from the description of the processing flow, in this example, the personal authentication processing for the user by the server is based on the personal authentication data (fingerprint data) input by the user at the time of personal authentication for the user of the personal terminal. The personal authentication data can be input only once by the user.

In the personal authentication processing by the server and the personal authentication processing by the personal terminal, it is necessary to register registration data for personal authentication in the server and the personal terminal in advance. For example, when using fingerprint data for personal authentication, it is necessary to register the fingerprint data in advance in each of the server and the personal terminal.

This registration processing may be performed individually for the server and the personal terminal, but when the authentication process using the common fingerprint data is executed by both the server and the personal terminal as in the above-described processing example. The registration data can also be shared by the server and the personal terminal, or can be divided and held.

FIG. 10 shows a flow for explaining a data registration processing process in the case where the server and the personal terminal divide and share the personal authentication data. Each step will be described.

First, in step S301, the user registers personal authentication data in the server. This is executed as a process of registering, for example, fingerprint data together with a user ID in a specific trusted server connection device. It is assumed that 1000 pieces of characteristic point data of fingerprint data of registered users are registered in the server.

Next, in step S302, the server executes mutual authentication processing with the user's personal terminal.
This authentication processing is mutual authentication processing by the common key method or the public key method described above, and the session key is shared as a result of the authentication.

When the authentication is established and the session key is successfully shared, the server session-processes at least a part of the personal authentication registration data of the user registered in step S301, for example, 300 data of fingerprint feature point data. Encrypt with a key and transfer to a personal terminal. The personal terminal is
The received data is decrypted, re-encrypted with a storage key or the like held in advance as necessary, and stored in its own memory. When the personal terminal executes the personal authentication process for the user, the personal terminal acquires the registration data stored in the memory and executes collation with new fingerprint data input by the user.

As described above, the server and the personal terminal are configured to share or divide and hold the registration data used for personal authentication, so that the user can register the personal authentication data only once. You're done.

The present invention has been described in detail above with reference to the specific embodiments. However, it is obvious that those skilled in the art can modify or substitute the embodiments without departing from the scope of the present invention. The present invention has been disclosed in the embodiments by way of example, and should not be construed as limiting. In order to determine the gist of the present invention, the section of the claims described at the beginning should be taken into consideration.

[0094]

As described above, in the configuration of the present invention, in the configuration in which the personal terminal is used to perform the connection to the server, the authentication process includes (1) personal authentication processing for the user by the personal terminal; If a fraudulent person tries to impersonate a user by using the three-step process of (2) mutual authentication between the server and the personal terminal, and (3) personal authentication of the user by the server, You need both the information (password, fingerprint data, correct answer to the question) for the server to pass the authentication as the user, as well as the information (for example, the encryption key) for the personal terminal to pass the authentication to the server. As a result, it becomes difficult for an unauthorized third party to impersonate, and the security is improved.

Further, according to the configuration of the present invention, the data for user authentication is encrypted and communicated based on the session key shared when the authentication is performed between the personal terminal and the server. Therefore, it is possible to effectively prevent leakage of important information via the network.

Further, according to the configuration of the present invention, the user needs to perform the personal authentication process on the personal terminal and the server, but the personal authentication input data accumulated in the personal terminal is input to the server. The data transfer by the user can be performed only once by the user.

Further, according to the configuration of the present invention, regarding the data to be registered in advance as the reference data for personal authentication,
By performing the data registration process only on the server and transferring a part of the registration data to the personal terminal for registration, the need for double data registration process is eliminated.

[Brief description of drawings]

FIG. 1 is a diagram illustrating an outline of an authentication processing configuration according to the present invention.

FIG. 2 is a diagram showing a configuration of a personal terminal according to the present invention.

FIG. 3 is a diagram showing configurations of a server and a communication terminal according to the present invention.

FIG. 4 is a diagram illustrating a mutual authentication processing sequence based on a common key method.

FIG. 5 is a diagram illustrating a mutual authentication processing sequence based on a public key method.

FIG. 6 is a diagram illustrating an authentication processing sequence of the present invention.

FIG. 7 is a diagram showing a processing flow of authentication processing of the present invention.

