JP2006041714A - Authentication and authentication response system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide authentication disabling tapping and fraud of authentication information of a communication terminal and to provide an authentication response system. <P>SOLUTION: An authentication requester side obtains y1, y2 for random number data R1, R2 by using an undisclosed eigen value N as a parameter with a prescribed method, obtains Y by applying exclusive logical OR to the y1, y2, decreases the number of digits of the Y by a prescribed method to obtain Y', converts the Y' into a binary value and bisects the result to obtain numerals Y1', Y2', stores the Y1', Y2' as authentication encryption data and authentication response identification data, respectively, and transmits the data Y1', R1, and R2 to an authentication side. The authentication side obtains y1, y2 from the received R1, R2 and the eigen value N, applies exclusive logical OR to the y1, y2 to obtain the result Y, obtains Y', Y1', Y2', from the Y by the same method as that of the authentication requester side, stores the Y1', Y2' as authentication identification data and authentication response encryption data respectively, compares the received Y1' with the authentication identification data Y1', determines authentication OK when they are coincident with each other, the authentication side transmits the Y2' to the authentication requester side, the authentication requester side compares the received Y2' with the authentication response identification data Y2' stored by the requester side, and determines authentication response OK when they are coincident with each other. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to authentication and an authentication response system, and more particularly to “spoofing” and authentication and an authentication response system.

  With the progress of the ubiquitous society such as mobile phones and PDAs, various communication terminals are used in a very wide range. In such a communication field, there are many communication terminals charged for calls and data transmission / reception, such as mobile phones. In addition, services that make payments using the communication terminals are also becoming reality.

  In communication terminals that involve billing and settlement, it is extremely important and essential to use the original owner of the communication terminal. For this purpose, personal authentication is essential, and various techniques have been proposed as authentication techniques. Among the most widely used mobile phones, if it is possible to “spoof” a person who is not a true user, the damage can be serious considering the expansion of the payment function. In such a state, another person who is not a true user (person) “spoofs” the person. More precisely, the mobile phone owned by another person functions as the mobile phone of the user. That is, there arises a problem due to the presence of a so-called clone mobile phone. If the existence of this clone mobile phone becomes clear (if the carrier accepts it), it will be possible to avoid billing and settlement by “post-rejection” in which the user himself / herself rejects the user ’s own behavior afterwards. The expansion of will become larger.

In a mobile phone, user authentication (User Authentication) for authenticating a user is usually performed. In addition to this authentication, authentication technology (Message
Authentication, so-called electronic signature).

  In order to create a clone mobile phone for the purpose of “spoofing”, user authentication technology must be passed, and information necessary for user authentication must be acquired.

  In conventional user authentication, authentication processing is executed based on authentication information of the mobile phone itself and individual user information. As mobile phone authentication information, for example, a fixed authentication identifier β assigned to the mobile phone by a mobile phone manufacturer, for example, a variable authentication identifier α assigned to the mobile phone by a communication carrier, and Various types of authentication information such as assigned telephone numbers and IP addresses are set. The flow of giving the authentication information and the communication flow will be described with reference to FIG.

  In FIG. 3, a manufacturing company 100 that manufactures a mobile phone passes a mobile phone in which, for example, an authentication identifier β as a fixed authentication identifier is given to the manufactured mobile phone to the communication carrier 200 via the distribution system B, For example, an authentication identifier α as a variable authentication identifier is given by the user 200 and delivered to the store 300 via the distribution system A. In the store 300, a telephone number and an IP address are assigned and handed to the user 400. The user 400 uses a mobile phone to which various kinds of authentication information including authentication identifiers α and β, a telephone number, and an IP address are used, and performs communication and data information exchange via a communication line. Is sent to the authentication server 500 on the side and authentication processing is executed.

  In FIG. 3, an illegal identifier obtains an authentication identifier β in the manufacturing company 100 or distribution system B (highly available in the distribution system B), and the inside of the communication carrier 200 or distribution system A. Authentication identifier α is likely to be obtained at the stage (highly available in distribution system A), and it is easy to obtain telephone number information and IP address information, which are publicly available information. Thus, a so-called clone mobile phone using various kinds of authentication information necessary for the above can be created.

  Further, even if it is difficult to obtain the authentication identifier β from the manufacturing company 100 or the authentication identifier α from the communication carrier 200, the user 400 is executed first when making a call or data communication via the communication line. When the above-mentioned type of authentication information necessary for authentication processing is transmitted to the authentication server 500 via the communication line, there is a risk that an illegal person may obtain the authentication identification information by eavesdropping or interception via the communication line. is there.

  Therefore, in order to avoid eavesdropping and interception of authentication information transmitted from the mobile phone to the authentication server, the transmitted authentication information is encrypted and the authentication information encrypted on the authentication server side is decrypted. Later, a system for executing authentication processing has been proposed.

  In such encryption processing, safety is often determined according to the amount of calculation required for encryption processing and decryption processing (decryption processing), and absolute safety that makes it impossible to create a clone mobile phone In order to obtain the above, it is necessary to increase the amount of calculation required. However, in a mobile phone that requires a large amount of calculation such as image communication, an LSI and a memory that already perform complicated operations are required for the processing. Therefore, considering the problem of power consumption, it is difficult to mount advanced encryption with a large calculation amount in a mobile phone in which cost reduction, power saving, and downsizing are the most important issues.

  On the other hand, a storage medium (ROM) in which the authentication information is stored is mounted on the mobile phone, and the authentication information (authentication identifier) may be completely stolen and copied from the storage medium. According to this copying technology, it is possible to steal all authentication identifiers, encryption algorithms, etc. in the storage medium during the distribution process from the manufacture to the user of the mobile phone. In this case, even if it is encrypted, no countermeasure can be taken. . For such a copy of a storage medium (ROM), a measure that makes illegal reading of information stored in the ROM impossible is desired. However, since the solution of this problem is not the main subject of the present invention, no further mention will be made.

  As described above, if the authentication information can be obtained, it is possible to create a clone mobile phone, etc., and if you use the function as an electronic wallet for third-generation to fourth-generation mobile phones, damage will be caused by communication charges In addition to the general business transactions of society, it expands and becomes a social problem. Also, in groups that are planning large-scale criminal activities such as drug trafficking, clone mobile phones may be used to escape police eavesdropping and tracking during crimes.

  The above description is about a mobile phone, but the above-mentioned problem is the same for a communication terminal that employs a similar system. The same applies to systems where authentication is important, such as electronic commerce.

As an example of an authentication system in electronic commerce, as disclosed in Patent Document 1, a user ID and a password are transmitted from a communication terminal at regular intervals, and the server side of the transaction system performs authentication, and double login or There is a system that prevents illegal activities such as “spoofing” from the middle of a transaction.
Japanese Patent Laid-Open No. 2000-215241 (paragraph numbers [0008] to [0017], FIG. 1)

  The present invention has been made in view of the above-described problems of the prior art, and its main purpose is to provide an authentication and authentication response system that makes it impossible to wiretap or fraud authentication information of a communication terminal. .

  Another object of the present invention is to provide an authentication and authentication response system that prevents creation of a clone mobile phone.

  Still another object of the present invention is to provide an authentication and an authentication response system for preventing “spoofing”.

  In order to solve the above-described problems, the authentication and authentication response system according to the present invention employs the following characteristic configuration.

(1) On the authentication request side, two encryptions are executed by executing a predetermined encryption algorithm for each of the two sets of random data R ₁ and R _{2 using} at least one private eigenvalue N as a parameter. Data y ₁ and y ₂ are obtained, exclusive OR of the obtained two encrypted data y ₁ and y ₂ is obtained to obtain an exclusive OR value Y, and the obtained exclusive OR value Y is 2 The numerical values Y1 and Y2 which are converted into a hexadecimal value and further divided into two are obtained, one numerical value Y1 obtained by dividing into two is stored as authentication encrypted data, and the other numerical value Y2 is stored as authentication response identification data. the random number data R _1, R ₂ and the authentication encryption data Y1 transmitted to the authenticator,
On the authentication side, the predetermined encryption algorithm using the two sets of received random number data R ₁ and R ₂ and the eigenvalue N based on the initial value of the same value as that of the authentication requester registered in advance from the authentication requester as a parameter. To obtain the two encrypted data y ₁ and y ₂ , obtain the exclusive OR of the two obtained encrypted data y ₁ and y ₂ , and obtain the exclusive OR value Y The exclusive OR value Y is converted into a binary value by the same method as the above-mentioned authentication requester, and further divided into two values Y1 and Y2, and the obtained one value Y1 is used as authentication identification data, and the other value Y2 is obtained. Each of them is stored as authentication response encryption data, and the authentication encryption data Y1 received from the authentication requesting side is compared with the authentication identification data Y1, and when both values match, it is determined that the authentication is OK. Send the authentication response encryption data Y2 to the authentication requester The authentication request side compares the authentication response encryption data Y2 received from the authentication side with the authentication response identification data Y2 stored in advance by the authentication request side, and determines that the authentication response is OK when both values match. Authentication response system.

