JP2005026842A - Service providing system, service providing server, apparatus authenticating method and program, storage medium, terminal, apparatus authenticating server, public key check information updating method, and program and method of manufacturing terminal - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To disperse the functions for authenticating an apparatus to reduce the concentration of the apparatus authenticating loads. <P>SOLUTION: A CE apparatus 9 previously stores a digital certificate and sends it to a service providing server 7. The CE certificate includes a public key corresponding to a private key the CE apparatus 9 holds. The service server 7 checks the truth of the digital certificate and then encrypts a session key with the public key contained therein. The service server 7 sends the encrypted session key to the CE apparatus 9, and the CE apparatus 9 confirms that it is decoded by the private key, thereby authenticating the CE apparatus 9. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to a device authentication system and the like, and more particularly to a device authentication performed by each service server by using a digital certificate.
[0002]
[Prior art]
In recent years, the spread of CE (Consumer Electronics) equipment has been spreading. A CE device is a device that has a built-in computer in an audio-visual device such as a video deck, stereo, or TV, a household appliance such as a rice cooker or a refrigerator, or other electronic devices, and can use services via a network. is there.
For this reason, device authentication information for device authentication is built in the CE device, and the service server that provides the service provides the CE device with the service after performing device authentication on the device authentication server. It is configured.
[0003]
FIG. 10 is a diagram illustrating an example of a configuration of a conventional service providing system.
The service servers 107, 107,... Are server devices that provide services to the CE device 109.
When receiving the service from the service servers 107, 107,..., The CE device 109 first authenticates the device with the device authentication server 105, and transmits the device authentication result to the service servers 107, 107,.
[0004]
On the other hand, the service servers 107, 107,... Inquire the device authentication server 105 about the device authentication result in order to check whether the device authentication result received from the CE device 109 is correct. If the device authentication result is confirmed to be correct, the service servers 107, 107,... Provide a service to the CE device 109.
As described above, the invention in which the authentication server authenticates the client includes the following.
The invention disclosed in this document performs user authentication using a public key / private key pair.
[0005]
[Patent Document 1] Japanese Patent Laid-Open No. 2001-236321
[0006]
In the present invention, first, the client side owns the secret key, and the authentication server side owns the public key corresponding to the user.
Then, the random number (code) generated in the authentication server is encrypted with the public key and then transmitted to the client. Then, the client is authenticated by judging whether or not the encrypted random number can be correctly decrypted with the secret key.
[0007]
In the present invention, the public key that is paired with the secret key is collectively managed by a specific server device.
Therefore, it is not always efficient as an authentication method for CE devices that are marketed in large quantities and are produced and discarded every day.
This is because, in the present invention, the public key that is collectively managed must be updated each time as the CE device is produced, discarded, or the owner is transferred. It is.
[0008]
[Problems to be solved by the invention]
However, the conventional service providing system has a problem that device authentication is concentrated on the device authentication server 105.
For this reason, a load may be concentrated on the device authentication server 105, and it may be difficult to perform device authentication efficiently.
[0009]
Therefore, an object of the present invention is to reduce the concentration of device authentication load by distributing the device authentication function.
[0010]
[Means for Solving the Problems]
To achieve the above object, the present invention provides a service providing system including a terminal device and a service providing server that authenticates the terminal device and provides a service, the terminal device including a secret key, A public key paired with the private key, and public key confirmation information issued by the device certification authority used to confirm that the public key is authorized by a predetermined device certification authority, And storing the stored public key and public key confirmation information to the service providing server when the service providing server requests the service providing server to provide the service, and the service providing server transmits the public key Confirming that the public key is recognized by the device certification authority using confirmation information, and encrypting secret information obtained by encrypting secret information with the confirmed public key. The service providing server indicates that the terminal device has decrypted the secret information using the secret information obtained by decrypting the encrypted secret information using the secret key. Generating decryption confirmation information for confirmation, transmitting the generated decryption confirmation information to the service providing server,
The service providing system uses the decryption confirmation information to confirm that the secret information has been decrypted from the encrypted secret information by the terminal device, and provides a service. (First configuration).
The present invention is also a service providing server that provides a service after device authentication of a terminal device, wherein the terminal device has a secret key, a public key that is paired with the secret key, and the public key is a predetermined key. Public key confirmation information used for confirming that the device is authorized by the device certification authority, and receiving the public key and the public key confirmation information from the terminal device A key receiving means, a public key confirmation means for confirming that the received public key is recognized by the device authentication authority using the received public key confirmation information, and a public key for confirming secret information. An encrypted secret information transmitting means for transmitting the encrypted secret information encrypted using the terminal device, and confirming from the terminal device that the secret information has been decrypted from the transmitted encrypted secret information. Decryption confirmation information receiving means for receiving the decryption confirmation information for, and using the received decryption confirmation information, the decryption confirmation means for confirming that the secret information has been decrypted in the terminal device, (2nd structure) is provided.
In the second configuration, the secret information is a common key that is shared by the terminal device and the service providing server, and the encrypted code information is generated by encrypting the code information with the common key. The encryption secret information transmission means transmits the code information together with the transmission of the encryption secret information to the terminal device, and the decryption confirmation information reception means uses the transmitted common key. Encrypted code information obtained by encrypting the code information is received as decryption confirmation information from the terminal device, and the decryption confirmation means is generated by the received decryption confirmation information and the encrypted code information generation means. By determining the identity with the encryption code information, it can be configured to confirm that the transmitted encrypted secret information has been decrypted (third configuration).
In the second configuration, a server public key, a server public key paired with the server private key, and a server public key used for confirming that the server public key has been approved by a predetermined device authentication authority. A key information storing means for storing key confirmation information, a server public key transmitting means for transmitting the stored server public key and the server public key confirmation information to the terminal device, and the terminal device, A second encrypted secret information receiving means for receiving the second encrypted secret information transmitted corresponding to the transmitted server public key, and decrypting the received second secret information by the server secret key. Second code information decrypting means for decrypting the second code information from the encrypted secret information; and second code information transmitting means for transmitting the decrypted second code information to the terminal device. Ingredients It can be configured to (a fourth configuration).
In the fourth configuration, the secret information is a common key to be shared by the terminal device and the service providing server, and the second code information decrypting means stores the received second encrypted secret information. By decrypting with the server secret key and the common key, the second code information can be decrypted (fifth configuration).
The present invention relates to a device authentication method performed by a service providing server that provides a service after device authentication of a terminal device, the service providing server including a public key receiving unit, a public key confirmation unit, and encrypted secret information A transmission means, a decryption confirmation information receiving means, and a decryption confirmation means, wherein the terminal device includes a secret key, a public key that forms a pair with the secret key, and the public key is a predetermined device authentication authority. And the public key confirmation information used for confirming that it is authorized by the public key receiving means, and the public key receiving means receives the public key and the public key confirmation information from the terminal device. A public key receiving step for receiving, and a public key confirmation step for confirming by the public key confirmation means that the received public key is approved by the device certification authority using the received public key confirmation information. And the encrypted secret information transmitting step of transmitting the encrypted secret information obtained by encrypting the secret information using the confirmed public key to the terminal device by the encrypted secret information transmitting means, from the terminal device, A decryption confirmation information receiving step for receiving, in the decryption confirmation information receiving means, decryption confirmation information for confirming that the secret information has been decrypted from the transmitted encrypted secret information; and the received decryption There is provided a device authentication method comprising: a decryption confirmation step for confirming that the secret information has been decrypted in the terminal device by the decryption confirmation means using confirmation information. (Sixth configuration).
In the sixth configuration, the secret information is a common key to be shared by the terminal device and the service providing server, and the device authentication method is encrypted code information generation means, and the code information is the common key. An encrypted code information generation step for generating encrypted code information by encryption, and in the encrypted secret information transmission step, the code information is transmitted to the terminal device together with the transmission of the encrypted secret information, In the decryption confirmation information receiving step, encrypted code information obtained by encrypting the code information with the transmitted common key is received from the terminal device as decryption confirmation information. In the decryption confirmation step, the received decryption information is received. By determining the identity between the confirmation information and the encrypted code information generated by the encrypted code information generating means, the transmitted encrypted secret information Can be configured to verify that the decoded (seventh configuration).
In the sixth configuration, the service providing server confirms that a server private key, a server public key paired with the server private key, and the server public key are those approved by a predetermined device authentication authority Key information storage means for storing server public key confirmation information to be used, server public key transmission means, second encrypted secret information reception means, second code information decryption means, A server public key transmitting step, wherein the server public key transmitting unit transmits the stored server public key and the server public key confirmation information to the terminal device; and A second encrypted secret information receiving step in which the device receives the second encrypted secret information transmitted in response to the transmitted server public key by the second encrypted secret information receiving means; A second code information decrypting step of decrypting the second code information from the received second encrypted secret information by decrypting with the server secret key by the second code information decrypting means. And a second code information transmitting step for transmitting the decoded second code information to the terminal device by the second code information transmitting means (eighth) Constitution).
In the eighth configuration, the secret information is a common key that is shared by the terminal device and the service providing server. In the second code information decrypting step, the received second encrypted secret information is received. Can be configured to decrypt the second code information by decrypting with the server secret key and the common key (ninth configuration).
