JP2005063326A - Authenticated device, authenticating device and authentication system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an authenticated device, an authenticating device and an authentication system, allowing accurate decision whether the authenticated device installed to the authenticating device is rightful or not, in a one-way communication system from the authenticated device to the authenticating device. <P>SOLUTION: This authenticated device has a first signal source outputting a first signal that is a random number, a second signal source outputting a second signal that is a random number, and a plurality of functions. The authenticated device has: a function calculation means selecting a prescribed function from the plurality of functions on the basis of the second signal, and calculating a function value of the first signal by the prescribed function to output a third signal; and a signal multiplexing means outputting a multiplex signal obtained by multiplexing the first signal, the second signal and the third signal. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

  The present invention relates to a device to be authenticated, an authentication device, and an authentication system. In particular, the present invention relates to an authentication system between a battery pack and an electronic device that is mounted with the battery pack as a power source.

  Japanese Laid-Open Patent Publication No. 9-500520 discloses an authentication system for a conventional battery pack and its applied equipment (electronic device using the battery pack). FIG. 7 shows a block diagram of a conventional battery pack and applied devices. In FIG. 7, reference numeral 701 denotes applied equipment, and reference numeral 702 denotes a battery pack. The applied device 701 includes a signal source 711, a function calculation unit 712, a comparison unit 713, a switch 714, and a power supply circuit 715. The battery pack 702 includes function calculation means 721 and a power source (secondary battery) 722. The applied device 701 wears the battery pack 702 and determines whether or not the battery pack 702 is valid by an authentication system using a challenge and a response.

A conventional authentication system will be described. When the battery pack 702 is attached to the applied device 701, the signal source 711 that generates a random number outputs the vector signal a. The vector signal a is a random number, and is a vector value having q (q is a positive integer) elements (scalar values) a _j (1 ≦ j ≦ q). The signal a is transmitted to the function calculation unit 712 of the application device 701 and is also transmitted to the function calculation unit 721 of the battery pack 702 (challenge). In the applied device 701, the function calculation unit 712 having the function g having the vector signal a as an argument calculates b = g (a) and outputs it to the comparison unit 713. The vector signal b is a vector value having q elements (scalar values) b _j (1 ≦ j ≦ q).
On the other hand, in the battery pack 702, the function calculation unit 721 having the function f having the vector signal a as an argument calculates c = f (a) based on the transmitted vector signal a and sends it back to the application device 701. (response). The vector signal c is a vector value having q elements (scalar values) c _j (1 ≦ j ≦ q).

The comparison means 713 of the applied device 701 compares the vector signals b and c, which are calculation results. At this time, if the functions of the applied device 701 and the battery pack 702 are the same, b = c regardless of the value of the vector signal a. A battery pack valid for a certain application device has the same function f (= g) as the function g of the application device. The function is kept secret to those other than the legitimate application device and battery pack manufacturer.
If the comparison result is b = c, the comparison unit 713 determines that the attached battery pack is valid, and turns on the switch 714. When the secondary battery 722 is completely discharged, the power supply circuit 715 that converts commercial AC power (not shown) into a DC voltage charges the secondary battery 722 of the battery pack 702. When commercial AC power is not supplied, the secondary battery 722 is discharged, and power is supplied to the power supply circuit 715 of the application device 701. The comparison unit 713 determines that the battery pack 702 is illegal if b ≠ c, and turns off the switch 714 to prohibit charging / discharging between the application device 701 and the battery pack 702.

The manufacturer of the unauthorized (unauthorized) battery pack 702 monitors the communication between the application device 701 and the authorized battery pack 702, stores the data, decodes the function f, or stores all the vector signals c in the table. It is difficult to remember. If the dimension q of the vector signal a and the vector signal c is 8, and each element a _j , c _j (1 ≦ j ≦ 8) is a 1-byte value, the value of the input signal a is (2 ⁸ ) ⁸ = There are 2 ⁶⁴ ways, each with an output signal c of 8 bytes. If the vector signals c corresponding to all the vector signals a are to be stored, the required storage amount is 2 ⁶⁴ × 8 bytes = about 10 ¹¹ gigabytes. This value is extremely large. If the output signal c is monitored for all the values of the vector signal a, the time required for the application device 701 to give a challenge to the battery pack 702 and return a response, for example, is about 1 nanosecond per time ( This time is short to the extent that it is not currently feasible.) It will take 2 ⁶⁴ × 10 ⁻⁹ seconds = about 584 years. In practice this is not feasible. As a result, it is possible to prevent an unauthorized battery pack (in many cases, the battery pack has incomplete performance and causes various troubles due to the connection with the application device) from being connected to the application device 701.

JP-T 9-500520

In the conventional example, bidirectional communication between communication from the application device to the battery pack and communication from the battery pack to the application device is necessary. The above-described conventional example can be applied to a system of application equipment having a bidirectional communication function and a battery pack, such as a system of a personal battery and a smart battery widely used in the personal computer. However, in many devices such as a video camera, a mobile phone, and the like, it is desirable from the viewpoint of power consumption and cost that the circuit scale is reduced because it is possible to perform authentication by simple one-way communication for both hardware and software.
The present invention provides a one-way communication method from an authenticated device to an authenticated device, which can accurately determine whether the authenticated device attached to the authenticated device is valid and difficult to impersonate, an authenticated device, and an authentication device. The purpose is to provide an authentication system.
SUMMARY OF THE INVENTION An object of the present invention is to provide a device to be authenticated, an authentication device, and an authentication system that are small, consume less power, and are inexpensive.