(2) The authentication request side executes a predetermined encryption algorithm for each of the two sets of random number data R ₀₁ and R _{02 in} the initial state, using at least one private eigenvalue N ₀ as a parameter. obtains two enciphered data y ₀₁ and y _02, taking two exclusive OR of enciphered data y ₀₁ and y ₀₂ obtained determined the exclusive-OR value Y _0, obtained exclusive seeking a number Y1 _0, Y2 ₀ where the sum value Y ₀ is converted further divided into two binary values, numeric values Y1 ₀ of one obtained by the authentication encryption data, saving the other numerical Y2 ₀ as an authentication response identification data The two sets of random number data R ₀₁ and R ₀₂ and the authentication encryption data Y1 ₀ are transmitted to the authentication side,
The subsequent authentication request side selects either one of the encrypted data y ₀₁ and y ₀₂ by a predetermined method and assigns the unique value N ₁ and each of the two new sets of random number data R ₁₁ and R ₁₂ . Using the eigenvalue N ₁ as a parameter, an exclusive OR value Y ₁ obtained by taking the exclusive OR of the two encrypted data y ₁₁ and y ₁₂ obtained by executing the predetermined encryption algorithm The numerical values Y1 ₁ and Y2 ₁ converted into binary values and further divided into two are obtained, _one of the obtained numerical values Y1 ₁ is used as authentication encryption data, and the other numerical value Y2 ₁ is stored as authentication response identification data. the random number data R _11, R ₁₂ and the authentication encryption data Y1 ₁ transmits to the authenticator,
On the authentication side, the predetermined encryption algorithm is used with the received two sets of random number data R ₀₁ and R ₀₂ and the eigenvalue N ₀ having the same value as that of the authentication requesting side registered in advance from the authentication requesting side as parameters. obtains an exclusive OR value Y ₀ to the exclusive OR obtained by taking the two enciphered data y ₀₁ and y ₀₂ obtained by executing the exclusive-OR value Y ₀ obtained the authentication The numerical values Y1 ₀ and Y2 ₀ which are converted into binary values by the same method as the billing side and further divided into two are obtained, and one of the obtained numerical values Y1 ₀ is used as authentication identification data, and the other numerical value Y2 ₀ is used as authentication response encryption data. each saved, the said authentication requesting authentication is received from the side encrypted data Y1 ₀ compares the authentication identification data Y1 _0, it is determined that the authentication OK when both values match, the authentication response in the subsequent authentication side the encrypted data Y2 ₀ transmits to the authentication requesting side, before the authentication requesting side Comparing the authentication response encrypted data Y2 ₀ and the authentication requesting side authentication response identification data Y2 ₀ are previously stored received from the authentication side, it is determined that authentication response OK when both values match,
The subsequent authentication side, the encrypted data y ₀₁ and the eigenvalues N ₁ assigned selected either a predetermined authentication requesting side and the same method of y _02, received the new two sets of random number data R ₁₁ and R ₁₂ , obtained by taking the exclusive OR of the two encrypted data y ₁₁ and y ₁₂ obtained by executing the predetermined encryption algorithm using the eigenvalue N ₁ as a parameter. The exclusive OR value Y ₁ is obtained, and the obtained exclusive OR value Y ₁ is converted into a binary value by the same method as the authentication requesting side, and further divided into two numerical values Y1 ₁ and Y2 ₁ are obtained. was one of the numeric Y1 ₁ authentication identification data, save each other numerical Y2 ₁ as an authentication response encrypted data, the comparing the authentication identification data Y1 ₁ and the authentication encryption data Y1 ₁ received from the authentication requesting side , Processing to determine that authentication is OK when both values match Run the cascade, the subsequent transmit the authentication response encrypted data Y2 ₁ in authenticator to the authentication requesting side, authentication requesting side is to the store the authentication requesting side from authenticator and the authentication response encrypted data Y2 ₁ received in advance authentication and authorization response system authentication response by comparing the identification data Y2 _1, determines that the authentication response OK when both values match you are.

(3) On the authentication request side, a random number generator that outputs two sets of random number data R ₁ and R ₂ ,
An encryption unit for obtaining two encrypted data y ₁ and y ₂ obtained by executing a predetermined encryption algorithm using at least one private eigenvalue N as a parameter;
An exclusive OR part that takes an exclusive OR value Y of the obtained two encrypted data y ₁ and y ₂ ;
A dividing unit that outputs the authentication encrypted data Y1 and the authentication response identification data Y2 obtained by converting the exclusive OR value Y into a binary value and further dividing into two, and the two sets of random number data R ₁ and R ₂ And a transmission unit for transmitting the authentication encrypted data Y1 to the authentication side,
On the authentication side, a receiving unit that receives two sets of random number data R _{1 and} R ₂ and authentication encrypted data Y ₁ transmitted from the transmitting unit;
The predetermined encryption algorithm using the two sets of random number data R ₁ and R ₂ received by the receiving unit and the eigenvalue N based on the initial value of the same value as that of the authentication requester registered in advance from the authentication requester as a parameter And a decryption unit for obtaining _two encrypted data y ₁ and y ₂ ,
An exclusive OR unit that takes an exclusive OR of the _two encrypted data y ₁ and y ₂ output from the decryption unit and outputs an exclusive OR value Y;
Authentication exclusive data Y1 and authentication response encryption data Y2 obtained by converting the exclusive OR value Y obtained by the exclusive OR part into a binary value by the same method as the authentication requesting side and further dividing into two values are obtained. A dividing unit that outputs, a comparison unit that compares the authentication encrypted data Y1 received from the authentication requesting side with the authentication identification data Y1, and determines that the authentication is OK when both values match; A transmitting unit for transmitting response encrypted data Y2, a receiving unit for receiving authentication response encrypted data Y2 on the subsequent authentication requesting side, authentication response identifying data Y2 stored in advance on the authentication response encrypted data Y2 and the authentication requesting side, and An authentication and authentication response system comprising a comparison unit that compares the two values and confirms that both values match.

(4) At the subsequent authentication request side in (2) above, one of the encrypted data y ₁₁ and y ₁₂ is selected and assigned by a predetermined method and _two new sets of random data R ₂₁ , For each of R ₂₂ , the exclusive value obtained by taking the exclusive OR of the two encrypted data y ₂₁ and y ₂₂ obtained by executing the predetermined encryption algorithm using the eigenvalue N ₂ as a parameter The logical sum Y ₂ is obtained, the obtained exclusive logical sum Y ₂ is converted into a binary value, and further divided into _two numerical values Y 1 ₂ and Y _{2 2,} and the obtained one numerical value Y 1 ₂ is used as the authentication encryption data. And the other numerical value Y2 ₂ is stored as authentication response identification data, and the two sets of random number data R ₂₁ and R ₂₂ and authentication encryption data Y1 ₂ are transmitted to the authentication side,
The subsequent authentication side, the encrypted data y ₁₁ and the eigenvalues N ₂ assigned selected either a predetermined authentication requesting side and the same method of y _12, received the new two sets of random number data R Each of ₂₁ and R ₂₂ was obtained by taking the exclusive OR of the two encrypted data y ₂₁ and y ₂₂ obtained by executing the predetermined encryption algorithm using the eigenvalue N ₂ as a parameter. The exclusive OR value Y ₂ is converted into a binary value and further divided into two numerical values Y1 ₂ and Y2 _{2. The} obtained numerical value Y1 ₂ is used as authentication identification data, and the other numerical value Y2 ₂ is used as the authentication response encryption. The authentication encryption data Y1 ₂ received from the authentication requesting side and the authentication identification data Y1 ₂ are compared with each other, the authentication identification data Y12 is compared, and when both values match, the authentication is OK. the encrypted data Y2 ₂ transmits the authentication requesting side, sure Treated with the requesting side that compares the authentication response encrypted data Y2 ₂ and the authentication requesting side in advance are stored authentication response identification data Y2 ₂ received from the authentication-end, it is determined that the authentication response OK when both values match A cascade of authentication and authentication response system.

(5) The authentication and authentication response system according to (2) or (4), wherein only the authentication requesting side and the authentication side are known and private information is the eigenvalue N _{0 in the} initial state.

(6) The authentication and authentication response system according to any one of (1) to (5), wherein the unique value N ₀ is an ID (authentication identifier) determined for each authentication requester.

  (7) The authentication and authentication response system according to any one of (1) to (6), wherein data transmission between the authentication requesting side and the authentication side is performed via a communication line.

