JP2005092499A - Application control device and application control method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an application control device and an application control method that increase security further at application execution. <P>SOLUTION: An encryption module control part 104 monitors an IC card 200 after the IC card 200 and an application control part 102 successfully authenticate a personal identification number and a user respectively to enable the use of an application 108. When the IC card 200 is removed from a reader/writer 112, the encryption module control part 104 outputs a restriction instruction to the application control part 102. In response to the instruction, the application control part 102 restricts the use of the application 108. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

  The present invention relates to an application control apparatus that controls execution of an application.

  In recent years, in order to ensure safety during execution of an application and prevent an application from being executed illegally, it is becoming common to perform predetermined authentication during execution of the application. As an authentication method, there is a method using an encryption key given to a user (see, for example, Patent Document 1).

  Authentication in a public key infrastructure (PKI) is one of them. In authentication in this PKI, a secret key is used. The secret key is generally stored in an IC card held by the user. When a user inserts an IC card into a personal computer or the like and enters a personal identification number (PIN) corresponding to the IC card, the IC card authenticates the personal identification number, and if the authentication is successful, it is secret. Generate an electronic signature using the key.

An encryption module, which is a program for providing an encryption function, installed in a personal computer or the like confirms that the authentication of the personal identification number in the IC card is successful. Thereafter, the application or the like authenticates the user based on the electronic signature, and when the user authentication is successful, the application can be used.
JP 2001-318896 A (pages 3-5, FIG. 1)

  However, in the application control method described above, once the application becomes available, the use of the application is not restricted at all. For this reason, even if the user removes the IC card from a personal computer or the like without leaving the application, the application remains in a usable state and may be illegally used.

  The present invention solves the above-described problems, and an object of the present invention is to provide an application control apparatus and an application control method that are intended to further improve safety during application execution.

  In order to solve the above-described problems, the present invention provides a personal identification number output means for outputting a personal identification number to an IC card held by a user, and authentication of the personal identification number in the IC card. Is successful and the IC card can be used, the user authentication means for authenticating the user and the user authentication by the user authentication means are successful and the application can be used. An application control apparatus comprising: a condition determination unit that determines whether or not a predetermined condition is satisfied; and an application restriction unit that restricts use of the application when the predetermined condition is satisfied.

  According to a second aspect of the present invention, in the application control device according to the first aspect, the user authentication means is an electronic device generated using an encryption key stored in the IC card. User authentication is performed based on the signature.

  According to a third aspect of the present invention, in the application control device according to the first or second aspect, the IC card insertion port includes the IC card insertion port, and the condition determination unit is connected to the IC card insertion port. It is determined whether or not the IC card has been removed.

  Further, according to a fourth aspect of the present invention, in the application control device according to any one of the first to third aspects, the condition determination unit is configured to determine whether or not the input device has not been operated for a predetermined time. Determine.

  Further, according to a fifth aspect of the present invention, in the application control device according to any one of the first to fourth aspects, the application restricting unit restricts the use of the application in accordance with the instruction from the user. I do.

  Further, according to a sixth aspect of the present invention, in the application control apparatus according to any one of the first to fifth aspects, the application restricting unit performs either termination or temporary suspension of the application.

  According to the present invention, the personal identification number is output to an IC card held by the user, and the user authentication is performed when the personal identification number is successfully authenticated in the IC card. After the user authentication is successful and the application becomes usable, it is determined whether or not a predetermined condition is satisfied, and the use of the application is restricted when the predetermined condition is satisfied. This is an application control method.

  In the present invention, even after the authentication of the personal identification number is successful and the user is successfully authenticated and the application can be used, the use of the application is restricted when a predetermined condition is satisfied. For this reason, it becomes possible to improve the safety | security at the time of application execution more than before.

  According to the present invention, it is possible to further improve safety when executing an application.

  The best mode for carrying out the present invention will be described below with reference to the drawings.

  FIG. 1 is a diagram illustrating a configuration example of an information processing apparatus as an application control apparatus according to the present embodiment. An information processing apparatus 100 illustrated in FIG. 1 is a personal computer, for example, and includes an application control unit 102, a cryptographic module storage unit 104, a storage unit 106, a reader / writer 112, a keyboard 114, a mouse 116, and a display unit 118.

  The storage unit 106 stores an application 108 and an IC card cryptographic module 110 that is a program that provides a cryptographic function in the public key cryptosystem. The application control unit 102 controls execution of the application 108 stored in the storage unit 106. The cryptographic module control unit 104 controls the execution of the IC card cryptographic module 110 stored in the storage unit 106. The reader / writer 112 has an insertion slot for the IC card 200 held by the user. When the IC card 200 is inserted into the insertion slot, the reader / writer 112 inputs information from the IC card 200 into the information processing apparatus 100. Then, a process of outputting information from the information processing apparatus 100 to the IC card 200 is performed.