  In order to solve the above problems, the present invention has the following configuration. The invention described in claim 1 includes a first signal source that outputs a first signal that is a random number, a second signal source that outputs a second signal that is a random number, and a plurality of functions. Function calculating means for selecting a predetermined function from the plurality of functions based on the second signal, calculating a function value of the first signal using the predetermined function, and outputting a third signal; And a signal multiplexing means for outputting a multiplexed signal obtained by multiplexing the first signal, the second signal, and the third signal.

  According to a second aspect of the present invention, there is provided a delay for delaying at least one of the first signal, the second signal, and the third signal input to the signal multiplexing means by a predetermined number of sessions. The device to be authenticated according to claim 1, further comprising means.

  According to a third aspect of the present invention, one signal among the first signal, the second signal, and the third signal input to the signal multiplexing means is delayed by a first session number, The authenticated apparatus according to claim 1, further comprising delay means for delaying the other one by the number of times of the second session.

  According to a fourth aspect of the present invention, the signal multiplexing means arranges the individual components of the first signal, the second signal, and the third signal by replacing each other according to a predetermined rule. The device to be authenticated according to any one of claims 1 to 3, wherein the device is to be authenticated.

  According to a fifth aspect of the present invention, the signal multiplexing means further multiplexes a dummy signal in addition to the first signal, the second signal, and the third signal. The device to be authenticated according to any one of claims 1 to 4.

  The invention described in claim 6 is the device to be authenticated according to any one of claims 1 to 5, wherein the device to be authenticated is a battery pack.

  According to the seventh aspect of the present invention, the multiplexed signal sent from the device to be authenticated is input, and the first signal, the second signal, and the function selected based on the second signal are added to the function. A signal separation means for separating the first signal into a third signal derived from the first signal; and a function identical to that of the device to be authenticated is selected based on the second signal, and the first function is selected based on the function. The function calculation means for calculating and outputting the function value of the signal is compared with the third signal and the function value. If both are the same, the connection with the device to be authenticated is permitted, and both are the same. If there is not, the authentication device is characterized by having comparison means for prohibiting connection with the device to be authenticated.

  According to the eighth aspect of the present invention, the multiplexed signal sent from the device to be authenticated is input, and the first signal, the second signal, and the function selected based on the second signal are added to the function. A signal separation means for separating the first signal into a third signal derived by input, and a plurality of inverse functions, wherein the third signal is derived based on the second signal. An inverse function is selected, an inverse function value of the third signal is calculated using the inverse function, and the function calculation means for outputting is compared with the first signal and the inverse function value. The authentication apparatus includes a comparison unit that permits connection with the authenticated apparatus if there is, and prohibits connection with the authenticated apparatus if both are not the same.

  The invention according to claim 9 further includes a delay unit, wherein the first signal or the second signal included in the multiplexed signal is a signal delayed by a predetermined number of sessions, and the delay unit Delays the first signal or the second signal output from the signal separation means by a predetermined number of sessions, whereby the function calculation means causes the first signal and the second signal to correspond to each other. The authentication apparatus according to claim 7, wherein the authentication device is input.

  The invention according to claim 10 further includes a delay unit, wherein the second signal or the third signal included in the multiplexed signal is a signal delayed by a predetermined number of sessions, and the delay unit Delays the second signal or the third signal output from the signal separation means by a predetermined number of sessions, whereby the function calculation means corresponds to the second signal and the third signal corresponding to each other. The authentication apparatus according to claim 8, wherein the authentication device is input.

  The invention according to claim 11 further includes delay means, and at least one of the first signal, the second signal, and the third signal included in the multiplexed signal is a predetermined signal. A signal delayed by the number of sessions, wherein the delay means delays the third signal output by the signal separation means or the function value output by the function calculation means by a predetermined number of sessions, whereby the comparison 8. The authentication apparatus according to claim 7, wherein means inputs the third signal and the function value corresponding to each other.

  The invention according to claim 12 further comprises delay means, wherein at least one of the first signal, the second signal, and the third signal included in the multiplexed signal is a predetermined signal. A signal delayed by the number of sessions, wherein the delay means delays the first signal output from the signal separation means or the inverse function value output from the function calculation means by a predetermined number of sessions, thereby 9. The authentication apparatus according to claim 8, wherein the comparison unit inputs the first signal and the inverse function value corresponding to each other.

  According to a thirteenth aspect of the present invention, the device to be authenticated is a battery pack including a secondary battery, and if the battery pack is valid, power is supplied from the secondary battery of the battery pack and / or the battery. The authentication device according to any one of claims 7 to 12, wherein the authentication device is an electronic device that charges a secondary battery of a pack.

  Invention of Claim 14 has the said to-be-authenticated apparatus of Claim 1, and the said to-be-authenticated apparatus of Claim 7 or Claim 8, or the said to-be-authenticated apparatus of Claim 2 It has the said authentication apparatus of Claim 9 or Claim 10, or has the said to-be-authenticated apparatus of Claim 3, and the said authentication apparatus of Claim 11 or Claim 12, It is an authentication system.