Further, the present invention is a device authentication program for realizing a device authentication function by a service providing server configured by a computer that provides a service after device authentication of a terminal device, wherein the terminal device includes a secret key, A public key paired with a private key, and public key confirmation information used for confirming that the public key is authorized by a predetermined device certification authority, and storing from the terminal device, The public key receiving function for receiving the public key and the public key confirmation information, and using the received public key confirmation information, confirm that the received public key is approved by the device authentication authority. From the terminal device, a public key confirmation function, an encrypted secret information transmission function for transmitting encrypted secret information obtained by encrypting secret information using the confirmed public key, to the terminal device, Using the decryption confirmation information receiving function for receiving the decryption confirmation information for confirming that the secret information has been decrypted from the received encrypted secret information, and using the received decryption confirmation information, the terminal device Provides a device authentication program for realizing a decryption confirmation function for confirming that the secret information has been decrypted by a computer (tenth configuration).
In the tenth configuration, the secret information is a common key that is shared by the terminal device and the service providing server, and encrypted code information that encrypts code information with the common key and generates encrypted code information The code function is transmitted together with the transmission of the encrypted secret information to the terminal device by the encrypted secret information transmission function, and the transmitted common key is transmitted by the decryption confirmation information reception function. Encrypted code information obtained by encrypting the code information is received from the terminal device as decryption confirmation information, and is generated by the decryption confirmation function using the received decryption confirmation information and the encrypted code information generation function. By determining the identity with the encryption code information, it can be configured to confirm that the transmitted encrypted secret information has been decrypted (first). 1 configuration).
In the tenth configuration, a server public key used to confirm that a server private key, a server public key paired with the server private key, and the server public key are recognized by a predetermined device authentication authority A key information storage function for storing key confirmation information, a server public key transmission function for transmitting the stored server public key and the server public key confirmation information to the terminal device, and the terminal device includes: A second encrypted secret information receiving function for receiving the second encrypted secret information transmitted corresponding to the transmitted server public key, and the received second encrypted secret information by decrypting with the server secret key. A second code information decoding function for decoding the second code information from the encrypted secret information; and a second code information transmission function for transmitting the decrypted second code information to the terminal device. It can be configured to be realized by computer (12 configuration).
In the twelfth configuration, the secret information is a common key shared by the terminal device and the service providing server, and the received second encrypted secret information is received by the second code information decryption function. Can be configured to decrypt the second code information by decrypting with the server secret key and the common key (13th configuration).
In addition, the present invention is a storage medium storing a device authentication program for realizing a device authentication function in a service providing server configured by a computer that provides a service after device authentication of the terminal device, and the terminal device includes: Storing a secret key, a public key paired with the secret key, and public key confirmation information used to confirm that the public key is approved by a predetermined device authentication authority, A public key receiving function for receiving the public key and the public key confirmation information from the terminal device, and the received public key approved by the device certification authority using the received public key confirmation information. A public key confirmation function for confirming that it is, an encrypted secret information transmission function for transmitting encrypted secret information obtained by encrypting secret information using the confirmed public key to the terminal device, and Using a decryption confirmation information reception function for receiving decryption confirmation information for confirming that the secret information has been decrypted from the transmitted encrypted secret information from a terminal device, and using the received decryption confirmation information And a decryption confirmation function for confirming that the secret information is decrypted in the terminal device, and a computer-readable storage medium storing a device authentication program that realizes the computer (fourteenth configuration). ).
The present invention also provides a secret key storing means for storing a secret key, a public key paired with the secret key, and confirming that the public key is approved by a predetermined device authentication authority. Public key storage means for storing public key confirmation information to be used, and a public key for transmitting the stored public key and public key confirmation information to the service providing server when requesting the service providing server to provide the service A key transmitting means, an encrypted secret information receiving means for receiving the encrypted secret information returned from the service providing server in response to the transmitted public key and public key confirmation information, and the received encrypted secret. Decryption confirmation information for confirming that the service providing server has decrypted the secret information by using decryption means for decrypting information with the secret key and the decrypted secret information There is provided a terminal device comprising: decryption confirmation information generating means for generating; and decryption confirmation information transmitting means for transmitting the generated decryption confirmation information to the service providing server (fifteenth aspect). Constitution).
In the fifteenth configuration, the secret information is a common key that is shared by the terminal device and the service providing server, and the encrypted secret information receiving means is configured to send the encrypted secret information together with the encrypted secret information from the service providing server. The decryption confirmation information generated by the decryption confirmation information generation unit that receives the code information can be configured to be encrypted code information generated by encrypting the received code information with the common key. (Sixteenth configuration).
In the fifteenth configuration, the service providing server confirms that a server private key, a server public key paired with the server private key, and the server public key are those approved by a predetermined device authentication authority Server public key confirmation information for use in storage, server public key receiving means for receiving the server public key and the server public key confirmation information from the service providing server, and the received server Server public key confirmation means for confirming that the received server public key is authorized by the device certification authority using public key confirmation information, and a second code using the confirmed server public key Second encrypted secret information generating means for generating second encrypted secret information from the information, and transmitting the generated second encrypted secret information to the service providing server Second encrypted secret information transmitting means and a second decryption confirmation for confirming that the service providing server has decrypted the second code information from the transmitted second encrypted secret information The second encrypted secret information transmitted by the service providing server using the second decryption confirmation information receiving means for receiving information from the service providing server and the received second decryption confirmation information To a second decoding confirmation means for confirming that the second code information has been decoded (a seventeenth configuration).
In the seventeenth configuration, the secret information decrypted by the decryption means is a common key for the terminal device and the service providing server to share, and the second encrypted secret information generation means The second code information can be configured to be encrypted with the common key and the server public key (eighteenth configuration).
In the fifteenth configuration, an update request transmitting unit that transmits an update request for the public key confirmation information to a device authentication server that updates the public key confirmation information stored in the terminal device, and for the transmitted update request, Update public key confirmation information receiving means for receiving updated public key confirmation information transmitted from the device authentication server and used to confirm that the public key is authorized by a predetermined device authentication authority; and the reception Updating means for updating the stored public key confirmation information using the updated public key confirmation information;
(19th configuration).
In the fifteenth configuration, the secret information and the decryption means may be stored in a tamper resistant device (twentieth configuration).
The present invention also provides a secret key storing means for storing a secret key, a public key paired with the secret key, and confirming that the public key is approved by a predetermined device authentication authority. Public key storage means for storing public key confirmation information to be used, public key transmission means, encrypted secret information reception means, decryption means, decryption confirmation information generation means, decryption confirmation information transmission means, The device authentication method is performed by a terminal device including: when the service providing server is requested to provide a service, the stored public key and public key confirmation information are stored in the service by the public key transmitting unit. A public key transmitting step for transmitting to the providing server, and receiving the encrypted secret information returned from the service providing server in correspondence with the transmitted public key and public key confirmation information by the encrypted secret information receiving means Using the secret key, the decryption step for decrypting the received encrypted secret information with the secret key, and the service providing server using the decrypted secret information. The decryption confirmation information generating means generates decryption confirmation information for confirming that the secret information has been decrypted by the decryption confirmation information generating means, and the generated decryption confirmation information is decrypted. A device authentication method comprising a decryption confirmation information transmitting step for transmitting to the service providing server by an information transmitting means is provided (21st configuration).
In the twenty-first configuration, the secret information is a common key that is shared by the terminal device and the service providing server. In the encrypted secret information receiving step, the secret information is sent from the service providing server together with the encrypted secret information. The decryption confirmation information generated by receiving the code information and generated in the decryption confirmation information generating step can be configured to be encrypted code information generated by encrypting the received code information with the common key. (Twenty-second configuration).
In the twenty-first configuration, the service providing server confirms that a server private key, a server public key paired with the server private key, and the server public key are those approved by a predetermined device authentication authority. Server public key confirmation information used in the above-described process, and the terminal device includes a server public key reception unit, a server public key confirmation unit, a second encrypted secret information generation unit, and a second decryption unit. A server for receiving the server public key and the server public key confirmation information from the service providing server by the server public key receiving unit. The server public key confirmation step confirms that the received server public key is recognized by the device authentication authority using the received server public key confirmation information. A server public key confirming step for confirming by means, and a second encrypted secret information generating means for generating second encrypted secret information from the second code information by using the confirmed server public key. And a second encrypted secret information transmission step of transmitting the generated second encrypted secret information to the service providing server by the second encrypted secret information transmitting means. The second decryption confirmation information is used as second decryption confirmation information for confirming that the second code information is decrypted from the transmitted second encrypted secret information by the service providing server. The receiving means uses the second decryption confirmation information receiving step received from the service providing server and the received second decryption confirmation information to transmit the second decryption confirmation information received at the service providing server. A second decryption confirmation step for confirming by the second decryption confirmation means that the second code information has been decrypted from the encrypted secret information. (23rd structure).
In the twenty-third configuration, the secret information decrypted in the decryption step is a common key shared by the terminal device and the service providing server, and in the second encrypted secret information generation step, The second code information can be configured to be encrypted with the common key and the server public key (24th configuration).
In the twenty-first configuration, the update request transmitting unit, an update public key confirmation information receiving unit, and an updating unit are provided, and the update request transmitting unit is included in a device authentication server that updates public key confirmation information stored in a terminal device. An update request transmission step of transmitting an update request for the public key confirmation information in step (b), and a public key of the terminal device transmitted by the device authentication server in response to the transmitted update request is recognized by a predetermined device authentication authority. Using the updated public key confirmation information receiving step for receiving the updated public key confirmation information used by the updated public key confirmation information receiving means, and the received updated public key confirmation information. Then, the stored public key confirmation information can be configured to be updated by the updating means (25th configuration).