FIG. 8 is a diagram illustrating an authentication processing sequence (example 2) of the present invention.

FIG. 9 is a diagram showing a processing flow (example 2) of the authentication processing of the present invention.

FIG. 10 is a diagram showing a data registration process flow in the case where the server and the personal terminal divide and share the personal authentication data.

[Explanation of symbols]

101 Personal terminal 102 communication terminal 103 server 200 personal terminals 201 CPU 202 Communication I / F 203 ROM 204 RAM 205 Cryptographic processing unit 206 memory 207 Output section 208 Input section 301 CPU 302 ROM 303 RAM 304 HDD 305 Cryptographic processing means 306 memory 311 input section 312 Output section 313 Communication unit 314 Drive 315 Removable recording medium 321 bus 322 I / O interface

Continuation of front page (51) Int.Cl. ⁷ Identification code FI theme code (reference) H04L 9/32 H04L 9/00 675B G06K 19/00 SR

Claims (13)

[Claims] 1. An authentication processing method for executing data processing between a server having registered user data and a data processing terminal connected to the server, comprising: a personal authentication processing step for the user by the data processing terminal; An authentication processing method characterized by executing three authentication processing steps: a mutual authentication processing step between the server and the data processing terminal, and a personal authentication processing step for the user by the server. 2. The mutual authentication processing step between the server and the data processing terminal is executed on condition that the personal authentication processing for the user by the data processing terminal is established, and the personal authentication processing step for the user by the server is the server. The authentication processing method according to claim 1, wherein the authentication processing is performed on condition that mutual authentication processing is established between the data processing terminal and the data processing terminal. 3. The mutual authentication processing step between the server and the data processing terminal is executed in accordance with a common key method or public key method mutual authentication processing and a session key sharing processing algorithm. The data transferred from the data processing terminal to the server as authentication data is transferred as encrypted data by the session key.
Authentication processing method described in. 4. The personal authentication data applied in the personal authentication processing step for the user by the data processing terminal is stored data unique to the data processing terminal, and the personal authentication data applied in the personal authentication processing step for the user by the server. Is the stored data unique to the server, and the authentication processing method according to claim 1. 5. The personal authentication data applied in the personal authentication processing step for the user by the data processing terminal, and the registered personal authentication data referred to in the personal authentication processing step for the user by the server are 1 by the user. It is registered in either the server or the data processing terminal by the registration process once, and after mutual authentication processing between the server and the data processing terminal,
2. The registered personal authentication data is encrypted and transferred between a server and a data processing terminal, and the registered personal authentication data is shared or divided between both the server and the data processing terminal. Authentication processing method. 6. The user input personal authentication data in the user personal authentication processing step by the data processing terminal is applied in the user personal authentication processing step by the server, and the user input personal authentication data is the server and data. The authentication processing method according to claim 1, wherein after the mutual authentication processing between the processing terminals, the data processing terminal transfers the data as encrypted data using a session key to the server. 7. The authentication processing method according to claim 1, wherein the personal authentication data applied to the personal authentication processing step for the user by the data processing terminal is biometric information. 8. The authentication processing method according to claim 1, wherein the personal authentication data applied to the personal authentication processing step for the user by the server is biometric information. 9. An information processing apparatus for executing data processing and having registered user data, comprising: correspondence data between a registered user's user identifier and registered user's personal authentication data; and a data processing terminal used by the registered user. An information processing device characterized by storing mutual authentication data and. 10. The information processing apparatus according to claim 9, wherein the personal authentication data is biometric information. 11. The mutual authentication data with the data processing terminal is data necessary for applying either a common key authentication method or a public key authentication method.
The information processing device according to 1. 12. A computer program for executing an authentication process on a computer system, the authentication process being executed between a server having registered user data and a data processing terminal connected to the server. A computer program comprising: a personal authentication processing step for a user by a processing terminal; and a mutual authentication processing step between a server and a data processing terminal which is executed on condition that the personal authentication processing is established. 13. A computer program for executing an authentication process on a computer system for executing a data process and executing between a server having registered user data and a data processing terminal connected to the server. And a mutual authentication processing step between the data processing terminals, and a personal authentication processing step for the user by the server executed on condition that the mutual authentication processing is established.