According to the present invention, in a one-way communication method from an authenticated device to an authenticated device, it is possible to accurately determine whether or not the authenticated device mounted by the authenticated device is valid, and it is difficult to impersonate the authenticated device and authentication. An advantageous effect that the device and the authentication system can be realized is obtained.
According to the present invention, it is possible to obtain an advantageous effect that it is possible to realize an inexpensive device to be authenticated, an authentication device, and an authentication system with a small size and low power consumption.

  DESCRIPTION OF THE PREFERRED EMBODIMENTS Embodiments that specifically show the best mode for carrying out the present invention will be described below with reference to the drawings.

Embodiment 1
A device to be authenticated, an authentication device, and an authentication system according to Embodiment 1 of the present invention will be described with reference to FIG. The authentication system according to the first embodiment includes a battery pack 101 that is a device to be authenticated and an electronic device that is an authentication device. In the first embodiment, the electronic device is an applied device 102 such as a personal computer equipped with a battery pack 101. FIG. 1 is a block diagram illustrating configurations of the battery pack 101 and the application device 102. FIG. 1 shows only the blocks related to the authentication system. In the first embodiment, the battery pack 101 includes a first signal source 111 that generates random numbers, a second signal source 112 that generates other random numbers, a function calculation unit 113, a multiplexing unit 114, and a secondary battery 115. Have. The applied device 102 includes a separation unit 121, a function calculation unit 122, a comparison unit 123, a switch 124, and a power supply circuit 125. The battery pack 101 and the application device 102 are connected by a terminal group including a communication terminal 103 and a power supply terminal 104.

When the battery pack 101 is attached to the application device 102 or the application device 102 to which the battery pack 101 is attached is turned on, the first signal source 111 of the battery pack 101 outputs the first signal (vector signal) A. The second signal source 112 outputs a second signal (vector signal) K. The first signal A and the second signal K are random numbers, and are vector values having q elements (scalar values) A _j (1 ≦ j ≦ q) and K _j (1 ≦ j ≦ q). . The first signal A and the second signal K are transmitted to the function calculating unit 113 and the multiplexing unit 114. The function calculation unit 113 has a plurality of functions with the first signal A as an argument, and selects a function according to the second signal K (another random number). Let the selected function be a function F (A). In the first embodiment, a function having a different form is selected based on the value of the second signal K.

The function calculation means 113 calculates a function value (third signal) B = F (A) based on the first signal A and outputs it to the multiplexing means 114. The third signal B is a vector value having q elements (scalar values) B _j (1 ≦ j ≦ q). The multiplexing unit 114 multiplexes the first to third signals A, K, and B to generate a multiplexed signal, and transmits the multiplexed signal to the application device 102 through the terminal 103. The multiplexing means 114 suffices to multiplex the first to third signals A, K, and B in a form that can be separated by an applied device. Most simply, the first to third signals A, K, and B are sequentially arranged and multiplexed. To do.

Separating means 121 of the applied device 102 separates the multiplexed signal input from the battery pack 101 through the terminal 103 into the first to third signals A, K, B, and functions the first signal A and the second signal K as functions. The third signal B is transmitted to the calculation unit 122 and the third signal B is transmitted to the comparison unit 123. The function calculation means 122 has a plurality of functions with the first signal A as an argument, and selects a function according to the second signal K (another random number) (the function calculation means 113 of the valid battery pack 101 is It is the same function as a plurality of functions having.) In the first embodiment, a function having a different form is selected based on the value of the second signal K. Let the selected function be function G (A). The function calculation means 122 calculates a function value B ′ = G (A) based on the vector signal A and outputs it. The function value B ′ is a vector value having q elements (scalar values) B ′ _j (1 ≦ j ≦ q). The comparison unit 123 compares the vector signals B and B ′, and if the two match, the battery pack 101 attached to the application device 102 is valid, and if not, the attached battery pack 101 is illegal. Judge.

When the comparison unit 123 determines that the battery pack 101 is valid, the comparison unit 123 turns on the switch 124. When the secondary battery 115 is completely discharged, the power supply circuit 125 that converts commercial AC power (not shown) into a DC voltage charges the secondary battery 115 of the battery pack 101 through the terminal 104. When commercial AC power is not supplied, the secondary battery 115 supplies power to the power supply circuit 125 of the application device 102 through the terminal 104.
When the comparison unit 123 determines that the battery pack 101 is illegal, the comparison unit 123 turns off the switch 124 to prohibit charging / discharging between the application device 102 and the battery pack 101. The battery pack 101 is not charged / discharged. If the battery pack 101 is valid, the function F of the battery pack 101 and the function G of the applied device 102 are equal.

The function F (A) of the first embodiment will be described. Q pieces of elements of the first signal A (scalar _{value) A j (1 ≦ j ≦} q), and q pieces of elements (scalar _value) constituting the second signal _K K j (1 ≦ j ≦ q), each of q elements (scalar values) B _j (1 ≦ j ≦ q) constituting the third signal (function value) B = F (A) is expressed by a p-bit binary number. When represented (p is a positive integer), A, K, and B are matrices A = [a _ij ], K = [k _ij ], and B = [b _ij ], respectively, whose elements are elements of {0, 1}. expressed. That is, for 1 ≦ i ≦ p and 1 ≦ j ≦ q, a _ij ε {0, 1}, k _ij ε {0, 1}, b _ij ε {0, 1}.
Here, the matrix C is a (p × q) matrix represented by C = [c _ij ], 1 ≦ i ≦ p, 1 ≦ j ≦ q, c _ij ε {0, 1}, C column vector (c _1j , c _2j ,..., C _pj ) ^T is an arbitrarily defined p-bit binary number, and for example, the following formula (1) is adopted as the function F in the first embodiment. It shall be. The operation is performed for each corresponding element of the matrix. C is a key signal that is arbitrarily determined and has both transmission and reception.