(8) The authentication and authentication response system according to any one of (1) to (7), wherein the eigenvalue N ₀ is an eigenvalue determined for each mobile phone.

  (9) The authentication and authentication response system according to any one of (1) to (7), wherein the authentication target is a communication terminal.

  (10) The authentication and authentication response system according to any one of (1) to (7), wherein the authentication target is a communicator who performs communication.

  (11) The authentication and authentication response system according to any one of (1) to (10), wherein the predetermined encryption algorithm is a calculation process of a one-way function.

(12) The calculation process of the one-way function is such that two types of random numbers are R ₁ and R ₂ , the eigenvalue is N, and the encrypted data is y ₁ and y ₂ .
y ₁ = (R ₁ + N) mod NR ₁ > N
y ₂ = (R ₂ + N) mod NR ₂ > N
Is executed, it obtains the encrypted data y ₁ and y _2, obtains an exclusive OR value Y takes two exclusive OR of the encrypted data y ₁ and y ₂ obtained exclusively obtained Decrease the number of digits of the logical sum Y by a predetermined method to obtain Y ', obtain the random numbers R ₁ and R ₂ as known numerical values, and obtain N' from Y 'as the forward calculation, and obtain N from Y' This is defined as reverse calculation, and the forward calculation can be easily calculated, but the reverse calculation for obtaining N from Y ′ obtained by reducing the number of digits of the exclusive OR value Y by a predetermined method. Since the calculation formula does not exist, the authentication and authentication response system according to the above (11) can be calculated and prevent eavesdropping and fraud of the eigenvalue N.

(13) On the authentication requesting side, for each of the two sets of random number data R ₁ and R ₂ , 1 is assigned to the most significant digit of the binary system with at least one secret and two or more digits in hexadecimal notation. Using the specified eigenvalue N as a parameter, a predetermined encryption algorithm is executed to obtain two encrypted data y ₁ and y _{2, and} an exclusive OR of the obtained _two encrypted data y ₁ and y ₂ is obtained. An exclusive OR value Y is obtained, and a numerical value Y ′ obtained by reducing the number of digits of the obtained exclusive OR value Y by a predetermined method is converted into a binary value and further divided into two numerical values Y1 ′ and Y2 ′. One of the obtained numerical values Y1 ′ is used as authentication encryption data, the other numerical value Y2 ′ is stored as authentication response identification data, and the two sets of random number data R ₁ and R ₂ and authentication encryption data Y1 ′ are authenticated. To the side,
On the authentication side, the predetermined encryption algorithm using the two sets of received random number data R ₁ and R ₂ and the eigenvalue N based on the initial value of the same value as that of the authentication requester registered in advance from the authentication requester as a parameter. To obtain the two encrypted data y ₁ and y ₂ , obtain the exclusive OR of the two obtained encrypted data y ₁ and y ₂ , and obtain the exclusive OR value Y A numerical value Y ′ obtained by reducing the number of digits of the exclusive OR value Y by the same method as that for the authentication requesting side, which has been determined in advance, is converted into a binary value by the same method as the authentication requesting side, and further divided into two values Y1 ′ and Y2 The obtained numerical value Y1 ′ is stored as authentication identification data, the other numerical value Y2 ′ is stored as authentication response encrypted data, and the authentication encrypted data Y1 ′ received from the authentication requesting side and the authentication identification data Y1 'is compared, and if both values match, it is determined that the authentication is OK. Subsequently, the authentication side transmits the authentication response encryption data Y2 ′ to the authentication requesting side, and the authentication requesting side receives the authentication response encryption data Y2 ′ received from the authentication side and the authentication response identification data Y2 stored in advance by the authentication requesting side. An authentication and authentication response system that compares' and determines that the authentication response is OK when both values match.

(14) At the requesting side of authentication, for each of the two sets of random number data R ₀₁ and R _{02 in} the initial state, at least one predetermined non-disclosure hexadecimal two or more digits and the most significant digit of the binary notation the eigenvalues N ₀ assigned 1 as a parameter, and executes a predetermined encryption algorithm obtains two enciphered data y ₀₁ and y _02, exclusive of the two enciphered data y ₀₁ and y ₀₂ obtained obtains an exclusive OR value Y ₀ by taking the sum, converts a number Y ₀ 'with a reduced number of digits of the exclusive OR value Y ₀ obtained by a predetermined method to binary value was further divided into two Numeric values Y1 ₀ ′, Y2 ₀ ′ are obtained, one of the obtained numeric values Y1 ₀ ′ is stored as authentication encrypted data, the other numerical value Y2 ₀ ′ is stored as authentication response identification data, and the two sets of random number data R ₀₁ , Send R ₀₂ and authentication encrypted data Y1 ₀ 'to the authenticator,
In the subsequent authentication request side, either of the two encrypted data y ₀₁ and y ₀₂ is selected by a predetermined method, converted into a binary value, and assigned so that the most significant digit is always 1. values as eigenvalues N _1, for each of the new two sets of random number data R _11, R _12, the eigenvalues N ₁ as a parameter, two encrypted data y obtained by executing the predetermined encryption algorithm obtains an exclusive OR value Y ₁ obtained by taking the exclusive OR of ₁₁ and y _12, numerical reduced in the obtained exclusive OR value Y ₁ of the digits a predetermined method Y ₁ ' Is converted into a binary value and further divided into two numbers Y1 ₁ ′ and Y2 ₁ ′. One of the obtained numbers Y1 ₁ ′ is used as authentication encryption data, and the other number Y2 ₁ ′ is stored as authentication response identification data Then, the two sets of random number data R ₁₁ and R ₁₂ and the authentication encryption data Y1 ₁ ′ are transmitted to the authentication side,
On the authentication side, the predetermined encryption algorithm is executed using the received two sets of random number data R ₀₁ and R ₀₂ and the eigenvalue N ₀ having the same value as that of the authentication requester registered in advance from the authentication requester as parameters. seeking two exclusive OR value Y ₀ to the exclusive OR obtained by taking the enciphered data y ₀₁ and y ₀₂ obtained by, the number of digits of the exclusive-OR value Y ₀ obtained The numerical value Y ₀ ′ reduced by the same method as the authentication requesting side is converted into a binary value by the same method as the authentication requesting side, and further divided into two values Y1 ₀ ′ and Y2 ₀ ′. One numerical value Y1 ₀ ′ is stored as authentication identification data, and the other numerical value Y2 ₀ ′ is stored as authentication response encrypted data. The authentication encrypted data Y1 ₀ ′ received from the authentication requesting side and the authentication identification data Y1 ₀ ′ are stored. When the two values match, it is determined that the authentication is OK. The authentication response encryption data Y2 ₀ ′ is transmitted to the authentication requesting side, and the authentication requesting side receives the authentication response encryption data Y2 ₀ ′ received from the authentication side and the authentication response identification data Y2 ₀ ′ previously stored by the authentication requesting side. Compare and judge that the authentication response is OK when both values match,
On the subsequent authentication side, one of the two encrypted data y ₀₁ and y ₀₂ is selected in the same way as the predetermined authentication request side and converted into a binary value, and the most significant digit is always 1. The value assigned in this way is set as the eigenvalue N _1, and each of the received two new sets of random number data R ₁₁ and R ₁₂ is obtained by executing the predetermined encryption algorithm using the eigenvalue N ₁ as a parameter. obtains an exclusive OR value Y ₁ obtained by taking the two exclusive OR of the encrypted data y ₁₁ and y ₁₂ that is, the predetermined number of digits of the exclusive OR value Y ₁ obtained The numerical value Y ₁ 'reduced by the same method as the certification requesting side is converted into a binary value by the same method as the certification requesting side, and further divided into two numerical values Y1 ₁ ', Y2 ₁ ', and _one of the obtained numerical values Y1 ₁ 'to the authentication identification data, the other numbers Y2 _1' respectively store as the authentication response encrypted data The comparison authentication requesting side received from 'and the authentication identification data Y1 _1' authentication encryption data Y1 ₁ a, it is determined that the authentication OK when both values match, the subsequent said authentication response encrypted data is authenticator Y2 ₁ ′ is transmitted to the authentication requesting side, and the authentication requesting side compares the authentication response encrypted data Y2 ₁ ′ received from the authentication side with the authentication response identification data Y2 ₁ ′ stored in advance by the authentication requesting side. An authentication and authentication response system that cascades the process of determining that the authentication response is OK when the values match.