  FIG. 2 is a diagram illustrating a program structure in the information processing apparatus 100. As shown in the figure, the operation system 151 has a resource management module 152. Further, the resource management module 152 includes an IC card encryption module 110 and an encryption module 153 that provides an encryption function using an encryption key stored in a storage device (for example, a hard disk) other than the IC card 200. The application 108 is executed under the control of the operation system 151.

  Next, operations of the information processing apparatus 100 and the IC card 200 will be described. FIG. 3 is a sequence diagram illustrating operations of the information processing apparatus 100 and the IC card 200. In the following, it is assumed that the IC card 200 is initially inserted in the reader / writer 112 in the information processing apparatus 100.

  When executing the application 108 stored in the storage unit 106, the application control unit 102 in the information processing apparatus 100 requests the cryptographic module control unit 104 for user authentication (step 201). The cryptographic module control unit 104 activates the IC card cryptographic module 110 stored in the storage unit 106. Upon receiving the user authentication request from the application control unit 102, the cryptographic module control unit 104 requests the IC card 200 to confirm the access right via the reader / writer 112 (step 202).

  When confirmation of this access right is requested, the IC card 200 encrypts that it cannot be used because the authentication of the personal identification number (PIN) has not been executed, via the reader / writer 112 in the information processing apparatus 100. The module control unit 104 is notified (step 203).

  When the cryptographic module control unit 104 in the information processing apparatus 100 receives a notification that the use is not possible from the IC card 200, the cryptographic module control unit 104 displays on the display unit 118 a screen that prompts the user to enter a personal identification number (a personal identification number input screen). A display process is performed (step 204).

  FIG. 4 is a diagram illustrating an example of a password input screen. The personal identification number input screen shown in the figure is how to restrict the personal identification number input field 301 for allowing the user to input the personal identification number and the application 108 when the IC card 200 is taken out from the reader / writer 112. Is configured by a restriction selection field 302 for allowing the user to select.

  Again, referring back to FIG. When the password input screen is displayed on the display unit 118 and the user inputs the code number and selects the restriction method of the application 108 by operating the keyboard 114 or the mouse 116, the cryptographic module control unit 104 The entered password is output to the IC card 200 via the reader / writer 112 (step 205).

  When the personal identification number is input from the cryptographic module control unit 104 in the information processing apparatus 100, the IC card 200 authenticates the personal identification number (step 206). Specifically, the IC card 200 compares the personal identification number stored in advance with the personal identification number corresponding to the user and the inputted personal identification number, and determines that the identification number has been successfully authenticated if they match. To do. If the authentication of the personal identification number fails, the IC card 200 notifies the use failure in step 203 again. On the other hand, the cryptographic module control unit 104 in the information processing apparatus 100 again performs the process of displaying the personal identification number input screen in step 204, and further outputs the input personal identification number in step 205. Then, the IC card 200 authenticates the personal identification number in step 206 again. However, when the authentication of the personal identification number in the IC card 200 fails continuously for a predetermined number of times, the series of operations ends.

  When the authentication of the personal identification number is successful, the IC card 200 generates an electronic signature using a secret key stored in advance (step 207). Specifically, the IC card 200 generates a digital signature by encrypting predetermined data with a secret key.

  Further, the IC card 200 outputs the generated electronic signature to the cryptographic module control unit 104 via the reader / writer 112 in the information processing apparatus 100 (step 208).

  When the IC card 200 outputs an electronic signature, the cryptographic module control unit 104 in the information processing apparatus 100 confirms that the IC card 200 can be used (step 209). When the IC card 200 can be used, the cryptographic module control unit 104 notifies the application control unit 102 to that effect (step 210).

  Upon receiving a notification from the cryptographic module control unit 104 that the IC card 200 can be used, the application control unit 102 authenticates the user (step 211). Specifically, the application control unit 102 decrypts the input electronic signature with a public key corresponding to the secret key stored in the IC card 200. Then, the application control unit 102 determines that the user has been successfully authenticated when the decryption is correctly performed. When user authentication fails, the series of operations ends. If the user authentication is successful, the application control unit 102 makes the application 108 available (step 212).