For example, one element (random number) A _j , K _j of the first and second signals A and K is a value of 8 bits (p = 8), and the jth random number (matrix A) of the first signal A ) Is A _j = (0,0,1,0,1,1,0,0) ^T , and the j-th random number of the second signal K (j-th column of the matrix K) is K _j = (1,1,0,0,1,0,1,0) ^T , and the C-th j-th random number (j-th column of the matrix C) is C _j = (1,0,0,0, 1,1,1,0) ^T , A _j is the j-th column B _j = (0,0,1,1,0,1,0,0,0) ^T of the matrix B = F (A) Is converted to

In the authentication system according to the first embodiment of the present invention, it is necessary to transmit a signal (challenge) necessary for authentication from an application device to the battery pack by the above configuration in which the first signal source 111 is built in the battery pack. No, the battery pack can be authenticated by only one-way communication from the battery pack. Since the first signal A and the second signal K are random numbers generated by the first signal source 111 and the second signal source 112, respectively, the number of combinations of multiplexed signals can be increased. It is extremely difficult for an unauthorized manufacturer of the battery pack 101 to obtain the function F based on the multiplexed signal.
However, in this simple example, if A, K, and B are known, C is known, and therefore, multiplexing is not sufficient simply by arranging A, K, and B = F (A). is there. It is necessary to arrange and multiplex the individual components of the signal in accordance with a predetermined rule (of course, this is also kept secret). Thus, the introduction of the second random number K can make the estimation of the function F even more difficult.

<< Embodiment 2 >>
The device to be authenticated, the authentication device, and the authentication system according to the second embodiment of the present invention will be described with reference to FIG. The authentication system of the second embodiment includes a battery pack 101 that is a device to be authenticated and an electronic device that is an authentication device. In the second embodiment, the electronic device is an applied device 201 such as a personal computer equipped with the battery pack 101. FIG. 2 is a block diagram illustrating the configuration of the battery pack 101 and the application device 201. FIG. 2 shows only the blocks related to the authentication system. In FIG. 2, the same blocks as those in FIG. Battery pack 101 is the same as that in the first embodiment, and a description thereof is omitted. The applied device 201 includes a separation unit 121, an inverse function calculation unit 211, a comparison unit 123, a switch 124, and a power supply circuit 125. Battery pack 101 and application device 201 are connected by a terminal group including communication terminal 103 and power supply terminal 104.

  The applied device 201 of the second embodiment has an inverse function calculation unit 211 instead of the function calculation unit 122 of the first embodiment. Separating means 121 of the applied device 201 separates the multiplexed signal input from the battery pack 101 through the terminal 103 into the first to third signals A, K, and B, and transmits the first signal A to the comparing means 123. The second signal K and the third signal B are transmitted to the inverse function calculation unit 211. The inverse function calculation unit 211 is a plurality of inverse functions having the third signal B as an argument (a plurality of inverse functions corresponding to each of a plurality of functions included in the function calculation unit 113 of the valid battery pack 101. In the first embodiment, the inverse function has a different form based on the value of the second signal K. Instead of this, a library of a plurality of inverse functions associated with the value of the second signal K is provided. And an inverse function is selected according to the second signal K (another random number). Let the selected inverse function be H (B).

The inverse function calculation unit 211 calculates and outputs an inverse function value A ′ = H (B). The inverse function value A ′ is a vector value having q elements (scalar values) A ′ _j (1 ≦ j ≦ q). The comparison means 123 compares the first signal A with the inverse function value A ′, and if the two match, the attached battery pack 101 is valid, and if not, the attached battery pack 101 is invalid. Judge that there is. If the attached battery pack 101 is valid, the function F of the battery pack 101 and the inverse function H of the inverse function calculation unit 211 of the application device 201 are mutually inverse functions.
The comparison unit 123 turns on the switch 124 when it is determined that the battery pack 101 is valid, and turns off the switch 124 when it is determined that the battery pack 101 is invalid. The following operations are the same as those in the first embodiment.

For example, if the function F is expressed by the above formula (1), it is expressed by the inverse function H (B) = F ⁻¹ (B) = F (B) (the inverse function F ⁻¹ (B) is the original function. Equal to function F). This is proved by the following formula (2).

  The authentication system according to the second embodiment of the present invention has the same effects as those of the first embodiment.

<< Embodiment 3 >>
A device to be authenticated, an authentication device, and an authentication system according to the third embodiment will be described with reference to FIG. The battery pack (authenticated device) and application device (authentication device) of the third embodiment are similar to those of the first embodiment, and the battery pack 301 and the applied device 302 of the third embodiment are different from the first embodiment. However, it has delay means 311, 312, and 313, respectively.
In the first embodiment, if an unauthorized battery pack manufacturer steals one set of output signals (for example, multiplexed signals of the first to third signals A, K, and B) of the legitimate battery pack, If the output signal is stored in the battery pack as an output signal, the applied device mistakes the mounted battery pack as valid because the output signal of the unauthorized battery pack is correct.