Further, the present invention provides a device authentication program for realizing a device authentication function by a computer constituting a terminal device, a secret key storage function for storing a secret key, a public key paired with the secret key, and the public key A public key storage function for storing public key confirmation information used for confirming that the key is authorized by a predetermined device authentication authority, and when providing a service to the service providing server, A public key transmission function for transmitting the stored public key and public key confirmation information to the service providing server, and an encryption returned from the service providing server in response to the transmitted public key and public key confirmation information. Using the encrypted secret information receiving function for receiving the encrypted secret information, the decrypting function for decrypting the received encrypted secret information with the secret key, and the decrypted secret information, A decryption confirmation information generation function for generating decryption confirmation information for confirming that the service providing server has decrypted the secret information, and a decryption for transmitting the generated decryption confirmation information to the service providing server A device authentication program for realizing a confirmation information transmission function by a computer is provided (26th configuration).
In the twenty-sixth configuration, the secret information is a common key to be shared by the terminal device and the service providing server, and the encrypted secret information receiving function sends the secret information together with the encrypted secret information from the service providing server. The decryption confirmation information generated by the decryption confirmation information generation function that receives the code information can be configured to be encrypted code information generated by encrypting the received code information with the common key. (Twenty-seventh configuration).
In the twenty-sixth configuration, the service providing server confirms that a server private key, a server public key paired with the server private key, and the server public key are those approved by a predetermined device authentication authority. Server public key confirmation information for use in storage, a server public key reception function for receiving the server public key and the server public key confirmation information from the service providing server, and the received server Using the public key confirmation information, a server public key confirmation function for confirming that the received server public key is recognized by the device certification authority and a second code using the confirmed server public key A second encrypted secret information generating function for generating second encrypted secret information from the information, and transmitting the generated second encrypted secret information to the service providing server A second encrypted secret information transmission function and a second decryption confirmation for confirming that the service providing server has decrypted the second code information from the transmitted second encrypted secret information The second encrypted secret information transmitted by the service providing server using the second decryption confirmation information receiving function for receiving information from the service providing server and the received second decryption confirmation information The second decoding confirmation function for confirming that the second code information has been decoded can be configured by a computer (28th configuration).
In the eighteenth configuration, the secret information decrypted by the decryption function is a common key shared by the terminal device and the service providing server. In the second encrypted secret information generation function, The second code information can be configured to be encrypted with the common key and the server public key (29th configuration).
In the twenty-sixth configuration, an update request transmission function for transmitting an update request for public key confirmation information to a device authentication server for updating public key confirmation information stored in a terminal device, and for the transmitted update request, An updated public key confirmation information receiving function for receiving updated public key confirmation information used by the device authentication server to confirm that the public key of the terminal device has been approved by a predetermined device authentication authority; An update function for updating the stored public key confirmation information using the received updated public key confirmation information can be realized (30th configuration).
Further, the present invention is a storage medium storing a device authentication program for realizing a device authentication function by a computer constituting a terminal device, wherein the secret key storage function for storing a secret key and the public key forming a pair with the secret key A public key storage function for storing a key, public key confirmation information used for confirming that the public key is approved by a predetermined device authentication authority, and requesting a service providing server to provide a service The public key transmitting function for transmitting the stored public key and public key confirmation information to the service providing server, and the service providing server corresponding to the transmitted public key and public key confirmation information. An encrypted secret information receiving function for receiving the returned encrypted secret information, a decryption function for decrypting the received encrypted secret information with the secret key, and the decrypted Decryption confirmation information generating function for generating decryption confirmation information for confirming that the service providing server has decrypted the secret information using secret information, and providing the generated decryption confirmation information to the service A computer-readable storage medium storing a device authentication program that realizes a decryption confirmation information transmission function to be transmitted to a server is provided (31st configuration).
Further, the present invention provides a secret key, a public key paired with the secret key, and public key confirmation information used for confirming that the public key is recognized by a predetermined device authentication authority. , An issuance request receiving means for receiving an update request for the public key confirmation information from a terminal device that stores, and the public key requested by the received update request to the terminal device is a predetermined device authentication authority. And an update public key transmitting means for transmitting the update public key confirmation information used for confirming that it is approved by the apparatus (32th configuration).
Further, the present invention provides a computer comprising issuance request receiving means and update public key transmitting means, wherein a private key, a public key paired with the private key, and the public key are a predetermined device authentication authority. Issuance request reception for receiving an update request for the public key confirmation information of the terminal device from the terminal device storing the public key confirmation information to be used for confirming that it is authorized by the issuance request receiving means. And updating the update public key confirmation information used to confirm that the public key requested by the received update request is approved by a predetermined device certification authority to the terminal device. An updated public key transmitting step for transmitting public key transmitting means is provided (33rd configuration).
Further, the present invention provides a secret key, a public key paired with the secret key, and public key confirmation information used for confirming that the public key is recognized by a predetermined device authentication authority. An issue request receiving function for receiving an update request for the public key confirmation information from a terminal device storing
Update public key confirmation information used to confirm to the terminal device that the public key of the terminal device requested by the received update request is recognized by a predetermined device certification authority, Provided is a public key confirmation information update program that implements a function of transmitting an updated public key confirmation information to be transmitted by a computer (thirty-fourth configuration)
Further, the present invention provides a secret key, a public key paired with the secret key, and public key confirmation information used for confirming that the public key is recognized by a predetermined device authentication authority. , An issuance request reception function for receiving a request for updating the public key of the terminal device from the terminal device, and the received public key of the terminal device is recognized by the predetermined device authentication authority for the terminal device. A computer-readable storage medium storing a public key confirmation information update program that implements an update public key confirmation information used to confirm that the update public key confirmation information is transmitted on the computer. Provided (35th configuration).
The present invention also provides a key generation step for generating a pair of a private key and a public key, and a public key used for confirming that the generated public key is recognized by a predetermined device authentication authority. A public key confirmation information acquisition step for acquiring confirmation information, a secret key storage step for storing the generated secret key in a tamper resistant device, a step for incorporating the tamper resistant device storing the secret key into a terminal device, Provided is a terminal device manufacturing method comprising a public key storage step of storing the generated public key and the acquired public key confirmation information in a terminal device incorporating the tamper resistant device. (Thirty-sixth configuration).
[0011]
DETAILED DESCRIPTION OF THE INVENTION
DESCRIPTION OF EXEMPLARY EMBODIMENTS Hereinafter, preferred embodiments of the invention will be described in detail with reference to the drawings.
[Outline of Embodiment]
FIG. 1 is a diagram illustrating an example of a configuration of a service providing system according to the present embodiment.
Service servers 7, 7, 7,... (Hereinafter referred to as service server 7) are server devices that provide services to the CE device 9 via a network.
The CE device 9 stores a digital certificate (hereinafter referred to as a CE certificate) and transmits it to the service server 7.
This CE certificate includes a public key corresponding to the private key held by the CE device 9.
[0012]
The service server 7 receives the public key from the CE device 9 and confirms that this public key has been approved by the device certification authority by the signature of the certificate (described later). The data is encrypted and transmitted to the CE device 9.
On the other hand, the CE device 9 decrypts the encrypted secret information with the secret key.
The CE device 9 authenticates the CE device 9 by confirming that the secret information has been decrypted by the CE device 9.
[0013]
That is, only the CE device 9 having a secret key paired with this public key can decrypt the secret information encrypted with this public key, and this public key is recognized by the device certification authority. Therefore, device authentication can be performed using a certificate.
[0014]
In this embodiment, a common key (session key) dynamically generated by the service server 7 is used as the secret information. Therefore, after device authentication, the CE device 9 and the service server 7 can share a common key, and efficient service provision using this common key can be performed.
[0015]
Thus, in this embodiment, since device authentication is performed by each service server 7, the device authentication function can be distributed by the service providing system, and concentration of load associated with device authentication can be prevented.
In the present embodiment, since the pair of the secret key and the public key is managed inside the CE device 9, even if the public key distributed in the service providing system fluctuates due to production or disposal of the CE device 9. As a service providing system, it is not necessary to manage this.
Furthermore, although the public key is managed inside the CE device 9, the authenticity of the public key can be secured by a certificate issued by the device certification authority.
[0016]
[Details of the embodiment]
FIG. 2 is a diagram for explaining a logical configuration of the CE device 9 according to the present embodiment.
The CE device 9 includes a tamper-resistant chip 10 as hardware, and stores a CE certificate 12 used for device authentication in a storage device.
The tamper-resistant chip 10 is a tamper-resistant device in which sufficient measures are taken against fraud such as tampering, duplication, and decoding of the internal logical structure.
The tamper resistant chip 10 stores a secret key (hereinafter referred to as a CE secret key) (secret key storage means). The tamper resistant chip 10 receives a request for decryption of information encrypted with a CE public key included in a CE certificate 12 described later, and outputs the decrypted result.
[0017]
The CE certificate 12 is stored in the storage device of the CE device 9 (public key storage means), the device ID of the CE device 9, the public key corresponding to the CE private key (hereinafter referred to as the CE public key), the expiration date, etc. The message is composed of a digital signature (hereinafter referred to as a signature), etc., which is made by the device certification authority to guarantee the authenticity of these messages.