  The cryptographic module control unit 104 monitors the IC card 200 at a predetermined cycle after the application becomes available in step 212 (step 213). For example, when the insertion port of the reader / writer 112 has a USB (Universal Serial Bus) interface, and the IC card 200 is connected via the USB interface, the cryptographic module control unit 104 determines whether the reader / writer 112 is connected to the reader / writer 112. To instruct the transmission of the USB token. In response to this instruction, the reader / writer 112 transmits a USB token to the IC card 200 at a predetermined cycle. If a response to the transmitted USB token is not returned, the reader / writer 112 notifies the cryptographic module control unit 104 to that effect. When receiving the notification, the cryptographic module control unit 104 determines that the IC card 200 has been removed from the reader / writer 112.

  When the IC card 200 is removed from the reader / writer 112 (step 214), the cryptographic module control unit 104 outputs a restriction command for the application 108 to the application control unit 102 (step 215).

  In response to the restriction command, the application control unit 102 restricts the use of the application 108 that can be used in step 211 (step 216). At this time, when the user has selected the restriction method of the application 108 together with the input of the personal identification number on the personal identification number input screen shown in FIG. 4, the application control unit 104 selects the application according to the selection. 108 is forcibly terminated or temporarily stopped (locked). When the application 108 is temporarily stopped, the application control unit 102 performs a process of displaying a screen saver image on the display unit 118, for example. Then, the application control unit 102 restarts the application 108 when the user inputs a password for canceling the image display of the screen saver and authentication of the password is successful.

  As described above, in the information processing apparatus 100, after the authentication of the personal identification number by the IC card 200 and the authentication of the user by the application control unit 102 are successful and the use of the application 108 becomes possible, the cryptographic module control unit 104 Monitors the IC card 200, and when the IC card 200 is removed from the reader / writer 112, the application control unit 102 restricts the use of the application 108 that can be used. For this reason, for example, when the user removes the IC card 200 from the information processing apparatus 100 without leaving the application 108, the application 108 is prevented from being continuously usable. , Safety at the time of application execution can be improved.

  By the way, in the above-described embodiment, the use of the application 108 is restricted when the condition that the IC card 200 is removed from the reader / writer 112 is satisfied. However, when the other conditions are satisfied, the application 108 Use may be restricted.

  Specifically, after the application 108 becomes available, the cryptographic module control unit 104 monitors the operation of the keyboard 114 and the mouse 116 that are input devices. The cryptographic module control unit 104 determines that the user has left when the keyboard 114 and the mouse 116 have not been operated for a predetermined time or longer, and restricts the application 108 to the application control unit 102. Output instructions. The application control unit 102 regulates the use of the application 108 according to the regulation command.

  In this case, for example, when the user leaves the application 108 without exiting the IC card 200 from the information processing apparatus 100, the application 108 can be continuously used. Can be improved, and the safety at the time of application execution can be improved.

It is a figure which shows the structural example of information processing apparatus. It is a figure which shows an example of a program structure. It is a sequence diagram which shows an example of operation | movement of an information processing apparatus and an IC card. It is a figure which shows an example of a PIN code input screen.

Explanation of symbols

DESCRIPTION OF SYMBOLS 100 Information processing apparatus 102 Application control part 104 Cryptographic module control part 106 Storage part 108 Application 110 IC card cryptographic module 112 Reader / writer 114 Keyboard 116 Mouse 116 Display part 200 IC card

Claims (7)

A personal identification number output means for outputting the personal identification number to an IC card held by the user;
User authentication means for authenticating the user when the authentication of the personal identification number is successful in the IC card and the IC card can be used;
Condition determining means for determining whether or not a predetermined condition is satisfied when the user authentication by the user authenticating means is successful and the application becomes usable;
Application restriction means for restricting the use of the application when the predetermined condition is satisfied;
An application control device comprising: The application control device according to claim 1,
The user authentication unit is an application control apparatus that performs user authentication based on an electronic signature generated using an encryption key stored in the IC card. In the application control device according to claim 1 or 2,
An insertion slot for the IC card;
The condition determining means is an application control apparatus that determines whether or not the IC card has been removed from the IC card insertion slot. In the application control apparatus according to any one of claims 1 to 3,
The condition determining means is an application control apparatus that determines whether or not no operation of the input device has continued for a predetermined time. In the application control device according to any one of claims 1 to 4,
The application control unit is an application control device that controls the use of an application according to an instruction from the user. In the application control device according to any one of claims 1 to 5,
The application control unit is an application control device that performs either termination or temporary suspension of the application. The PIN is output to the IC card held by the user,
When the authentication of the personal identification number is successful in the IC card, the user is authenticated,
After the user authentication is successful and the application is available, it is determined whether a predetermined condition is satisfied,
An application control method for restricting use of the application when the predetermined condition is satisfied.

Images