In order to prevent this, the battery pack 301 according to the third embodiment sends a signal necessary for authentication a plurality of times (r times (r is a positive integer) in the third embodiment) (each time is a “session”). Call it.) A function value (third signal) based on the first signal A _k that is a random number is set to B _k = F (A _k ) (1 ≦ k ≦ r). The battery pack 301 transmits the corresponding first signal A _k and third signal B _k in different sessions. The first signal A _k and the third signal B _(k−n) separated from the multiplexed signal received in the same session in the application device 302 have no correspondence. The battery pack 301 transmits the corresponding first signal _Ak and second signal _Kk in the same session.

  FIG. 3 is a block diagram showing the configuration of the battery pack 301 and the application device 302. FIG. 3 shows only the blocks related to the authentication system. In FIG. 3, the same blocks as those in FIG. The battery pack 301 according to the third embodiment is different from the first embodiment in that an n session delay unit 311 is provided between the function calculation unit 113 and the multiplexing unit 114. The applied device 302 of the third embodiment is different from that of the first embodiment in that n session delay means 312 and 313 are provided between the separating means 121 and the function calculating means 122. In other respects, the third embodiment is the same as the first embodiment.

Second signal _{K k} the first signal _{A k} and the second signal source 112 outputs the first signal source 111 outputs the battery pack 301 is input to the function calculating unit 113. The function calculation unit 113 selects the function F (A _k ) according to the second signal K _k (another random number). The function calculation means 113 receives the first signal A _k and calculates the third signal B _k = F (A _k ), which is the function value. The third signal B _k output from the function calculating unit 113 is delayed by n (n is a positive integer) session by the delay unit 311 (B _(k−n) ) and then input to the multiplexing unit 114. The multiplexing means 114 receives the first signal A _k , the second signal K _k and the delayed third signal B _(k−n) at the same time, and generates a multiplexed signal obtained by multiplexing these signals. . A multiplexed signal is sent from the battery pack 301 to the application device 302 through the terminal 103.

The multiplexed signal sent from the battery pack 301 to the application device 302 is converted into a first signal _Ak , a second signal _Kk, and a third signal B _(kn) delayed by the separating means 121. Divided. The delayed third signal B _(k−n) is transmitted to the comparison means 123. The second signal K _k and the first signal A _k are respectively delayed by n sessions by the n session delay means 312 and 313 (K _(k−n) and A _(k−n) ), and then the function calculation means 122. Is input. The function calculation unit 122 selects the function G (A _(k−n) ) according to the second signal K _(k−n) (another random number). The function calculation means 122 receives the first signal A _(k−n) , calculates the function value B ′ _(k−n) = G (A _(k−n) ), and outputs it.
The comparison means 123 receives the third signal B _(k−n) and the function value B ′ _(k−n), and if B _(k−n) = B ′ _(k−n) , the function F And G are equal and it is determined that the installed battery pack 301 is valid, and if the vector signal B _(k−n) ≠ B ′ _(k−n) , the functions F and G are not equal and the mounted battery It is determined that the pack 301 is illegal.
The comparison unit 123 turns on the switch 124 when it is determined that the battery pack 301 is valid, and turns off the switch 124 when it is determined that the battery pack 301 is illegal. The following operations are the same as those in the first embodiment.

The applied device 302 includes a third signal B _(k−n) that is a result of the function calculation for the first signal A _(k−n) and the second signal K _(k−n) before n sessions, A multiplexed signal of the first signal A _k and the second signal K _k generated at present is sent from the battery pack 301. That is, the combination of multiplexed signals is different every time and there is no corresponding relationship. For this reason, for example, even if an unauthorized battery pack stores a multiplexed signal of a session with a valid battery pack, the application device does not mistake the installed battery pack as valid, and the unauthorized battery pack Can be eliminated.

The first n sets of multiplexed signals include a first signal A _k and a second signal K _k , but there is no third signal B _(k−n) to send. The first n sets of multiplexed signals may include dummy data instead of the third signal B _(k−n) . Similarly, the last n sets of multiplexed signals include the third signal B _(k−n) , but there is no first signal A _k and second signal K _k to send. The last n sets of multiplexed signals may include dummy data instead of the first signal A _k and the second signal K _k. The separating means 121 may discard unnecessary dummy data.

Note that the application device 302 of the third embodiment is provided with n session delay means 312 and 313 between the separation means 121 and the function calculation means 122. Alternatively, the n session delay means 312 and 313 may be deleted, and an n session delay means may be provided between the function calculation means 122 and the comparison means 123. In this case, the function calculation means selects the function G (A _k ) according to the second signal K _k . The function calculation means 122 receives the first signal A _k , calculates its function value B ′ _k = G (A _k ), and outputs it. The function value B ′ _k is delayed by n sessions by the n session delay means (B ′ _(k−n) ) and then input to the comparison means 123 and compared with the third signal B _(k−n). .

In the battery pack 301 of the third embodiment, the n session delay means 311 may be provided between the second signal source 112 and the function calculation means 113 in place of the position shown in FIG. The function calculation unit 113 selects the function F (A _k ) according to the delayed second signal K _(k−n) . The function calculation means 113 receives the first signal A _k and calculates the third signal B _k = F (A _k ), which is the function value. The multiplexing means 114 receives the first signal A _k , the second signal K _k and the third signal B _k at the same time, and generates a multiplexed signal obtained by multiplexing these signals.
In this case, the application device 302 provides only the n session delay unit 312 between the separation unit 121 and the function calculation unit 122, and deletes the n session delay unit 313. The function calculation means 122 selects the function G (A _k ) according to the second signal K _(kn) delayed by n sessions by the n session delay means 312. The function calculation means 122 receives the first signal A _k , calculates its function value B ′ _k = G (A _k ), and outputs it. The comparison unit 123 compares the function value B ′ _k with the third signal B _k .