  The authentication system according to the present invention has the following remarkable practical effects. That is, a general authentication encryption signal is sent after being encrypted by advanced encryption technology that relies on computational security, but in the present invention, the authentication encryption signal is replaced with a random number and communicated, and extracted from this random number. The partner confirmation / authentication algorithm is associated with the cascade every time from the start of the first communication and is one-time disposable. As a result, even if the communication line is intercepted and the other party authentication algorithm is attempted to be decrypted, the relationship between the random number sent and the authentication encryption signal is the relationship between the random number and the random number for which no algorithm exists. Since it is impossible, the authentication encrypted signal itself can be transmitted to the communication line without being encrypted, and the illegal person can obtain the authentication identifier of the mobile phone and the partner confirmation authentication algorithm by the manufacturer or the distribution process. Even if illegally copying and stealing from a storage medium (ROM) of a mobile phone and making a so-called clone mobile phone and attempting "spoofing", the torrent authentication algorithm is associated with the cascade, The random number and the authentication encryption data are continuously eavesdropped from the beginning of communication by the user, stored in the database and analyzed. “Spoofing” is extremely difficult, and even if an illegal person succeeds in “spoofing” using a clone mobile phone, the user's mobile phone performs “spoofing”. Since it is invalidated at this point, the user will notice that “spoofing” has been performed, and it will be difficult for an illegal person to continue “spoofing”.

  In user authentication, a one-time disposable partner confirmation authentication signal is usually recorded and managed by continuously recording all past communication histories so that the same one-time partner confirmation authentication signal is not repeated. In the present invention, the one-time disposable partner confirmation authentication signal can be established by recording the eigenvalue N used immediately before without continuously recording and managing all past communication histories. As a result, the memory in the authentication server of the communication carrier can be saved and the program can be simplified.

Embodiments of the authentication system according to the present invention will be described below.
In general user authentication technology, in order to avoid eavesdropping on communication lines, authentication encryption data is encrypted and sent using advanced encryption technology that relies on computational security. In the present invention, authentication encryption data is replaced with random numbers. The partner confirmation authentication algorithm extracted from this random number is associated with the cascade every time from the start of the first communication, and is made one-time disposable. As a result, the relationship between the random numbers R ₁ and R ₂ and the authentication encrypted data Y1 'that are sent even if the communication line is intercepted and the other party authentication algorithm is decrypted is a relationship between the random number and the random number for which no algorithm exists. Since decryption by line interception is completely impossible, the authentication encryption data itself can be transmitted to the communication line without being encrypted, and the random number data R ₁ and R ₂ and the authentication encryption data can be transmitted from the past communication history. Even if you attempt “spoofing” by imitating the value of Y ′, it is impossible to “spoof” reasonably, except that the relationship between the random numbers R ₁ and R ₂ and the authentication encryption data Y 'coincides. next, the relation of the random number R _1, R ₂ and the authentication encryption data the probability of match by chance is inversely proportional to the total number per binary value of the random number R _1, R ₂ and the authentication encryption data Y1 ', the random number R _1, All multiplication values of binary value of R ₂ and authentication encryption data Y1 ' By selecting random number data R ₁ , R ₂ and authentication encryption data Y1 ′ that are at least 128 digits (128 bits) or more, “spoofing” due to coincidence can be almost prevented and authentication response encryption data Y2 'can almost prevent "spoofing" by the same principle as the authentication encryption data Y1'.

  In user authentication, a one-time disposable partner confirmation authentication signal is usually recorded and managed by continuously recording all past communication histories so that the same one-time partner confirmation authentication signal is not repeated. In the present invention, the authentication encryption data and the authentication response encryption data are replaced with random numbers for communication, and the other party authentication algorithm extracted from the random numbers is associated with the cascade every time from the start of the first communication so that it is one-time disposable. The eigenvalue N used immediately before can be recorded and the one-time disposable partner confirmation authentication signal can be established without continuously recording and managing all past communication histories. As a result, the memory in the authentication server of the communication carrier can be saved and the program can be simplified.

  FIG. 1 is a system configuration diagram of a transmission side as an authentication request side in an embodiment of an authentication system according to the present invention.

  In the present embodiment, a random number generation unit 11, a random number selection unit 12, an encryption unit 13, an exclusive OR (EX-OR) unit 14, a division unit 15, a transmission unit 16, and a reception are sent to an authentication requesting side that is a transmission side. A unit 17 and a comparison unit 18 are provided.

The random number selection unit 12 selects and outputs desired random number data from the random numbers generated by the random number generation unit 11, and outputs two random number data R ₁ and R ₂ in this embodiment. As the two random number data R ₁ and R ₂ , for example, two sets of 256-bit random number data are cut out from the random number generated from the random number generator 11 and output. The random number selection unit 12 is not always necessary as long as _two different sets of random number data R ₁ and R ₂ can be obtained from the random number generation unit 11. Here, the random number is preferably a true random number, but even a pseudo-random number is applicable.

The encryption unit 13 sets two sets of random number data R ₁ and R ₂ output from the random number selection unit 12 and at least one predetermined number of, for example, 128 bits and the most significant digit is binary one. Encrypted data y ₁ and y ₂ encrypted by using the assigned eigenvalue N as a parameter and executing a predetermined encryption algorithm, for example, a one-way function as shown in equations (1) and (2) Obtain the exclusive OR value Y obtained by taking the exclusive OR of, and convert the number Y 'obtained by reducing the number of digits of the obtained exclusive OR value Y in a predetermined method into a binary value Then, it is further divided into two to obtain numerical values Y1 'and Y2', one of the obtained numerical values Y1 'is used as authentication encryption data, and the other numerical value Y2' is stored as authentication response data. ₁ , R ₂ and authentication encrypted data Y1 ′ are transmitted to the authenticating side that is the receiving side.
y ₁ = (R ₁ + N) mod NR ₁ > N (1)
y ₂ = (R ₂ + N) mod NR ₂ > N (2)

The authentication encryption data Y1 ′ thus obtained and two sets of random number data R ₁ and R ₂ are transmitted from the transmission unit 16 toward the communication line.

The configuration and operation on the transmission side shown in FIG. 1 will be described more specifically below.
First, two different sets of, for example, 256-bit random number data R ₀₁ and R ₀₂ generated by the initial stage random number generation unit 11 are output to the encryption unit 13. The encryption unit 13 is input with a special value N ₀ assigned to the authentication request side, for example, a unique value N _{0 in} which the numerical value of the highest-order digit of 128 bits is assigned binary one. As the unique value N ₀ , for example, an ID (authentication identifier) can be used.

The encryption unit 13 performs a function operation such as the above expressions (1) and (2) using the random number data R ₀₁ and R ₀₂ and the eigenvalue N ₀₂ . Here, eigenvalue N ₀ <random number data R ₀₁ or R _{02 is} assumed.
Two encrypted data y ₀₁ and y ₀₂ are obtained by the following equations (3) and (4) for each of the two sets of random data R ₀₁ and R ₀₂ . That is,
y ₀₁ = (R ₀₁ + N ₀ ) mod N ₀ (3)
y ₀₂ = (R ₀₂ + N ₀ ) mod N ₀ (4)

The two encrypted data y ₀₁ and y ₀₂ obtained in this way are subjected to the following exclusive OR processing in the exclusive OR unit 14 to obtain an exclusive OR value Y ₀ and obtained. A numerical value Y ₀ ′ obtained by reducing the number of digits of the exclusive OR value Y ₀ by a predetermined method is obtained.
Y ₀ = y ₀₁ (EX-OR) y ₀₂ (5)
Here, y ₀₁ (EX-OR) y ₀₂ represents an exclusive OR of y ₀₁ and y ₀₂ .

This numerical value Y ₀ ′ is divided into two by the dividing unit 15, and Y 1 ₀ ′ and Y 2 ₀ ′ are obtained. Then, Y 1 ₀ ′ as authentication encryption data and two sets of random number data R ₀₁ and R ₀₂ are connected to the communication line. The numerical value Y2 ₀ ′ is stored as authentication response identification data. This authentication encryption data Y1 ₀ ′ is a one-way partner confirmation authentication signal.

On the other hand, on the authentication side, random number data R ₀₁ and R ₀₂ and a unique value N ₀ transmitted from the authentication requesting side are passed. The eigenvalue N ₀ is not disclosed and is passed without any other medium such as handing to the authentication side, and the random number data R ₀₁ and R ₀₂ are transmitted via the communication line.

In the system to which the present invention is applied, the functions of the above expressions (1) and (2) used between the authentication requesting side and the authentication side are negotiated and are known to each other. Since the eigenvalue N ₀ and the random number data R ₀₁ and R ₀₂ are also known, the authentication side can execute the function calculation according to the above equations (3) and (4) on the authentication request side, and the encrypted data y ₀₁ and y ₀₂ is required.