In other words, the service server 7 that has received the CE certificate 12 can confirm that the content included in the CE certificate 12 has been authenticated by the device certification authority by confirming the signature.
[0018]
Therefore, the signature constitutes public key confirmation information for confirming that the CE public key is approved by the device certification authority.
Further, the service server 7 can recognize the device ID of the CE device 9 from the device ID included in the CE certificate 12, and can know the expiration date of the CE public key from the expiration date.
[0019]
The device authentication module 11 is a module that transmits and receives information to and from the service server 7 using the tamper-resistant chip 10 and the CE certificate 12 and causes the service server 7 to perform device authentication of the CE device 9.
[0020]
FIG. 3 is a flowchart for explaining a procedure in which the service server 7 authenticates the CE device 9.
First, the device authentication module 11 transmits the CE certificate 12 to the service server 7 (step 2).
The device authentication module 11 transmits the public key to the service server 7 using the CE certificate 12. As described above, the CE device 9 includes public key transmission means.
The service server 7 receives the CE certificate 12 from the CE device 9 (public key receiving means), and confirms the authenticity of the CE certificate 12 (step 20).
The service server 7 confirms the authenticity of the CE certificate 12 using the signature, thereby confirming the authenticity of the CE public key (public key confirming means). A specific confirmation method will be described later.
[0021]
Next, the service server 7 generates a session key (step 22).
The session key is used as a common key shared between the service server 7 and the CE device 9 when providing the service.
In order to increase the security level, the session key is dynamically generated and is different every time.
[0022]
The service server 7 extracts the CE public key from the CE certificate 12, and encrypts the session key generated previously using this (step 24).
In this embodiment, the session key is used as secret information. That is, if it is confirmed that the session key is encrypted with the CE public key and decrypted by the CE device 9, the CE device 9 can be authenticated, and the common key can be shared with the CE device 9.
[0023]
Hereinafter, the encrypted information A is referred to as encryption (information A) or the like. If a method for describing the encrypted information is defined in this way, the information generated in step 24 can be expressed as encryption (session key). Encryption (session key) constitutes encryption secret information.
[0024]
Next, the service server 7 generates a session ID and a random number (hereinafter referred to as a random number A) (step 26).
The session ID is ID information used for maintaining the session, and the random number A is code information for confirming that the session key can be decrypted by the CE device 9.
[0025]
Then, the service server 7 stores the session key generated at step 22 in association with the session ID generated at step 26 and the random number A (step 28).
Next, the service server 7 transmits the session ID generated in step 26, the random number A, and the encryption (session key) generated in step 24 to the CE device 9 (encrypted secret information transmission unit).
[0026]
The CE device 9 receives these pieces of information (encrypted secret information receiving means), and the device authentication module 11 requests the tamper resistant chip 10 to decrypt the encryption (session key) (step 4).
The tamper resistant chip 10 decrypts the encryption (session key) to generate a session key, and provides it to the device authentication module 11 (step 10).
In this way, the tamper resistant chip 10 constitutes a decryption means for decrypting the encrypted secret information with the CE secret key.
The device authentication module 11 acquires a session key from the tamper resistant chip 10.
[0027]
Thus, the CE device 9 can share a common key (session key) with the service server 7.
Then, the device authentication module 11 encrypts the random number A received from the service server 7 using this session key, and generates encryption (random number A) (decryption confirmation information generating means) (step 6).
This encryption (random number A) constitutes decryption confirmation information for the service server 7 to confirm that the CE device 9 has successfully decrypted the secret information.
[0028]
The device authentication module 11 transmits the session ID transmitted from the service server 7 in step 30 and the encryption (random number A) generated in step 6 to the service server 7 (decryption confirmation information transmitting means) (step 8).
[0029]
The service server 7 receives the session ID and encryption (random number A) from the CE device 9 (decryption confirmation information receiving means).
Then, the random number A and the session key are acquired from the session ID received from the CE device 9 and the correspondence stored in step 28 (step 32).
[0030]
Next, the service server 7 encrypts the random number A with the session key acquired in step 32, and generates encryption (random number A) (encrypted code information generation means) (step 34).
Then, the service server 7 compares the encryption (random number A) generated in step 34 with the encryption (random number A) received from the CE device 9, and determines whether or not they match (decryption confirmation means). (Step 36).
If the two match, it is determined that the device authentication of the CE device 9 has succeeded, and service provision to the CE device 9 is started (step 38).
If they do not match, it is determined that device authentication of the CE device 9 has failed, and no service is provided to the CE device 9.
[0031]
As described above, the service server 7 can confirm that the CE device 9 possesses the CE private key by confirming that the CE device 9 can decrypt the session key. That is, it can be confirmed that the CE device 9 is a genuine CE device.
In addition, after the device authentication, the service server 7 can provide a service to the CE device 9 by using the session key as a shared key.
[0032]
Furthermore, in the present embodiment, the service server 7 encrypts the session key with the CE public key and transmits it to the CE device 9, so that the CE device 9 and the service server 7 can share the session key as a common key. The security level can be enhanced by configuring the CE server 9 so that the service server 7 confirms the information encrypted by the common key.
In this case, the security level is higher than when the CE device 9 is authenticated by simply confirming that the information encrypted by the service server 7 using the CE public key can be decrypted by the CE device 9 using the private key. .
[0033]
In the present embodiment, the session key is used as secret information. However, for example, code information such as a random number can be used as secret information.
In this case, the service server 7 encrypts the random number with the CE public key and transmits it to the CE device 9.
In response to this, the CE device 9 decrypts the random number with the CE secret key and transmits it to the service server 7.
The service server 7 confirms that the random number received from the CE device 9 is the same as the random number transmitted to the CE device 9, and authenticates the CE device 9.
[0034]
Next, authenticity confirmation of the CE certificate 12 in step 20 will be described.
In the present embodiment, a certificate such as the CE certificate 12 is assumed to be electronic information that can confirm that the information included in the certificate is correct information by some method.
As described above, as a method for confirming that the content of the certificate is correct, for example, there is a method of signing the certificate with a private key issued by a trusted certification authority.
[0035]
In this method, the certificate provider (hereinafter, the provider, corresponding to the CE device 9), the certificate recipient (hereinafter, the receiver, corresponding to the service server 7), and the certification authority that signs the certificate. Exists.
First, the provider submits a message to be certified by a certificate to the certification authority.
The certificate authority has a private key / public key pair for the certificate authority, generates a hash value of the message submitted by the provider, and encrypts it with the secret key. Information encrypted with this secret key is a signature.
The certification authority attaches a signature to the message to give a certificate and issues it to the provider.
[0036]
On the other hand, the recipient who receives this certificate from the provider decrypts the signature with the public key provided by the certification authority. Information that can be decrypted with the public key of the certification authority is limited to information encrypted with the private key of the certification authority, so that the certificate can be authenticated by the certification authority because the signature can be decrypted with the public key of the certification authority. Can be confirmed.
Next, the recipient generates a hash value of the message in the certificate and checks it against the hash value decrypted from the signature.
By matching the two, it can be confirmed that the message has not been tampered with.
[0037]
In this way, the recipient of the certificate can confirm that the certificate is issued by the certificate authority by being able to decrypt the signature with the public key of the certificate authority, and further compare the hash values. By doing so, it can be confirmed that the message has not been tampered with.
[0038]
A hash value is a conversion value obtained by converting a message by a one-way function called a hash function. If the message is the same, the same conversion value is obtained, and if the message is different, the conversion value is also different. It has become. Therefore, it is possible to detect message tampering by comparing hash values.
In addition, the hash function is configured so that it is difficult to perform reverse conversion to restore the original message from the converted value.
[0039]
In the same manner as described above, the service server 7 can confirm the authenticity of the CE certificate 12 by using the signature included in the CE certificate 12.
In other words, the service server 7 only needs to include a public key for decrypting the signature included in the CE certificate 12 and a hash value generation means for comparing the message.
The above method is merely an example, and any method that can confirm the authenticity of the CE certificate 12 can be employed.
[0040]
By the way, there is a case where a trust chain is formed such that there is a certificate that proves the authenticity of the certificate, and there is a certificate that proves the authenticity of the certificate. In this case, the service server 7 verifies the path of the trust chain.
[0041]
For example, when the trust chain as shown in FIG. 4 is formed, the service server 7 follows the path as shown by the thick line in the figure, and the trust chain of the CE certificate 12 is the root certificate 13. Make sure it ’s connected to If it is not connected, the CE certificate 12 cannot be trusted.
The root certificate 13 is a certificate issued by a reliable device certification authority.
[0042]
Alternatively, the service server 7 can be configured to entrust the verification work to a verification service server that provides a service for verifying that the trust chain of the CE certificate 12 is connected to the root certificate 13.
The verification service server is a server operated by a person who has a trust relationship with the operator of the service server 7, and the trust chain of the CE certificate 12 is connected to the root certificate 13 in the same manner as shown in FIG. Make sure.
Thus, by entrusting the authenticity confirmation work of the CE certificate 12 to the outside, the service server 7 does not need to have the CE certificate 12 confirmation function.