<< Embodiment 4 >>
A device to be authenticated, an authentication device, and an authentication system according to Embodiment 4 of the present invention will be described with reference to FIG. The authentication system according to the fourth embodiment includes a battery pack 301 that is a device to be authenticated and an electronic device that is an authentication device. In the fourth embodiment, the electronic device is an applied device 401 such as a personal computer equipped with a battery pack 301. FIG. 4 is a block diagram illustrating the configuration of the battery pack 301 and the application device 401. FIG. 4 shows only the blocks related to the authentication system. 4, the same blocks as those in FIG. 3 are given the same numbers. The battery pack 301 is the same as that in Embodiment 3, and the description thereof is omitted. The applied device 401 includes a separation unit 121, an inverse function calculation unit 211, n session delay units 312 and 313, a comparison unit 123, a switch 124, and a power supply circuit 125. The battery pack 301 and the application device 401 are connected by a terminal group including the communication terminal 103 and the power supply terminal 104.

The applied device 401 of the fourth embodiment has an inverse function calculation unit 211 instead of the function calculation unit 122 of the third embodiment, and the n session delay unit 313 is arranged between the separation unit 121 and the comparison unit 123. Has been. The separation unit 121 of the applied device 401 uses the multiplexed signal input from the battery pack 301 through the terminal 103 as the first signal _Ak , the second signal _Kk, and the delayed third signal B _{(kn). )} was separated into a first signal _{a k} is transmitted to the comparing means 123 through the n session delay means _{313 (a (k-n)} ), the second signal _{K k} through n session delay means 312 Is transmitted to the inverse function calculation means 211 (K _(k−n) ), and the delayed third signal B _(k−n) is transmitted to the inverse function calculation means 211. The inverse function calculation unit 211 selects the inverse function H (B _(k−n) ) according to the second signal K _(k−n) (another random number). The function calculation means 122 receives the third signal B _(k−n) , calculates the inverse function value A ′ _(k−n) = H (B _(k−n) ), and outputs it.

The comparison unit 123 compares the first signal A _(k−n) with the inverse function value A ′ _(k−n), and if the two match, the mounted battery pack 301 is valid and must match. In this case, it is determined that the attached battery pack 301 is illegal. If the attached battery pack 301 is valid, the function F of the battery pack 301 and the inverse function H of the inverse function calculation unit 211 of the application device 401 are mutually inverse functions. The comparison unit 123 turns on the switch 124 when it is determined that the battery pack 301 is valid, and turns off the switch 124 when it is determined that the battery pack 301 is illegal. The following operations are the same as those in the third embodiment.
The authentication system according to the fourth embodiment of the present invention has the same effects as those of the third embodiment.

In the battery pack 301 of the fourth embodiment, the n session delay means 311 may be provided between the second signal source 112 and the function calculation means 113 instead of the position shown in FIG. The function calculation unit 113 selects the function F (A _k ) according to the delayed second signal K _(k−n) . The function calculation means 113 receives the first signal A _k and calculates the third signal B _k = F (A _k ), which is the function value. The multiplexing means 114 receives the first signal A _k , the second signal K _k and the third signal B _k at the same time, and generates a multiplexed signal obtained by multiplexing these signals.
In this case, the application device 401 provides the n session delay unit 312 between the separation unit 121 and the inverse function calculation unit 211 and deletes the n session delay unit 313 between the separation unit 121 and the comparison unit 123. The inverse function calculation unit 211 selects the function H (B _k ) according to the second signal K _(kn) delayed by n sessions by the n session delay unit 312. The inverse function calculation means 211 receives the third signal B _k , calculates its inverse function value A ′ _k = H (B _k ), and outputs it. The comparison unit 123 compares the inverse function value A ′ _k with the first signal A _k .

<< Embodiment 5 >>
The device to be authenticated, the authentication device, and the authentication system according to the fifth embodiment will be described with reference to FIG. The battery pack (authenticated device) and application device (authentication device) of the fifth embodiment are different from the battery pack and application device of the third embodiment in the positions of the delay means 311, 312, and 313.
FIG. 5 is a block diagram illustrating configurations of the battery pack 501 and the application device 502 according to the fifth embodiment. In FIG. 5, the same numbers are assigned to the same blocks as in FIG. In the battery pack 301 of the third embodiment, the n session delay unit 311 is inserted in series between the function calculation unit 113 and the multiplexing unit 114. In the battery pack 501 of the fifth embodiment, the delay unit 311 is inserted in a path from the first signal source 111 to the multiplexing unit 114. That is, the first signal _{A k} is input to the function calculating unit 113 at the same time as n session delay means 311. The second signal K _k , the third signal B _k output from the function calculation means 113, and the delayed first signal A _(k−n) output from the n session delay means are multiplexed means 114. Is multiplexed. The multiplexed multiplexed signal is transmitted to the application device through the terminal 103.