Therefore, the exclusive OR value Y ₀ is obtained by the equation (5) using the obtained encrypted data y ₀₁ and y _02, and the number of digits of the obtained exclusive OR value Y ₀ is determined in advance. The number Y ₀ 'is obtained by reducing the number of digits in the same way as the side. Further, the numerical values Y ₀ 'the authentication requesting side and converted to binary value in the same way divided into two two numbers Y1 _0' Y2 ₀ 'look one numeric Y1 _0' authentication identifying the divided portion The other numeric value Y2 ₀ ′ is used as authentication response encryption data. Since the authentication encryption data Y1 ₀ ′ is transmitted from the authentication requesting side via a communication line, the authentication side receives the authentication encryption data Y1 ₀ ′ and the authentication identification data Y1 ₀ ′ if they match. This indicates that the parameters secretly held by the authentication requesting side and the authentication side match, and it can be authenticated that the authentication requesting side is the principal.

FIG. 2 shows a system configuration diagram of the authentication side that executes such an operation.
The authentication encryption data Y1 ₀ ′ and random number data R ₀₁ and R ₀₂ transmitted via the communication line are received by the reception unit 21, and the decryption unit 22 receives the eigenvalue N ₀ and the random number data R ₀₁ and R _02. The above equations (3) and (4) are calculated to obtain encrypted data y ₀₁ and y ₀₂ . Using the obtained encrypted data y ₀₁ and y _02, is executed exclusive-OR operation is exclusive OR unit 23 in accordance with (5), seeking exclusive-OR value Y _0, obtained A number Y ₀ ′ is obtained by reducing the number of digits of the exclusive OR value Y _{0 in} the same way as the predetermined authentication requesting side. Numerical resulting Y ₀ 'is by the division unit 24 is converted into a binary value in the same manner as the authentication requesting side 2 divided and two numbers Y1 _0' and Y2 ₀ 'look one numeric Y1 _0' Are stored as authentication identification data, the other numerical value Y2 ₀ ′ is stored as authentication response encryption data, and the authentication encryption data Y1 ₀ ′ received by the reception unit 21 is compared with the authentication identification data Y1 ₀ ′ by the comparison unit 25. As a result of the comparison, if the two values match, it is determined that the authentication requesting person is authenticated by authentication OK, and if they do not match, it is determined that the authentication is impossible and the authentication requesting person is not. As the authentication judgment result, the authentication response encrypted data Y2 ₀ ′
Is transmitted from the transmitting unit 25 to the authentication requesting side via the communication line.

On the authentication requesting side, the authentication response encrypted data Y2 ₀ ′ transmitted from the authentication side is received by the receiving unit 17 and compared with the authentication response identification data Y2 ₀ ′ stored in advance on the authentication requesting side. As a result of the comparison, if both values match, it is determined that the user is the authenticating user in the authentication response OK, and if they are not matched, it is determined that the authentication is impossible and the user is not the authenticating user.

Here, it is assumed in advance that the authentication requesting side and the authentication side use _one of the encrypted data y ₀₁ and y ₀₂ as the eigenvalue N ₁ used for the next authentication. For example, the encrypted data y ₀₁ is used as the unique value N ₁ selected on the authentication request side at the next authentication. As described above, the unique value N ₀ as the initial N value is a unique value such as the ID of the authentication requester, for example, 128 bits and the most significant digit assigned with binary 1; In order to make the N value of the same number of digits as the initial eigenvalue N ₀ , the fixed value 1 is assigned to the most significant binary digit of the selected encrypted data y _{01 to be} the second eigen value N ₁ The same processing is performed after the second time. This process is performed on both the authentication requesting side and the authentication side. In actual operation after that, if the number of authentications is nth from the beginning, the encrypted data y _{(n−1) 1} used in the immediately preceding authentication process is used.

At the timing of the next second authentication, the authentication requesting side gives the encrypted data y ₀₁ as the eigenvalue N ₁ , similarly takes out two different sets of random number data R ₁₁ and R ₁₂ from the random number generator ₁₁ , and Similarly to the equations (3) and (4), the encrypted data y ₁₁ and y ₁₂ are obtained by the following equations (6) and (7).
y ₁₁ = (R ₁₁ + N ₁ ) mod N ₁ R ₁₁ > N ₁ (6)
y ₁₂ = (R ₁₂ + N ₁ ) mod N ₁ R ₁₂ > N ₁ (7)

Thus two encrypted data y ₁₁ and y ₁₂ obtained in exclusive part 14, an exclusive OR operation according as follows (8) is executed, obtains the exclusive-OR value Y ₁ The number of digits of the obtained exclusive OR value Y ₁ is reduced by a predetermined method to obtain a numerical value Y ₁ ′.
Y ₁ = y ₁₁ (EX-OR) y ₁₂ (8)

Therefore, from the transmitter 16 on the authentication request side, y ₀₁ obtained by the equation (3) is set to N ₁ value, 2 sets of eigenvalue N _{1 in} which the numerical value of the most significant digit of the data is assigned binary 1 random number data R _11, R ₁₂ and obtains the exclusive-oR value Y ₁ in the above (8), numerically reduced by the determined exclusive-oR value Y ₁ of the digits a predetermined method divides Y ₁ ' The unit 15 converts it to a binary value and further divides it into two to obtain numerical values Y1 ₁ ′, Y2 ₁ ′, Y1 ₁ ′ as authentication encryption data, Y2 ₁ ′ as authentication response identification data, and authentication encryption data Y1 ₁ is transmitted by the transmission unit 16 to the authentication side via the communication line together with the random number data R ₁₁ and R ₁₂ .

On the authentication side, the random data R ₁₁ and R ₁₂ received by the receiving unit 21 and the same encrypted data as the encrypted data y ₀₁ selected on the authentication requesting side are obtained by the above equation (3). Y ₀₁ is selected, the selected encrypted data y ₀₁ is converted into a binary value, and the decryption unit 22 uses the unique value N ₁ assigned so that the most significant digit is always 1 in the above ( Encrypted data y ₁₁ and y ₁₂ are obtained based on equations 6) and (7). The obtained encrypted data y ₁₁ and y ₁₂ are subjected to exclusive OR processing according to the equation (8) in the exclusive OR unit 23 to obtain the exclusive OR value Y ₁ , and the obtained exclusive logic A numerical value Y ₁ ′ obtained by reducing the number of digits of the sum Y _{1 by} the same method as that for the predetermined authentication request side is obtained, and the obtained numerical value Y ₁ ′ is converted into a binary value by the dividing unit 24 and further 2 By dividing, numerical values Y1 ₁ ′ and Y2 ₁ ′ are obtained, Y1 ₁ ′ is used as authentication identification data, and Y2 ₁ ′ is obtained as authentication response encryption data.

The comparison unit 25 compares the authentication identification data Y1 ₁ ′ thus obtained by the dividing unit 24 with the authentication encrypted data Y1 ₁ ′ sent from the authentication requesting side by the receiving unit 21 and received by the authentication side. As a result of the comparison, if the two values match, it is determined that the authentication requesting person is authenticated by authentication OK, and if they do not match, it is determined that the authentication is impossible and the authentication requesting person is not. This authentication determination result is sent as authentication response encrypted data Y2 ₁ ′ from the transmitting unit 26 to the authentication requesting side via the communication line, and the authentication requesting side receives the authentication response encrypted data Y2 ₁ ′ received from the authentication side and the authentication The requester compares the authentication response identification data Y2 ₁ ′ stored in advance, and determines that the authentication response is OK when both values match.

Similar authentication processing is executed in subsequent authentication processing. For example, in the timing of the third authentication, the authentication requesting side, likewise, use encryption data y ₁₁ obtained in the previous authentication as eigenvalues N ₂ used during the authentication. Then, two sets of random number data R ₂₁ and R ₂₂ are extracted from the random number generator 11, and the encrypted data y ₂₁ and y ₂₂ are converted into the expressions (9) and (10) in the same manner as the expressions (3) and (4). )
y ₂₁ = (R ₂₁ + N ₂ ) mod N ₂ R ₂₁ > N ₂ (9)
y ₂₂ = (R ₂₂ + N ₂ ) mod N ₂ R ₂₂ > N ₂ (10)

The two encrypted data y ₂₁ and y ₂₂ obtained in this way are subjected to an exclusive OR operation according to the following equation (11) in the exclusive OR unit 14 to obtain an exclusive OR value Y ₂ . The number of digits of the obtained exclusive OR value Y ₂ is reduced by a predetermined method, converted into a binary value by the dividing unit 15, and further divided into two to obtain numerical values Y1 ₂ ′, Y2 ₂ ′, and Y1 ₂ 'is used as authentication encryption data, and Y2 ₁₂ ' is used as authentication response identification data.
Y ₂ = y ₂₁ (EX-OR) y ₂₂ (11)

From the transmitter 16 on the authentication request side, the number of digits is reduced to the dividing unit 15 by a predetermined method for the two sets of random number data R ₂₁ and R ₂₂ and the exclusive OR value Y ₂ obtained by the above equation (11). To binary values and further divided into two to obtain numerical values Y1 ₂ ′, Y2 ₂ ′, Y1 ₂ ′ as authentication encryption data, Y2 ₂ ′ as authentication response identification data, and authentication encryption data Y1 ₂ ′ Two sets of random number data R ₂₁ and R ₂₂ are transmitted to the authentication side via the communication line, and authentication response identification data Y2 ₂ ′ is stored on the authentication request side.