[0043]
As described above, in the present embodiment, the service server 7 can confirm the authenticity of the CE certificate 12 acquired from the CE device 9, and the CE device 9 can further confirm the CE public key in the CE certificate 12. Since it is possible to confirm that the CE private key corresponding to is possessed, spoofing by a third party can be prevented, and the CE device 9 can be appropriately authenticated.
[0044]
That is, even if a third party duplicates the CE certificate 12 and uses it on another CE device, the CE device does not store the CE private key corresponding to the CE public key of the CE certificate 12. Therefore, the device authentication cannot be received from the service server 7.
Further, since the CE private key is stored in the tamper resistant chip 10, it is not taken and used by a third party.
[0045]
Next, a method for manufacturing the CE device 9 will be described.
In the present embodiment, the tamper resistant chip 10 in which the CE secret key is embedded is manufactured in the tamper resistant chip factory, and this chip is embedded in the CE device 9 body in the assembly factory.
Further, the CE certificate 12 is generated by the key management system, and is stored in the CE device 9 at the assembly factory.
[0046]
FIG. 5 is a flowchart for explaining a process of embedding device authentication-related information in the CE device 9.
First, the tamper resistant chip factory system requests a device ID usage frame from the key management system (step 40).
The key management system manages the device ID, and when there is a request from the tamper resistant chip factory system, provides the requested device ID to the tamper resistant chip factory system.
[0047]
The key management system receives a request from the tamper-resistant chip factory system and extracts the device ID (step 50).
The tamper resistant chip factory system receives the device ID from the key management system and generates a CE public key and CE private key pair (step 42).
[0048]
Next, the tamper resistant chip factory system embeds the device ID received in step 42 and the refined CE secret key in the tamper resistant chip 10 (step 44).
In the tamper resistant chip factory system, after the secret key is embedded in the tamper resistant chip 10, the secret key in the tamper resistant chip factory system is safely deleted.
[0049]
The tamper resistant chip 10 stores the CE private key and the device ID by this embedding work (step 70), is shipped to the assembly factory, and is incorporated into the CE device 9 at the assembly factory.
On the other hand, the tamper resistant chip factory system transmits the device ID embedded in the tamper resistant chip 10 in step 44 and the CE public key generated in step 42 to the key management system and reports the completion of embedding (step 46).
[0050]
The key management system creates the CE certificate 12 using the device ID and CE public key received from the tamper-resistant chip factory system (step 52) and distributes them to the assembly factory system (step 54).
In this case, the key management system functions as a device certification authority for the CE certificate 12.
The assembly factory system stores the CE certificate 12 distributed from the key management system for incorporation into the CE device 9.
[0051]
The assembly plant system requests the CE device 9 to provide a device ID (step 60).
Note that the assembly factory system is connected to the CE device 9 by a connector or the like and can communicate with the CE device 9.
At this time, the tamper resistant chip 10 is already incorporated in the CE device 9 and is accessible from the device authentication module 11.
In response to the request from the assembly plant system, the device authentication module 11 requests the tamper resistant chip 10 to provide a device ID (step 82).
[0052]
In response to this, the tamper resistant chip 10 provides a device ID to the device authentication module 11 (step 74).
The device authentication module 11 acquires the device ID from the tamper resistant chip 10 and provides it to the assembly factory system (step 84).
[0053]
The assembly factory system collates the device ID acquired from the CE device 9 with the device ID included in the CE certificate 12 distributed in step 54, and matches the device ID provided from the CE device 9. 12 is embedded in the storage device of the CE device 9 (step 62).
The CE device 9 stores the CE certificate 12 (step 86).
[0054]
As described above, the CE device 9 can embed the tamper-resistant chip 10 storing the CE secret key and the CE certificate 12 including the CE public key.
[0055]
Next, a procedure for updating the CE certificate 12 embedded in the CE device 9 will be described. Since an expiration date is set for the CE certificate 12, it is necessary to update the CE certificate 12 in order to use device authentication by the CE certificate 12 even after the expiration date.
[0056]
FIG. 6 is a flowchart for explaining a procedure for updating the CE certificate 12.
First, the device authentication module 11 requests the tamper resistant chip 10 to provide a device ID (step 120).
On the other hand, the tamper resistant chip 10 provides a device ID to the device authentication module 11 (step 110).
The device authentication module 11 acquires the device ID from the tamper resistant chip 10 and transmits it to the key management system (update request transmitting means) (step 122).
[0057]
The key management system receives the device ID from the CE device 9 (issue request receiving means), and acquires the CE public key corresponding to this device ID (step 100).
The key management system stores the combination of the device ID and the CE public key transmitted from the tamper resistant chip factory system in step 46 (FIG. 5), and uses this to specify the CE public key.
[0058]
Next, the key management system generates a new CE certificate 12 using the device ID received from the CE device 9 and the CE public key acquired in Step 100 (Step 102).
[0059]
Next, the key management system signs the generated new CE certificate 12 with the private key of the key management system (step 104), and transmits it to the CE device 9 (update public key confirmation information transmission means) (step 106). .
The CE device 9 receives this new CE certificate 12 (update public key confirmation information receiving means), and the device authentication module 11 overwrites the old CE certificate 12 using the new CE certificate 12 (update means). (Step 124).
As described above, the expired CE certificate 12 can be updated.
[0060]
Next, mutual authentication using a certificate between the CE device 9 and the service server 7 will be described.
In the device authentication described with reference to the flowchart of FIG. 3, the service server 7 starts authenticating the CE device 9 and then starts providing the service to the CE device 9.
[0061]
On the other hand, in the mutual authentication, the CE server 9 is authenticated from the service server 7 and the CE device 9 also authenticates whether the service server 7 is an appropriate server device.
And after both authentication succeeds, the service server 7 starts provision of a service.
[0062]
The mutual authentication procedure will be described below with reference to the flowcharts of FIGS.
[0063]
FIG. 7 is a flowchart for explaining a procedure in which the service server 7 authenticates the CE device 9 in mutual authentication.
Each step from Step 2 to Step 36 is the same as that in FIG.
[0064]
After successfully authenticating the CE device 9 in step 36, the service server 7 generates a second session ID (hereinafter referred to as session ID # 2) and a certificate on the service server 7 side (hereinafter referred to as SP certificate). Then, the session ID # 2 is transmitted to the CE device 9 (server public key transmission means) (step 39).
Further, the service server 7 stores the correspondence between the session ID # 2 and the session key when generating the session ID # 2.
[0065]
This is to acquire a corresponding session key when session ID # 2 is transmitted later from CE device 9 (step 150 in FIG. 8).
Here, the service server 7 newly generates a session ID # 2 that is different from the session ID # 1 generated in the process of authenticating the CE device. The same session ID number may be used, but by using different session ID numbers, it can be easily confirmed which authentication process is being performed.
Further, the service server 7 stores an SP certificate issued from the device authentication authority, and the SP certificate includes the public key (hereinafter, SP public key) of the service server 7. To do.
The SP certificate guarantees that the SP public key is authentic by the SP certificate.
Furthermore, it is assumed that the service server 7 stores an SP private key corresponding to the SP public key.
[0066]
FIG. 8 is a flowchart for explaining a procedure in which the CE device 9 authenticates the service server 7 with the SP certificate after the service server 7 transmits the SP certificate and the session ID # 2 to the CE device 9.
First, in the CE device 9, the device authentication module 11 confirms the authenticity of the SP certificate received from the service server 7 (server public key confirmation means) (step 130). The confirmation method is the same as the method in which the service server 7 confirms the authenticity of the CE certificate 12 of the CE device 9 (step 20 in FIG. 3).
[0067]
Next, the device authentication module 11 generates a random number (referred to as random number B) (step 132), and encrypts it with the SP public key included in the SP certificate (step 134). As a result, encryption (random number B) is generated. Here, the random number B corresponds to the second code information.
[0068]
Next, the device authentication module 11 further encrypts encryption (random number B) with the session key (step 136). The device authentication module 11 stores the random number B for comparison with the random number B transmitted by the service server 7 in step 156 later.
[0069]
Here, when the encryption (information A), which is the encrypted information A, is further encrypted, it is referred to as encryption (information A) again. When the notation method is defined in this way, the information generated in step 136 is again expressed as encryption (random number B).
The encryption (random number B) again constitutes the second encrypted secret information and is encrypted using the SP public key and the session key (second encrypted secret information generating means).
[0070]
Next, the device authentication module 11 again encrypts (random number B) and transmits the session ID # 2 to the service server 7 (second encrypted secret information transmitting means) (step 138).
The service server 7 receives this (second encrypted secret information receiving means), and acquires a session key from the session ID # 2 (step 150).
[0071]
Next, the service server 7 decrypts the encryption (random number B) again with this session key to obtain the encryption (random number B) (step 152), and further decrypts it with the SP private key to generate the random number B. Is acquired (second code information decoding means) (step 154).
[0072]
Next, the service server 7 generates a third session ID (hereinafter referred to as session ID # 3), and transmits the decrypted random number B and session ID # 3 to the CE device 9 (second code information transmission means) (Step 156).
The CE device 9 receives the session ID # 3 and the decrypted random number B (second decryption confirmation information) from the service server 7 (second decryption confirmation information receiving means).
The CE device 9 compares the random number B previously stored in the device authentication module 11 with the random number B received from the service server 7 and determines whether or not they are the same (second decryption). Confirming means) (step 140).
[0073]
If they are the same, the service server 7 has been successfully authenticated, and if they are not the same, the authentication has failed.