In the applied device 502, the separating means 121 receives the multiplexed signal and separates it into the delayed first signal A _(kn) , second signal _Kk, and third signal _Bk . The delayed first signal A _(k−n) is input to the function calculation unit 122, and the second signal K _k is input to the function calculation unit 122 via the n session delay unit 312 (K _(k−n) ). The third signal B _k is input to the comparison unit 123 via the n session delay unit 313. The function calculation unit 122 selects the function G (A _(k−n) ) according to the second signal K _(k−n) (another random number). The function calculation means 122 receives the first signal A _(k−n) , calculates the function value B ′ _(k−n) = G (A _(k−n) ), and outputs it.
The comparison means 123 receives the third signal B _(k−n) and the function value B ′ _(k−n), and if B ′ _(k−n) = B _{(k−n), the} mounted battery pack. Is valid, and if B ′ _(k−n) ≠ B _(k−n) , it is determined that the attached battery pack is illegal.
The authentication system according to the fifth embodiment of the present invention has the same effects as those of the third embodiment.

<< Embodiment 6 >>
A device to be authenticated, an authentication device, and an authentication system according to the sixth embodiment of the present invention will be described with reference to FIG. The authentication system according to the sixth embodiment includes a battery pack 501 that is a device to be authenticated and an electronic device that is an authentication device. In the sixth embodiment, the electronic device is an applied device 601 such as a personal computer equipped with a battery pack 501. FIG. 6 is a block diagram showing the configuration of the battery pack 501 and the applied device 601. FIG. 6 shows only the blocks related to the authentication system. In FIG. 6, the same blocks as those in FIG. The battery pack 501 is the same as that in the fifth embodiment, and a description thereof is omitted. The applied device 601 includes a separation unit 121, an inverse function calculation unit 211, n session delay units 312 and 313, a comparison unit 123, a switch 124, and a power supply circuit 125. The battery pack 501 and the application device 601 are connected by a terminal group including the communication terminal 103 and the power supply terminal 104.

The application device 601 of the sixth embodiment has an inverse function calculation unit 211 instead of the function calculation unit 122 of the fifth embodiment, and the n session delay unit 313 is provided between the separation unit 121 and the inverse function calculation unit 211. Is arranged. The separating unit 121 of the applied device 601 includes a first signal A _{(k−n) obtained} by delaying a multiplexed signal input from the battery pack 501 through the terminal 103, a second signal K _k, and a third signal B. The first signal A _(k−n) delayed and separated into _k is transmitted to the comparison means 123, and the second signal K _k and the third signal B _k are respectively transmitted to the n session delay means 312 and 313. Via (K _(k−n) , B _(k−n) ) to the inverse function calculation means 211. The inverse function calculation unit 211 selects the inverse function H (B _(k−n) ) according to the second signal K _(k−n) (another random number). The function calculation means 122 receives the third signal B _(k−n) , calculates the inverse function value A ′ _(k−n) = H (B _(k−n) ), and outputs it.

The comparison unit 123 compares the first signal A _(k−n) with the inverse function value A ′ _(k−n), and if the two match, the mounted battery pack 501 is valid and must match. In this case, it is determined that the attached battery pack 501 is illegal. If the attached battery pack 501 is valid, the function F of the battery pack 501 and the function H of the inverse function calculation unit 211 of the application device 601 are inverse functions. The comparison unit 123 turns on the switch 124 when it is determined that the battery pack 501 is valid, and turns off the switch 124 when it is determined that the battery pack 501 is illegal. The following operations are the same as those in the fifth embodiment.
The authentication system according to the sixth embodiment of the present invention has the same effects as those of the third embodiment.

The battery pack transmits at least one of the first to third signals A, K, and B in a session different from the other. At least one of the first to third signals A, K, and B received and separated in the same session in the application device is not associated with other signals.
The insertion location of the n session delay means is not limited to the above embodiment. That is, if the n session delay means is inserted so that the phase relationship between the setting signal of the function calculation means on the application device side and the input signal is equal to those on the battery pack side, based on the same concept as the above embodiment. good. As a result, it is possible to determine whether the function on the battery pack side and the function on the application device side are the same, or whether they are in an inverse function relationship with each other. Can be judged.
For example, the battery pack may transmit only the second signal K by delaying n sessions and delay the first signal A and the third signal B by n sessions in the application device. For example, the battery pack may transmit two signals among the first to third signals A, K, and B by delaying n sessions (the delay times n1 and n2 of the two signals may be different). ).

In addition, in the multiplexing in the battery pack multiplexing means, if the function to be used cannot be easily overlooked even if A, K, B are known, the first to third signals A, K, B are sequentially applied. In the case of a simple function such as the example given in the first embodiment, the individual components of the signal are replaced with each other according to a predetermined rule and multiplexed as described above. It becomes necessary to do. Of course, this multiplexing method must be kept secret.
Furthermore, in addition to the first to third signals A, K, and B, a random number D that is dummy data (the value of the random number D is different for each session) may be multiplexed. As a result, even if the function is simple, there is less risk of the function being overlooked from the input / output relationship. In this case, the multiplexing method itself is one condition for authentication, and information giving the method is also a key signal.
In the first to sixth embodiments, the function form is set according to the second signal. Instead of this, a configuration may be adopted in which a library of a plurality of functions associated with the value of the second signal K is provided and any one of them is selected according to the second signal K.

  The present invention can be applied to a power supply system of a video camera, a mobile phone, a personal computer or the like.

  The present invention is useful as a device to be authenticated, an authentication device, and an authentication system.