The authentication side of the receiving side, the authentication side random number data R _21, R ₂₂ and the authentication requesting same and the encrypted data y ₁₁ selected by side encrypted data y ₁₁ received by the receiving section 21 (6) Y ₁₁ obtained by the equation is selected, the selected encrypted data y ₁₁ is converted into a binary value, and the eigenvalue N ₂ assigned so that the most significant digit is always 1 is used to decrypt the decryption unit 22. The encrypted data y ₂₁ and y ₂₂ are obtained based on the above equations (9) and (10). The obtained encrypted data y ₂₁ and y ₂₂ are subjected to exclusive OR processing according to the expression (11) in the exclusive OR unit 23 to obtain the exclusive OR value Y ₂ , and the obtained exclusive logic 'Motomari is, the obtained numerical Y _2' numerical Y ₂ by reducing the number of digits of sum value Y ₂ at a predetermined authentication requesting side and the same way the same manner as the authentication requesting side by division unit 24 2 It is converted into a hexadecimal value and further divided into two to obtain numerical values Y1 ₂ ′ and Y2 ₂ ′, the numerical value Y1 ₂ ′ is used as authentication identification data, and the numerical value Y2 ₂ ′ is obtained as authentication response encryption data.

The comparison unit 25 compares the authentication identification data Y1 ₂ ′ thus obtained by the division unit 24 with the authentication encryption data Y1 ₂ ′ sent from the authentication requesting side by the reception unit 21 and received. As a result of the comparison, if both values match, it is determined that the user is the authenticating user by authentication OK, and if they are not matched, it is determined that the authentication is not possible and the user is not the authenticating user. This authentication judgment result is sent as authentication response encrypted data Y2 ₂ ′ from the transmitting unit 26 to the authentication requesting side via the communication line, and the authentication requesting side receives the authentication response encrypted data Y2 ₂ ′ received from the authenticating side and the authentication The requester compares the authentication response identification data Y2 ₂ 'stored in advance, and determines that the authentication response is OK when both values match.

  The above processing is executed for each authentication request between the authentication requesting side and the authentication side.

In the above-mentioned system, the predetermined encryption algorithm has two sets of random numbers R ₁ and R ₂ known to two identical functions, and two or more digits of one kind of hexadecimal number, and the most significant digit of the binary value is always 1. The assigned eigenvalue N is substituted, and the exclusive OR of the _two arithmetic processing values y ₁ and y ₂ is calculated. The exclusive OR value Y is converted into a binary value, and the number of digits is reduced by a predetermined method. A calculation for obtaining the value Y ′, calculating Y ′ from N as a forward calculation, and substituting the two sets of random numbers R ₁ and R ₂ from the value Y ′ obtained by the forward calculation for calculating the eigenvalue N Are defined as backward calculation. As a result of executing the exclusive OR, the calculation of N to Y 'by reducing the number of binary digits of the obtained exclusive logical ring value Y has a one-way irreversible relationship and is calculated in the forward direction. Although it is possible, the reverse direction cannot be calculated, and even if it is attempted to obtain the fixed value N by the calculation method based on the brute force method, a plurality of values are obtained, and it is confirmed that the eigenvalue N is determined. It is impossible to do.

Here, when y ₀₁ to y _{(n−1) 1} is selected as the data N _{1 to} N _n and assigned to the cascade for disposal, since R _{01 to} R _{(n−1) 1} is a random number, y The signal from _{01 to} y _{(n-1) 1} is also a random number, and the number of digits of N varies. In other words, the number of digits of N decreases due to the occurrence of zero in the upper digits of the numerical value of y. If the number of digits of N decreases, the number of digits of y decreases accordingly, and the number of digits of N and y becomes twice. There is no return to the original number of digits.

As a result, on both the authentication request side and the authentication side, the number of digits of the exclusive logical ring value Y, the authentication encrypted data Y1 ′, and the authentication response encrypted data Y2 ′ coincides with the decrease in the number of N and y digits. Decreasing, finally said N ₁ , y ₁ , Y, Y1 ′
The values of Y2 ′ are all zero, the function as the partner confirmation authentication signal is lost, and the values of N ₁ , y ₁ , Y, Y1 ′ Y2 ′ do not return to the original number of digits. N ₁ , y ₁ , Y, Y1 ′
Y ₀₁ to y _(n-1) assigned to the most significant digit of the binary value of y so that the number of digits of Y2 'remains constant To match the change in the numerical value of y ₀₁ to y _{(n-1) and} to match the change in the numerical value of y by allocating the numerical value of the most significant digit of the binary value of N _{1 to} N _n in succession. , N is assigned to y.

  The description of the above embodiment is for a general authentication process, but it can be easily understood that it can be used for the authentication process of the mobile phone. In other words, as the N value to be set first, the unique information ID of the owner of the mobile phone may be used.

As described above, in the present invention, based on the two types of (two) random number data R ₀₁ and R ₀₂ generated independently in the one-way partner confirmation authentication (one-way function), the equation (3) and ( 4) The exclusive OR value Y ₀ obtained by executing the exclusive OR process according to the equation (5) using the encrypted data y ₀₁ and y ₀₂ obtained by the function operation of the equation in a predetermined method. The numerical value Y ₀ ′ obtained by reducing the number of digits can ensure one-way irreversibility. Further, at the time of the first registration, the unique value N ₀ such as the ID of the authentication requester is secretly registered to the authentication side by hand, and after the next authentication, the encrypted data obtained during the previous authentication process (for example, y ₀₁ The data to be sent from the authentication requesting side to the authentication side is the authentication encryption data Y1 ₀ ', two types of random number data R ₀₁ and R _02, and authentication response encryption data
Since only Y2 ₀ ′ and these data itself do not have an algorithmic relationship, “spoofing” is extremely difficult even if these data are wiretapped from the communication line. That is, the eigenvalue N is cascade-related data that continues from the initial eigenvalue N ₀ (secret information such as the ID of the authentication requester), and is used in the immediately preceding authentication process without recording and managing past communication history. It is possible to prevent “spoofing” by others by only recording and managing the specified eigenvalue N.

  The configuration and operation of the preferred embodiment of the authentication system according to the present invention have been described above in detail. However, such an example is merely an example of the present invention and does not limit the present invention. It will be easily understood by those skilled in the art that various modifications and changes can be made according to the specific application without departing from the gist of the present invention.

It is a system configuration | structure figure by the side of the authentication claim (transmission) in one Example of the authentication system by this invention. It is a system configuration | structure figure by the side of authentication (reception) in one Example of the authentication system by this invention. It is a system configuration | structure figure which shows the procedure of the authentication process of the conventional mobile telephone.

Explanation of symbols

DESCRIPTION OF SYMBOLS 11 Random number generation part 12 Random number selection part 13 Encryption part 14 Division | segmentation part 15 Exclusive OR (EX-OR) part 16 Transmission part 17 Reception part 18 Comparison part 21 Reception part 22 Decoding part 23 Exclusive OR (EX- OR) part 24 division part 25 comparison part (match)
26 Transmitter 100 Manufacturing Company 200 Telecom Operator 300 Dealer 400 User 500 Telecom Operator

Claims (14)