That is, when the random numbers B are the same, it means that the service server 7 can extract the random number B from the encryption (random number B) again.
[0074]
This means that the service server 7 has a session key associated with the session ID # 2 and also has a private key corresponding to the SP public key included in the SP certificate. This is because the CE device 9 can confirm that the service server 7 is a valid server device.
[0075]
Here, it is assumed that the service server 7 has been successfully authenticated, and the device authentication module 11 completes the mutual authentication process and requests the service server 7 to start a session (step 142).
In response to this, the service server 7 starts providing the service (step 158).
[0076]
As described above, when the mutual authentication as described above is used, not only the service server 7 authenticates the CE device 9 but also the CE device 9 can authenticate the validity of the service server 7.
For this reason, it is possible to prevent the CE device 9 from connecting to a service server operated by a third party pretending to be the service server 7.
When the mutual authentication processing with the CE device 7 is performed, the service server 7 newly generates and sends a session ID # 3. As described above, the same session ID number may be used, but the authentication process can be confirmed by changing the session ID number. Here, for example, since the CE device 7 having the session ID # 3 has completed mutual authentication, it can be seen that the service server 7 can provide a service to the CE device 7.
[0077]
In this embodiment, the random number B is encrypted with the SP public key and then re-encrypted with the session key. Conversely, after encrypting with the session key, the random number B is re-encrypted with the SP public key. It can also be configured.
The CE device 9 may be configured to simply authenticate the random number B with the SP public key and to authenticate the device by the service server 7 decrypting it with the SP private key.
[0078]
FIG. 9 is a diagram illustrating an example of a hardware configuration of the CE device 9.
A CPU (Central Processing Unit) 121 is a central processing unit that executes various processes according to programs stored in a ROM (Read Only Memory) 122 and programs loaded from a storage unit 128 to a RAM (Random Access Memory) 123. It is.
[0079]
The ROM 122 stores basic programs and parameters necessary for causing the CE device 9 to function.
The RAM 123 provides a working area necessary for the CPU 121 to execute various processes.
[0080]
The storage unit 128 stores programs and data necessary for the CE device 9 to function, and includes a storage device such as a hard disk or a semiconductor memory, for example.
[0081]
Information stored in the storage unit 128 includes, for example, a device authentication certificate, a device authentication program for configuring the device authentication module 11, file input / output, and control of each unit of the CE device 9. There are OS (Operating System) for realizing basic functions.
When the device authentication program is executed by the CPU 121, the device authentication module 11 is configured.
[0082]
The tamper resistant chip 10 stores the CE secret key, and performs encryption and decryption processing using the CE secret key.
When an encryption command and information to be encrypted are input from outside, information encrypted with the CE private key is output. When a decryption command and information to be decrypted are input, information decrypted with the CE private key is output. Has two operation modes.
[0083]
The tamper resistant chip 10 is a kind of black box, and the internal logical structure and CE secret key are not known from the outside.
Further, when the tamper resistant chip 10 is physically disassembled and the inside is to be examined, the internal information can be automatically destroyed.
As described above, the tamper resistant chip 10 is an IC chip that has been subjected to duplication and tampering prevention measures.
[0084]
The CPU 121, ROM 122, RAM 123, and tamper-resistant chip 10 are connected to each other via a bus 124. An input / output interface 125 is also connected to the bus 124.
[0085]
The input / output interface 125 includes an input unit 126 including a keyboard and a mouse, a display including a CRT (Cathode-Ray Tube), an LCD (Liquid Crystal Display), an output unit 127 including a speaker, a hard disk, and the like. A communication unit 129 including a storage unit 128, a modem, a terminal adapter, and the like is connected.
[0086]
The communication unit 129 is a functional unit that performs communication processing via a network. For example, the communication unit 129 is connected to the service server 7 to transmit / receive information related to device authentication, or service data provided from the service server 7 is received. To receive.
[0087]
A drive 130 is connected to the input / output interface 125 as necessary, and a magnetic disk 141, an optical disk 142, a magneto-optical disk 143, a memory card 144, or the like is appropriately mounted, and a computer program read therefrom is It is installed in the storage unit 128 as necessary.
Note that the configuration of the service server 7 is basically the same as that of the CE device 9, and the description thereof is omitted.
[0088]
According to the embodiment described above, the following effects can be obtained.
(1) The CE server 12 authenticates the device by confirming the authenticity of the CE device 9 by establishing a trust relationship between the CE device 9 and the service provider operating the service server 7 using the CE certificate 12. Can do.
(2) By performing device authentication with the service server 7, it is not necessary to use a centralized device authentication server, and the system load accompanying device authentication can be distributed.
[0089]
(3) By using the tamper resistant chip 10 for storing the CE secret key, security can be improved and unauthorized use such as impersonation can be prevented.
(4) The CE device 9 can download and update the CE certificate 12, and can reduce troublesome processing associated with certificate revocation.
To do.
[0090]
(5) The service server 7 can reinforce the security level by encrypting the session key with the CE public key and transmitting it to the CE device 9 and using the session key as a common key.
(6) The reliability can be improved by confirming that the CE public key of the CE certificate 12 is issued by a trusted certificate authority.
(7) By performing mutual authentication, not only the service server 7 authenticates the CE device 9, but also the CE device 9 can authenticate the service server 7.
[0091]
(8) Since the CE secret key and CE public key pair are managed by the CE device 9, no other system for collectively managing the CE secret key and the CE public key is required.
For this reason, even if the user discards the CE device 9 or purchases a new CE device 9, no adjustment on the service providing system side is required.
In particular, since the CE device 9 is on the market in large quantities, the CE secret key and the CE public key are managed by another system (for example, a system operated by a device authentication organization that guarantees the authenticity of the public key). It is difficult.
[0092]
【The invention's effect】
ADVANTAGE OF THE INVENTION According to this invention, the function which performs apparatus authentication can be distributed, and concentration of the load of the service provision system accompanying apparatus authentication can be reduced.
[Brief description of the drawings]
FIG. 1 is a diagram illustrating an example of a configuration of a service providing system according to an embodiment.
FIG. 2 is a diagram for explaining a logical configuration of a CE device according to the present embodiment.
FIG. 3 is a flowchart for explaining a procedure in which a service server performs device authentication of a CE device.
FIG. 4 is a diagram for explaining an example of a trust chain.
FIG. 5 is a flowchart for explaining a process of embedding device authentication-related information in a CE device.
FIG. 6 is a flowchart for explaining a CE certificate update procedure;
FIG. 7 is a flowchart for explaining a mutual authentication procedure;
FIG. 8 is a flowchart for explaining a mutual authentication procedure;
FIG. 9 is a diagram illustrating an example of a hardware configuration of a CE device.
FIG. 10 is a diagram illustrating an example of a configuration of a conventional service providing system.