The block diagram which shows the structure of the battery pack and application apparatus of Embodiment 1 of this invention. The block diagram which shows the structure of the battery pack and application apparatus of Embodiment 2 of this invention. FIG. 3 is a block diagram showing the configuration of a battery pack and applied equipment according to Embodiment 3 of the present invention. FIG. 5 is a block diagram showing the configuration of a battery pack and applied devices according to a fourth embodiment of the present invention. FIG. 5 is a block diagram showing the configuration of a battery pack and applied devices according to a fifth embodiment of the present invention. FIG. 7 is a block diagram showing the configuration of a battery pack and applied devices according to Embodiment 6 of the present invention. The block diagram which shows the structure of the battery pack and application apparatus of a prior art example

Explanation of symbols

101, 301, 501, 702 Battery pack 111 First signal source 112 Second signal source 113, 122 Function calculation means 114 Multiplexing means 115 Secondary battery 102, 201, 302, 401, 502, 601, 701 121 Separation means 123 Comparison means 124 Switch 125 Power supply circuit 211 Inverse function calculation means 311, 312, 313 Delay means

Claims (14)

A first signal source that outputs a first signal that is a random number;
A second signal source that outputs a second signal that is a random number;
A plurality of functions, a predetermined function is selected from the plurality of functions based on the second signal, a function value of the first signal is calculated using the predetermined function, and a third signal is calculated. Function calculation means for outputting
Signal multiplexing means for outputting a multiplexed signal obtained by multiplexing the first signal, the second signal, and the third signal;
A device to be authenticated. It further comprises delay means for delaying at least one of the first signal, the second signal, and the third signal input to the signal multiplexing means by a predetermined number of sessions. The device to be authenticated according to claim 1. One signal among the first signal, the second signal, and the third signal input to the signal multiplexing means is delayed by a first session number, and the other one is a second session. The authenticated device according to claim 1, further comprising delay means for delaying the number of times. The signal multiplexing means arranges the individual components of the first signal, the second signal, and the third signal by replacing each other according to a predetermined rule. The device to be authenticated according to claim 3. 5. The signal multiplexing unit according to claim 1, wherein the signal multiplexing unit further multiplexes a dummy signal in addition to the first signal, the second signal, and the third signal. The device to be authenticated according to claim 1. The device to be authenticated according to any one of claims 1 to 5, wherein the device to be authenticated is a battery pack. The multiplexed signal sent from the device to be authenticated is input, and the first signal is input to the function selected based on the first signal, the second signal, and the second signal, and is derived. Signal separating means for separating the third signal,
A function calculation means for selecting the same function as the device to be authenticated based on the second signal, calculating a function value of the first signal with the function, and outputting the function value;
A comparison means for comparing the third signal and the function value, permitting a connection with the device to be authenticated if they are the same, and prohibiting a connection with the device to be authenticated if they are not the same;
An authentication apparatus comprising: The multiplexed signal sent from the device to be authenticated is input, and the first signal is input to the function selected based on the first signal, the second signal, and the second signal, and is derived. Signal separating means for separating the third signal,
Selecting an inverse function of a function having a plurality of inverse functions, from which the third signal is derived based on the second signal, and calculating an inverse function value of the third signal using the inverse function; , Function calculation means to output,
A comparing means for comparing the first signal and the inverse function value, permitting a connection with an authenticated device if both are the same, and prohibiting a connection with the authenticated device if both are the same;
An authentication apparatus comprising: A delay means;
The first signal or the second signal included in the multiplexed signal is a signal delayed by a predetermined number of sessions,
The delay means delays the first signal or the second signal output from the signal separation means by a predetermined number of sessions, whereby the function calculation means causes the first signal and the first signal to correspond to each other. The authentication apparatus according to claim 7, wherein two signals are input. A delay means;
The second signal or the third signal included in the multiplexed signal is a signal delayed by a predetermined number of sessions,
The delay means delays the second signal or the third signal output from the signal separation means by a predetermined number of sessions, whereby the function calculation means causes the second signal and the second signal to correspond to each other. The authentication apparatus according to claim 8, wherein a signal of 3 is input. A delay means;
At least one of the first signal, the second signal, and the third signal included in the multiplexed signal is a signal delayed by a predetermined number of sessions,
The delay means delays the third signal output from the signal separation means or the function value output from the function calculation means by a predetermined number of sessions, whereby the comparison means correspond to the third signals corresponding to each other. 8. The authentication apparatus according to claim 7, wherein a signal and the function value are input. A delay means;
At least one of the first signal, the second signal, and the third signal included in the multiplexed signal is a signal delayed by a predetermined number of sessions,
The delay means delays the first signal output from the signal separation means or the inverse function value output from the function calculation means by a predetermined number of sessions, whereby the comparison means correspond to the first corresponding to each other. The authentication apparatus according to claim 8, wherein the signal and the inverse function value are input. The device to be authenticated is a battery pack including a secondary battery, and if the battery pack is valid, the electronic device is supplied with power from the secondary battery of the battery pack and / or charges the secondary battery of the battery pack. The authentication apparatus according to claim 7, wherein the authentication apparatus is an apparatus. The apparatus to be authenticated according to claim 1 and the apparatus to be authenticated according to claim 7 or claim 8, or the apparatus to be authenticated according to claim 2 and claim 9 or claim 10. An authentication system comprising: the authentication device according to claim 3; or the authentication target device according to claim 3 and the authentication device according to claim 11 or 12.

Images