On the authentication request side, for each of the two sets of random data R ₁ and R ₂ , a predetermined encryption algorithm is executed using at least one predetermined private eigenvalue N as a parameter, and the two encrypted data y ₁ And y ₂ are obtained, the exclusive OR of the obtained two encrypted data y ₁ and y ₂ is obtained to obtain the exclusive OR value Y, and the obtained exclusive OR value Y is converted into a binary value. Converted and further divided into two numerical values Y1 and Y2, obtain one numerical value Y1 obtained by dividing into two as authentication encryption data, and store the other numerical value Y2 as authentication response identification data. ₁ , R ₂ and the authentication encryption data Y1 are transmitted to the authentication side,
On the authentication side, the predetermined encryption algorithm using the two sets of received random number data R ₁ and R ₂ and the unique value N based on the initial value of the same value as the authentication requesting side previously registered privately from the authentication requesting side as parameters two calculated encrypted data y ₁ and y ₂ run obtains an exclusive OR value Y taking two exclusive OR of the encrypted data y ₁ and y ₂ obtained was calculated The exclusive OR value Y is converted into a binary value by the same method as the above-mentioned authentication requester, and further divided into two values Y1 and Y2, and the obtained one value Y1 is used as authentication identification data, and the other value Y2 is obtained. Each of them is stored as authentication response encryption data, and the authentication encryption data Y1 received from the authentication requesting side is compared with the authentication identification data Y1, and when both values match, it is determined that the authentication is OK. Send the authentication response encryption data Y2 to the authentication requester, The certificate requesting side compares the authentication response encryption data Y2 received from the authentication side with the authentication response identification data Y2 stored in advance by the authentication requesting side, and determines that the authentication response is OK when both values match. Features authentication and authentication response system. The authentication requester executes a predetermined encryption algorithm for each of the two sets of random number data R ₀₁ and R _{02 in} the initial state, using a predetermined at least one private eigenvalue N ₀ as a parameter, and executes two encryptions. the calculated data y ₀₁ and y _02, taking two exclusive OR of enciphered data y ₀₁ and y ₀₂ obtained determined the exclusive-OR value Y _0, obtained exclusive-OR value Y _The numerical values Y1 ₀ and Y2 ₀ obtained by converting ₀ into a binary value and further divided into two are obtained, one of the obtained numerical values Y1 ₀ is used as authentication encryption data, and the other numerical value Y2 ₀ is stored as authentication response identification data. Two sets of random data R ₀₁ and R ₀₂ and the authentication encryption data Y1 ₀ are sent to the authentication side,
The subsequent authentication request side selects one of the encrypted data y ₀₁ and y ₀₂ by a predetermined method and assigns the unique value N ₁ and each of two new sets of random number data R ₁₁ and R ₁₂ . Using the eigenvalue N ₁ as a parameter, an exclusive OR value Y ₁ obtained by taking the exclusive OR of the two encrypted data y ₁₁ and y ₁₂ obtained by executing the predetermined encryption algorithm The numerical values Y1 ₁ and Y2 ₁ converted into binary values and further divided into two are obtained, _one of the obtained numerical values Y1 ₁ is used as authentication encryption data, and the other numerical value Y2 ₁ is stored as authentication response identification data. the random number data R _11, R ₁₂ and the authentication encryption data Y1 ₁ transmits to the authenticator,
On the authentication side, the predetermined encryption algorithm is used with the received two sets of random number data R ₀₁ and R ₀₂ and the eigenvalue N ₀ having the same value as that of the authentication requesting side registered in advance from the authentication requesting side as parameters. obtains an exclusive OR value Y ₀ to the exclusive OR obtained by taking the two enciphered data y ₀₁ and y ₀₂ obtained by executing the exclusive-OR value Y ₀ obtained the authentication The numerical values Y1 ₀ and Y2 ₀ converted into binary values by the same method as the requesting side and further divided into two values are obtained, and the obtained one numerical value Y1 ₀ is used as the authentication identification data,
The other numerical value Y2 ₀ is stored as authentication response encryption data, respectively, and the authentication encryption data Y1 ₀ received from the authentication requesting side is compared with the authentication identification data Y1 _{0. When} both values match, the authentication OK The subsequent authentication side transmits the authentication response encrypted data Y2 ₀ to the authentication requesting side, and the authentication requesting side transmits the authentication response encrypted data Y2 ₀ received from the authentication side and the authentication stored in advance by the authentication requesting side. comparing the response identification data Y2 _0, determines that the authentication response OK when both values match,
The subsequent authentication side, the encrypted data y ₀₁ and the eigenvalues N ₁ assigned selected either a predetermined authentication requesting side and the same method of y _02, received the new two sets of random number data R ₁₁ and R ₁₂ , obtained by taking the exclusive OR of the two encrypted data y ₁₁ and y ₁₂ obtained by executing the predetermined encryption algorithm using the eigenvalue N ₁ as a parameter. The exclusive OR value Y ₁ is obtained, and the obtained exclusive OR value Y ₁ is converted into a binary value by the same method as the authentication requesting side, and further divided into two numerical values Y1 ₁ and Y2 ₁ are obtained. One numerical value Y1 ₁ is used as authentication identification data, the other numerical value Y2 ₁ is stored as authentication response encrypted data, and the authentication encrypted data Y1 ₁ received from the authentication requesting side is compared with the authentication identification data Y1 ₁ . The process for determining that authentication is OK when both values match is Executed Cade, the subsequent transmit the authentication response encrypted data Y2 ₁ in authenticator to the authentication requesting side, authentication requesting side is to the store the authentication requesting side from authenticator and the authentication response encrypted data Y2 ₁ received in advance authentication and authorization response system authentication response by comparing the identification data Y2 _1, characterized by determining that authentication response OK when both values match you are. The authentication request side is obtained by executing a predetermined encryption algorithm using a random number generator for outputting two sets of random data R ₁ and R ₂ and at least one private eigenvalue N as a parameter. and two of the encryption unit for obtaining the encrypted data y ₁ and y ₂ and, an exclusive OR unit taking the exclusive-OR value Y of the two encryption data y ₁ and y ₂ obtained,
A division unit that outputs the authentication encrypted data Y1 and the authentication response identification data Y2 obtained by converting the exclusive OR value Y into a binary value and further dividing into two, and the two sets of random number data R ₁ and R ₂ And a transmission unit for transmitting the authentication encrypted data Y1 to the authentication side,
On the authentication side, a receiving unit that receives data transmitted from the transmitting unit;
The predetermined encryption algorithm using the two sets of random number data R ₁ and R ₂ received by the receiving unit and the eigenvalue N based on the initial value of the same value as that of the authentication requester registered in advance from the authentication requester as a parameter And a decryption unit for obtaining _two encrypted data y ₁ and y ₂ ,
An exclusive OR unit that takes an exclusive OR of the _two encrypted data y ₁ and y ₂ output from the decryption unit and outputs an exclusive OR value Y;
Authentication exclusive data Y1 and authentication response encryption data Y2 obtained by converting the exclusive OR value Y obtained by the exclusive OR part into a binary value by the same method as the authentication requesting side and further dividing into two values are obtained. A dividing unit that outputs, a comparison unit that compares the authentication encrypted data Y1 received from the authentication requesting side with the authentication identification data Y1, and determines that the authentication is OK when both values match; A transmitting unit for transmitting response encrypted data Y2, a receiving unit for receiving authentication response encrypted data Y2 on the subsequent authentication requesting side, authentication response identifying data Y2 stored in advance on the authentication response encrypted data Y2 and the authentication requesting side, And an authentication response system, comprising a comparison unit for comparing the two values and confirming that both values match. Claims in subsequent authentication requesting side in claim 2, wherein each of the encrypted data y ₁₁ and random number data R ₂₁ either selects in a predetermined manner the assigned eigenvalues N ₂ as a new two sets of y _12, R ₂₂ , The exclusive OR value Y obtained by taking the exclusive OR of the two encrypted data y ₂₁ and y ₂₂ obtained by executing the predetermined encryption algorithm using the eigenvalue N ₂ as a parameter ₂ is obtained, the obtained exclusive OR value Y ₂ is converted into a binary value, and further divided into _two numbers Y1 ₂ and Y2 ₂ are obtained. One of the obtained numbers Y1 ₂ is used as the authentication encryption data, and the other is obtained. The numerical value Y2 ₂ is stored as authentication response identification data, and the two sets of random number data R ₂₁ and R ₂₂ and the authentication encryption data Y1 ₂ are transmitted to the authentication side,
The subsequent authentication side, the encrypted data y ₁₁ and the eigenvalues N ₂ assigned selected either a predetermined authentication requesting side and the same method of y _12, received the new two sets of random number data R Each of ₂₁ and R ₂₂ was obtained by taking the exclusive OR of the two encrypted data y ₂₁ and y ₂₂ obtained by executing the predetermined encryption algorithm using the eigenvalue N ₂ as a parameter. The exclusive OR value Y ₂ is converted into a binary value and further divided into two numerical values Y1 ₂ and Y2 _{2. The} obtained numerical value Y1 ₂ is used as authentication identification data, and the other numerical value Y2 ₂ is used as the authentication response encryption. Save each as data,