[Explanation of symbols]
7 Service server 9 CE equipment
10 Tamper resistant chip 11 Device authentication module
12 CE certificate

Claims (36)

A service providing system composed of a terminal device and a service providing server that authenticates the terminal device and provides a service,
The terminal device is issued by the device authentication authority used to confirm that the secret key, the public key paired with the secret key, and the public key are recognized by a predetermined device authentication authority. Public key confirmation information is stored, and when the service providing server is requested to provide a service, the stored public key and public key confirmation information are transmitted to the service providing server,
The service providing server uses the public key confirmation information to confirm that the public key is recognized by the device certification authority,
Sending encrypted secret information obtained by encrypting secret information with the confirmed public key to the terminal device,
The terminal device uses the secret information obtained by decrypting the encrypted secret information using the secret key, and the decryption for the service providing server to confirm that the terminal device decrypts the secret information. Generating confirmation information, transmitting the generated decryption confirmation information to the service providing server,
The service providing system uses the decryption confirmation information to confirm that the secret information has been decrypted from the encrypted secret information by the terminal device, and provides a service. . A service providing server that provides a service after authenticating a terminal device,
The terminal device includes a secret key, a public key paired with the secret key, and public key confirmation information used to confirm that the public key is approved by a predetermined device authentication authority. Remember,
Public key receiving means for receiving the public key and the public key confirmation information from the terminal device;
Public key confirmation means for confirming using the received public key confirmation information that the received public key is approved by the device certification authority;
Encrypted secret information transmitting means for transmitting encrypted secret information obtained by encrypting secret information using the confirmed public key to the terminal device;
Decryption confirmation information receiving means for receiving, from the terminal device, decryption confirmation information for confirming that the secret information has been decrypted from the transmitted encrypted secret information;
Using the received decryption confirmation information, decryption confirmation means for confirming that the secret information has been decrypted in the terminal device;
A service providing server comprising: The secret information is a common key for the terminal device and the service providing server to share,
Encrypted code information generating means for encrypting code information with the common key to generate encrypted code information,
The encrypted secret information transmission means transmits the code information together with the transmission of the encrypted secret information to the terminal device,
The decryption confirmation information receiving means receives encrypted code information obtained by encrypting the code information with the transmitted common key as decryption confirmation information from the terminal device,
The decryption confirmation means decrypts the transmitted encrypted secret information by determining the identity between the received decryption confirmation information and the encryption code information generated by the encryption code information generation means. The service providing server according to claim 2, wherein the service providing server is confirmed. A server private key, a server public key that forms a pair with the server private key, and server public key confirmation information used to confirm that the server public key is approved by a predetermined device authentication authority. Key information storage means for storing;
Server public key transmission means for transmitting the stored server public key and the server public key confirmation information to the terminal device;
A second encrypted secret information receiving means for receiving second encrypted secret information transmitted by the terminal device in response to the transmitted server public key;
Second code information decryption means for decrypting second code information from the received second encrypted secret information by decrypting with the server secret key;
Second code information transmitting means for transmitting the decoded second code information to the terminal device;
The service providing server according to claim 2, further comprising: The secret information is a common key for the terminal device and the service providing server to share,
The second code information decryption means decrypts the second code information by decrypting the received second encrypted secret information with the server secret key and the common key. The service providing server according to claim 4, wherein A device authentication method performed by a service providing server that provides a service after device authentication of a terminal device, wherein the service providing server includes a public key receiving unit, a public key checking unit, an encrypted secret information transmitting unit, A decryption confirmation information receiving means; and a decryption confirmation means,
The terminal device includes a secret key, a public key paired with the secret key, and public key confirmation information used to confirm that the public key is approved by a predetermined device authentication authority. Remember,
A public key receiving step of receiving the public key and the public key confirmation information from the terminal device by the public key receiving means;
A public key confirming step for confirming by the public key confirming means that the received public key is recognized by the device authentication authority using the received public key confirming information;
An encrypted secret information transmission step of transmitting the encrypted secret information obtained by encrypting the secret information using the confirmed public key to the terminal device by the encrypted secret information transmission means;
A decryption confirmation information receiving step for receiving, from the terminal device, decryption confirmation information for confirming that the secret information has been decrypted from the transmitted encrypted secret information by the decryption confirmation information receiving means; ,
Using the received decryption confirmation information, the decryption confirmation means confirms that the secret information has been decrypted in the terminal device by the decryption confirmation means;
A device authentication method comprising: The secret information is a common key that is shared by the terminal device and the service providing server. An encryption code information generation step for generating information;
In the encrypted secret information transmission step, the code information is transmitted together with the transmission of the encrypted secret information to the terminal device,
In the decryption confirmation information receiving step, encrypted code information obtained by encrypting the code information with the transmitted common key is received from the terminal device as decryption confirmation information,
In the decryption confirmation step, the transmitted encrypted secret information is decrypted by determining the identity between the received decryption confirmation information and the encrypted code information generated by the encrypted code information generating means. The device authentication method according to claim 6, wherein the device authentication is confirmed. The service providing server includes a server private key, a server public key paired with the server private key, and a server public key used to confirm that the server public key is approved by a predetermined device authentication authority. Key information storage means for storing key confirmation information, server public key transmission means, second encrypted secret information reception means, second code information decryption means, second code information transmission means, With
A server public key transmitting step of transmitting the stored server public key and the server public key confirmation information to the terminal device by the server public key transmitting means;
A second encrypted secret information receiving step in which the terminal device receives the second encrypted secret information transmitted in correspondence with the transmitted server public key by the second encrypted secret information receiving means; ,
A second code information decrypting step of decrypting the second code information from the received second encrypted secret information by the second code information decrypting means by decrypting with the server secret key; When,
A second code information transmission step of transmitting the decoded second code information to the terminal device by the second code information transmission means;
The device authentication method according to claim 6, further comprising: The secret information is a common key for the terminal device and the service providing server to share,
In the second code information decryption step, the second code information is decrypted by decrypting the received second encrypted secret information with the server secret key and the common key. The device authentication method according to claim 8. A device authentication program that realizes a device authentication function with a service providing server configured by a computer that provides services after device authentication of a terminal device,
The terminal device includes a secret key, a public key paired with the secret key, and public key confirmation information used to confirm that the public key is approved by a predetermined device authentication authority. Remember,
A public key receiving function for receiving the public key and the public key confirmation information from the terminal device;
A public key confirmation function for confirming that the received public key is recognized by the device certification authority using the received public key confirmation information;
An encrypted secret information transmission function for transmitting, to the terminal device, encrypted secret information obtained by encrypting secret information using the confirmed public key;
A decryption confirmation information receiving function for receiving, from the terminal device, decryption confirmation information for confirming that the secret information has been decrypted from the transmitted encrypted secret information;
Using the received decryption confirmation information, a decryption confirmation function for confirming that the secret information has been decrypted in the terminal device;
Device authentication program that realizes the above with a computer. The secret information is a common key for the terminal device and the service providing server to share,
An encryption code information generation function for generating code information by encrypting code information with the common key is realized,
By the encrypted secret information transmission function, the code information is transmitted together with the transmission of the encrypted secret information to the terminal device,
The decryption confirmation information receiving function receives encrypted code information obtained by encrypting the code information with the transmitted common key as decryption confirmation information from the terminal device,
The decryption confirmation function decrypts the transmitted encrypted secret information by determining the identity of the received decryption confirmation information and the encryption code information generated by the encryption code information generation function. The device authentication program according to claim 10, wherein the device authentication program is confirmed. A server private key, a server public key that forms a pair with the server private key, and server public key confirmation information used to confirm that the server public key is approved by a predetermined device authentication authority. Key information storage function to store,
A server public key transmission function for transmitting the stored server public key and the server public key confirmation information to the terminal device;
A second encrypted secret information receiving function for receiving second encrypted secret information transmitted by the terminal device in response to the transmitted server public key;
A second code information decryption function for decrypting second code information from the received second encrypted secret information by decrypting with the server secret key;
A second code information transmission function for transmitting the decoded second code information to the terminal device;
The apparatus authentication program according to claim 10, which is realized by a computer. The secret information is a common key for the terminal device and the service providing server to share,
The second code information decryption function decrypts the received second encrypted secret information with the server secret key and the common key, thereby decrypting the second code information. The device authentication program according to claim 12. A storage medium storing a device authentication program for realizing a device authentication function in a service providing server configured by a computer that provides a service after device authentication of a terminal device,
The terminal device includes a secret key, a public key paired with the secret key, and public key confirmation information used to confirm that the public key is approved by a predetermined device authentication authority. Remember,
A public key receiving function for receiving the public key and the public key confirmation information from the terminal device;
A public key confirmation function for confirming that the received public key is recognized by the device certification authority using the received public key confirmation information;
An encrypted secret information transmission function for transmitting, to the terminal device, encrypted secret information obtained by encrypting secret information using the confirmed public key;
A decryption confirmation information receiving function for receiving, from the terminal device, decryption confirmation information for confirming that the secret information has been decrypted from the transmitted encrypted secret information;
Using the received decryption confirmation information, a decryption confirmation function for confirming that the secret information has been decrypted in the terminal device;
The computer-readable storage medium which memorize | stored the apparatus authentication program which implement | achieves by computer. A secret key storage means for storing a secret key;
Public key storage means for storing a public key paired with the secret key, and public key confirmation information used for confirming that the public key is authorized by a predetermined device authentication authority;
Public key transmission means for transmitting the stored public key and public key confirmation information to the service providing server when requesting the service providing server to provide the service;
In response to the transmitted public key and public key confirmation information, encrypted secret information receiving means for receiving the encrypted secret information returned from the service providing server;
Decryption means for decrypting the received encrypted secret information with the secret key;
Decryption confirmation information generating means for generating decryption confirmation information for confirming that the service providing server has decrypted the secret information, using the decrypted secret information;
Decoding confirmation information transmitting means for transmitting the generated decoding confirmation information to the service providing server;
A terminal device comprising: The secret information is a common key for the terminal device and the service providing server to share,
The encrypted secret information receiving means receives code information together with the encrypted secret information from the service providing server,
16. The terminal device according to claim 15, wherein the decryption confirmation information generated by the decryption confirmation information generation means is encrypted code information generated by encrypting the received code information with the common key. . The service providing server includes a server private key, a server public key paired with the server private key, and a server public key used to confirm that the server public key is approved by a predetermined device authentication authority. Key confirmation information, and
Server public key receiving means for receiving a server public key and the server public key confirmation information from the service providing server;
Server public key confirmation means for confirming that the received server public key is recognized by the device certification authority using the received server public key confirmation information;
Second encrypted secret information generating means for generating second encrypted secret information from second code information using the confirmed server public key;
Second encrypted secret information transmitting means for transmitting the generated second encrypted secret information to the service providing server;
Second decryption confirmation information for confirming that the service providing server has decrypted the second code information from the transmitted second encrypted secret information is received from the service providing server; Decryption confirmation information receiving means,
Second decryption that uses the received second decryption confirmation information to confirm that the second code information is decrypted from the transmitted second encrypted secret information in the service providing server. Confirmation means;
The terminal device according to claim 15, comprising: The secret information decrypted by the decryption means is a common key to be shared by the terminal device and the service providing server,
The terminal device according to claim 17, wherein the second encrypted secret information generation unit encrypts the second code information with the common key and the server public key. Update request transmitting means for transmitting an update request for the public key confirmation information to a device authentication server for updating the public key confirmation information stored in the terminal device;
In response to the transmitted update request, an update that receives update public key confirmation information transmitted from the device authentication server and used to confirm that the public key is recognized by a predetermined device authentication authority. Public key confirmation information receiving means;
Update means for updating the stored public key confirmation information using the received updated public key confirmation information;
The terminal device according to claim 15, comprising: The terminal device according to claim 15, wherein the secret information and the decryption unit are stored in a tamper resistant device. A secret key storage means for storing a secret key, a public key paired with the secret key, and public key confirmation information used for confirming that the public key is approved by a predetermined device authentication authority; , A public key storage unit, a public key transmission unit, an encrypted secret information reception unit, a decryption unit, a decryption confirmation information generation unit, and a decryption confirmation information transmission unit. The device authentication method performed in
A public key transmitting step of transmitting the stored public key and public key confirmation information to the service providing server by the public key transmitting means when requesting the service providing server to provide the service;
In response to the transmitted public key and public key confirmation information, the encrypted secret information receiving step of receiving the encrypted secret information returned from the service providing server by the encrypted secret information receiving means;
A decryption step of decrypting the received encrypted secret information with the secret key by the decryption means;
Decryption confirmation information generation using the decryption confirmation information generating means to generate decryption confirmation information for confirming that the service providing server has decrypted the secret information using the decrypted secret information Steps,
A decryption confirmation information transmission step of transmitting the generated decryption confirmation information to the service providing server by a decryption confirmation information transmission means;
A device authentication method comprising: The secret information is a common key for the terminal device and the service providing server to share,
In the encrypted secret information receiving step, code information is received from the service providing server together with the encrypted secret information;
The device authentication according to claim 21, wherein the decryption confirmation information generated in the decryption confirmation information generation step is encrypted code information generated by encrypting the received code information with the common key. Method. The service providing server includes a server private key, a server public key paired with the server private key, and a server public key used to confirm that the server public key is approved by a predetermined device authentication authority. Key confirmation information, and
The terminal device includes a server public key reception unit, a server public key confirmation unit, a second encrypted secret information generation unit, a second decryption confirmation information reception unit, a second decryption confirmation unit, With
A server public key receiving means for receiving, from the service providing server, a server public key and the server public key confirmation information by the server public key receiving means;
A server public key confirmation step for confirming by the server public key confirmation means that the received server public key is recognized by the device authentication authority using the received server public key confirmation information;
A second encrypted secret information generating step of generating second encrypted secret information from the second code information using the confirmed server public key by the second encrypted secret information generating means;
A second encrypted secret information transmitting step of transmitting the generated second encrypted secret information to the service providing server by the second encrypted secret information transmitting means;
Receiving the second decryption confirmation information, second decryption confirmation information for confirming that the second code information is decrypted from the transmitted second encrypted secret information by the service providing server; Means for receiving a second decryption confirmation information received from the service providing server;
The second decryption confirmation that the second code information is decrypted from the transmitted second encrypted secret information in the service providing server using the received second decryption confirmation information. A second decryption confirmation step for confirming by means;
The apparatus authentication method according to claim 21, comprising: The secret information decrypted in the decryption step is a common key to be shared by the terminal device and the service providing server,
The device authentication method according to claim 23, wherein, in the second encrypted secret information generation step, the second code information is encrypted with the common key and the server public key. An update request transmission means, an update public key confirmation information reception means, and an update means,
An update request transmission step of transmitting an update request for the public key confirmation information by the update request transmission means to a device authentication server for updating the public key confirmation information stored in the terminal device;
Update public key confirmation information used for confirming that the public key of the terminal device transmitted by the device authentication server in response to the transmitted update request is recognized by a predetermined device authentication authority. An updated public key confirmation information reception receiving step received by the updated public key confirmation information receiving means;
An update step of updating the stored public key confirmation information by the updating means using the received updated public key confirmation information;
The apparatus authentication method according to claim 21, comprising: A device authentication program for realizing a device authentication function on a computer constituting a terminal device,
A secret key storage function for storing a secret key;
A public key storage function for storing a public key paired with the secret key, and public key confirmation information used to confirm that the public key is approved by a predetermined device authentication authority;
A public key transmission function for transmitting the stored public key and public key confirmation information to the service providing server when requesting the service providing server to provide the service;
In response to the transmitted public key and public key confirmation information, an encrypted secret information receiving function for receiving encrypted secret information returned from the service providing server;
A decryption function for decrypting the received encrypted secret information with the secret key;
A decryption confirmation information generating function for generating decryption confirmation information for confirming that the service providing server has decrypted the secret information, using the decrypted secret information;
A decryption confirmation information transmission function for transmitting the generated decryption confirmation information to the service providing server;
Device authentication program that realizes the above with a computer. The secret information is a common key for the terminal device and the service providing server to share,
The encrypted secret information receiving function receives code information together with the encrypted secret information from the service providing server,
27. The device authentication according to claim 26, wherein the decryption confirmation information generated by the decryption confirmation information generation function is encrypted code information generated by encrypting the received code information with the common key. program. The service providing server includes a server private key, a server public key paired with the server private key, and a server public key used to confirm that the server public key is approved by a predetermined device authentication authority. Key confirmation information, and
A server public key reception function for receiving a server public key and the server public key confirmation information from the service providing server;
A server public key confirmation function that uses the received server public key confirmation information to confirm that the received server public key is recognized by the device certification authority;
A second encrypted secret information generation function for generating second encrypted secret information from second code information using the confirmed server public key;
A second encrypted secret information transmission function for transmitting the generated second encrypted secret information to the service providing server;
Second decryption confirmation information for confirming that the service providing server has decrypted the second code information from the transmitted second encrypted secret information is received from the service providing server; Decryption confirmation information reception function of
Second decryption that uses the received second decryption confirmation information to confirm that the second code information is decrypted from the transmitted second encrypted secret information in the service providing server. A confirmation function;
27. The device authentication program according to claim 26, wherein the device authentication program is configured by a computer. The secret information decrypted by the decryption function is a common key for the terminal device and the service providing server to share,
The device authentication program according to claim 28, wherein the second encrypted secret information generation function encrypts the second code information with the common key and the server public key. An update request transmission function for transmitting an update request for the public key confirmation information to a device authentication server for updating the public key confirmation information stored in the terminal device;
Update public key confirmation information used to confirm that the public key of the terminal device transmitted by the device authentication server in response to the transmitted update request is approved by a predetermined device authentication authority. Update public key confirmation information reception function to receive,
An update function for updating the stored public key confirmation information using the received updated public key confirmation information;
27. The device authentication program according to claim 26, wherein the device authentication program is implemented. A storage medium storing a device authentication program for realizing a device authentication function on a computer constituting a terminal device,
A secret key storage function for storing a secret key;
A public key storage function for storing a public key paired with the secret key, and public key confirmation information used to confirm that the public key is approved by a predetermined device authentication authority;
A public key transmission function for transmitting the stored public key and public key confirmation information to the service providing server when requesting the service providing server to provide the service;
In response to the transmitted public key and public key confirmation information, an encrypted secret information receiving function for receiving encrypted secret information returned from the service providing server;
A decryption function for decrypting the received encrypted secret information with the secret key;
A decryption confirmation information generating function for generating decryption confirmation information for confirming that the service providing server has decrypted the secret information, using the decrypted secret information;
A decryption confirmation information transmission function for transmitting the generated decryption confirmation information to the service providing server;
The computer-readable storage medium which memorize | stored the apparatus authentication program which implement | achieves by computer. A terminal device that stores a secret key, a public key that is paired with the secret key, and public key confirmation information that is used to confirm that the public key is approved by a predetermined device authentication authority From the issue request receiving means for receiving an update request for the public key confirmation information,
An update public key for transmitting to the terminal device update public key confirmation information used for confirming that the public key requested by the received update request is recognized by a predetermined device certification authority A transmission means;
A device authentication server comprising: In a computer comprising an issue request receiving means and an update public key sending means,
A terminal device that stores a secret key, a public key that is paired with the secret key, and public key confirmation information that is used to confirm that the public key is approved by a predetermined device authentication authority From the issue request reception step of receiving an update request for the public key confirmation information of the terminal device by the issue request receiving means,
Update public key confirmation information used in the terminal device to confirm that the public key requested by the received update request is recognized by a predetermined device certification authority is transmitted to the terminal device. An update public key sending step for sending means;
A public key confirmation information updating method characterized by comprising: A terminal device that stores a secret key, a public key that is paired with the secret key, and public key confirmation information that is used to confirm that the public key is approved by a predetermined device authentication authority An issue request reception function for receiving an update request for the public key confirmation information;
Update public key confirmation information used to confirm to the terminal device that the public key of the terminal device requested by the received update request is recognized by a predetermined device certification authority, Update public key confirmation information sending function to send,
Public key confirmation information update program that implements A terminal device that stores a secret key, a public key that is paired with the secret key, and public key confirmation information that is used to confirm that the public key is approved by a predetermined device authentication authority An issue request receiving function for receiving a request for updating the public key of the terminal device;
Update public key transmission function for transmitting, to the terminal device, updated public key confirmation information used for confirming that the received public key of the terminal device is recognized by a predetermined device certification authority. When,
A computer-readable storage medium storing a public key confirmation information update program that implements the above. A key generation step for generating a private key / public key pair;
Public key confirmation information obtaining step for obtaining public key confirmation information used for confirming that the generated public key is recognized by a predetermined device authentication authority;
A secret key storing step of storing the generated secret key in a tamper resistant device;
A step of incorporating the tamper resistant device storing the secret key into the terminal device;
A public key storage step of storing the generated public key and the acquired public key confirmation information in a terminal device incorporating the tamper resistant device;
The terminal device manufacturing method characterized by comprising.

Images