Comparing the authentication requesting authentication is received from the side encrypted data Y1 ₂ and the authentication identification data Y1 _2, the authentication OK when both values match, authenticating the authentication response encrypted data Y2 ₂ in the subsequent authentication side When the authentication request side compares the authentication response encryption data Y2 ₂ received from the authentication side with the authentication response identification data Y2 ₂ stored in advance by the authentication request side, the two values match. An authentication and authentication response system characterized in that processing for determining an authentication response OK is executed in cascade. The eigenvalues N ₀ in the initial state, authentication and authorization response system according to claim 2 or 4, characterized in that only the authenticator and the authentication requesting side is public information known. 6. The authentication and authentication response system according to claim 1, wherein the unique _value N0 is an ID (authentication identifier) determined for each authentication requester.   The authentication and authentication response system according to claim 1, wherein data transmission between the authentication requesting side and the authentication side is performed via a communication line. The authentication and authentication response system according to claim 1, wherein the eigenvalue N ₀ is a eigenvalue determined for each mobile phone.   The authentication and authentication response system according to any one of claims 1 to 7, wherein the authentication target is a communication terminal.   The authentication and authentication response system according to claim 1, wherein the authentication target is a communicator who performs communication.   11. The authentication and authentication response system according to claim 1, wherein the predetermined encryption algorithm is a one-way function calculation process. The calculation process of the one-way function has two types of random numbers R ₁ and R ₂ , eigenvalue N, and encrypted data y ₁ and y ₂ .
y ₁ = (R ₁ + N) mod NR ₁ > N
y ₂ = (R ₂ + N) mod NR ₂ > N
Is executed, it obtains the encrypted data y ₁ and y _2, obtains an exclusive OR value Y takes two exclusive OR of the encrypted data y ₁ and y ₂ obtained exclusively obtained Decrease the number of digits of the logical sum Y by a predetermined method to obtain Y ', obtain the random numbers R ₁ and R ₂ as known numerical values, and obtain N' from Y 'as the forward calculation, and obtain N from Y' This is defined as reverse calculation, and the forward calculation can be easily calculated, but the reverse calculation for obtaining N from Y ′ obtained by reducing the number of digits of the exclusive OR value Y by a predetermined method. 12. The authentication and authentication response system according to claim 11, wherein calculation is impossible due to the absence of a calculation formula, and eavesdropping and fraud of the eigenvalue N are prevented. On the authentication request side, for each of the two sets of random number data R ₁ and R ₂ , the eigenvalue N in which at least one predetermined secret and two or more hexadecimal digits and 1 is assigned to the most significant digit of the binary number Is used as a parameter to execute a predetermined encryption algorithm to obtain two encrypted data y ₁ and y _{2, and} to obtain the exclusive OR of the two obtained encrypted data y ₁ and y ₂ A sum Y is obtained, a numerical value Y ′ obtained by reducing the number of digits of the obtained exclusive OR value Y by a predetermined method is converted into a binary value, and further divided into two values Y1 ′ and Y2 ′. One of the obtained numerical values Y1 ′ is used as authentication encryption data, the other numerical value Y2 ′ is stored as authentication response identification data, and the two sets of random number data R ₁ and R ₂ and authentication encryption data Y1 ′ are transmitted to the authentication side. And
On the authentication side, the predetermined encryption algorithm using the two sets of received random number data R ₁ and R ₂ and the unique value N based on the initial value of the same value as the authentication requesting side previously registered privately from the authentication requesting side as parameters To obtain the two encrypted data y ₁ and y ₂ , obtain the exclusive OR of the two obtained encrypted data y ₁ and y ₂ , and obtain the exclusive OR value Y A numerical value Y ′ obtained by reducing the number of digits of the exclusive OR value Y by the same method as that for the authentication requesting side, which has been determined in advance, is converted into a binary value by the same method as the authentication requesting side, and further divided into two values Y1 ′ and Y2 The obtained numerical value Y1 'is stored as authentication identification data, and the other numerical value Y2' is stored as authentication response encryption data. The authentication encrypted data Y1 'received from the authentication request side and the authentication identification data Y1 'is compared, and if both values match, it is determined that the authentication is OK. On the subsequent authentication side, the authentication response encryption data Y2 ′ is transmitted to the authentication requesting side, and on the authentication requesting side, the authentication response encryption data Y2 ′ received from the authentication side and the authentication response identification data stored in advance by the authentication requesting side An authentication and authentication response system characterized by comparing Y2 'and determining that the authentication response is OK when both values match. On the authentication request side, for each of the two sets of initial random number data R ₀₁ and R ₀₂ , 1 is assigned to the most significant digit of the binary system with at least one non-disclosure of 2 or more digits in hexadecimal notation. Using the eigenvalue N ₀ as a parameter, a predetermined encryption algorithm is executed to obtain two encrypted data y ₀₁ and y _{02, and} an exclusive OR of the obtained two encrypted data y ₀₁ and y ₀₂ is obtained. Then, the exclusive OR value Y ₀ is obtained, and the numerical value Y ₀ 'obtained by reducing the number of digits of the obtained exclusive OR value Y ₀ by a predetermined method is converted into a binary value and further divided into two values Y 1 ₀ ', Y2 ₀ ' is obtained, one of the obtained numerical values Y1 ₀ 'is used as authentication encryption data, and the other numerical value Y2 ₀ ' is stored as authentication response identification data, and the two sets of random number data R ₀₁ and R ₀₂ are authenticated. Send encrypted data Y1 ₀ 'to the authenticator,
In the subsequent authentication request side, either of the two encrypted data y ₀₁ and y ₀₂ is selected by a predetermined method, converted into a binary value, and assigned so that the most significant digit is always 1. values as eigenvalues N _1, for each of the new two sets of random number data R _11, R _12, the eigenvalues N ₁ as a parameter, two encrypted data y obtained by executing the predetermined encryption algorithm obtains an exclusive OR value Y ₁ obtained by taking the exclusive OR of ₁₁ and y _12, numerical reduced in the obtained exclusive OR value Y ₁ of the digits a predetermined method Y ₁ ' Is converted into a binary value and further divided into two numbers Y1 ₁ ′ and Y2 ₁ ′. One of the obtained numbers Y1 ₁ ′ is used as authentication encryption data, and the other number Y2 ₁ ′ is stored as authentication response identification data Then, the two sets of random number data R ₁₁ and R ₁₂ and the authentication encryption data Y1 ₁ ′ are transmitted to the authentication side,
On the authentication side, the predetermined encryption algorithm is executed using the received two sets of random number data R ₀₁ and R ₀₂ and the eigenvalue N ₀ having the same value as that of the authentication requester registered in advance from the authentication requester as parameters. seeking two exclusive OR value Y ₀ to the exclusive OR obtained by taking the enciphered data y ₀₁ and y ₀₂ obtained by, the number of digits of the exclusive-OR value Y ₀ obtained The numerical value Y ₀ ′ reduced by the same method as the authentication requesting side is converted into a binary value by the same method as the authentication requesting side, and further divided into two values Y1 ₀ ′ and Y2 ₀ ′. One numerical value Y1 ₀ ′ is stored as authentication identification data, and the other numerical value Y2 ₀ ′ is stored as authentication response encrypted data. The authentication encrypted data Y1 ₀ ′ received from the authentication requesting side and the authentication identification data Y1 ₀ ′ are stored. When the two values match, it is determined that the authentication is OK. The authentication response encryption data Y2 ₀ ′ is transmitted to the authentication requesting side, and the authentication requesting side receives the authentication response encryption data Y2 ₀ ′ received from the authentication side and the authentication response identification data Y2 ₀ ′ previously stored by the authentication requesting side. Compare and judge that the authentication response is OK when both values match,
On the subsequent authentication side, one of the two encrypted data y ₀₁ and y ₀₂ is selected in the same way as the predetermined authentication request side and converted into a binary value, and the most significant digit is always 1. The assigned value is set as the eigenvalue N _1, and the predetermined encryption algorithm is obtained by using the eigenvalue N ₁ as a parameter for each of the received two new sets of random number data R ₁₁ and R _12. obtains an exclusive OR value Y ₁ obtained by taking the two exclusive OR of the encrypted data y ₁₁ and y ₁₂ that is, the predetermined number of digits of the exclusive OR value Y ₁ obtained The numerical value Y ₁ 'reduced by the same method as the certification requesting side is converted into a binary value by the same method as the certification requesting side, and further divided into two numerical values Y1 ₁ ', Y2 ₁ ', and _one of the obtained numerical values Y1 ₁ 'to the authentication identification data, the other numbers Y2 _1' respectively store as the authentication response encrypted data The comparison authentication requesting side received from 'and the authentication identification data Y1 _1' authentication encryption data numerical Y1 ₁ a, it is determined that the authentication OK when both values match, the subsequent said authentication response cryptographic authentication side Data Y2 ₁ ′ is transmitted to the authentication requesting side, and the authentication requesting side compares the authentication response encrypted data Y2 ₁ ′ received from the authentication side with the authentication response identification data Y2 ₁ ′ stored in advance by the authentication requesting side, An authentication and authentication response system characterized in that processing for determining an authentication response OK when both values match is executed in cascade.

Images