JP2006268411A - Method and system for authenticating remote accessing user by using living body data and user device - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To authenticate the validity of a user who remotely makes access through a communication network without requiring a storage medium with living body data stored therein. <P>SOLUTION: This user device transmits a device ID and a user ID to an authentication server, and the authentication server acquires a first key corresponding to the device ID and living body data corresponding to the user ID. Also, the user device measures the user's living body, encrypts living body data representing a measured result with a second key forming a set with the first key corresponding to the user device and transmits the encrypted living body data to the authentication server. The authentication server decrypts the living body data received from the user device with the acquired first key, compares the decrypted living body data with the acquired living body data and determines the validity of the user in accordance with the comparison result. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to a technique for authenticating a user's legitimacy, and more particularly, to a technique for authenticating a user who remotely accesses via a communication network.

  As a method for authenticating a user, for example, a method using an IC card is known (for example, Patent Document 1).

JP 2004-234633 A

  By the way, in user authentication, what is performed using a user's biometric data is also known. In the user authentication, in order to prevent spoofing by a third party, how to prevent biometric data from leaking is one important factor.

  A method of recording biometric data in a storage medium possessed by the user, such as an IC card or a magnetic card, and authenticating the user using the biometric data read from the recording medium can be considered. When the recording medium is lost, there is a risk that biometric data in the recording medium is obtained by a third party.

  Therefore, an object of the present invention is to authenticate the validity of a user who remotely accesses via a communication network without requiring a storage medium storing biometric data.

  The authentication system according to the first aspect of the present invention includes a user device used by a user and an authentication server for authenticating the user. The user device includes a biometric measuring unit that measures the user's living body and a second key storage unit that stores a second key that is paired with the first key, and requests authentication from the authentication server each time. (Specifically, for example, each time authentication is performed), the biological measurement unit is caused to measure the biological body, the biological data representing the measurement result of the biological body is held, The second key is read from the second key storage means, the stored biometric data is encrypted with the read second key, and the encrypted biometric data is transmitted to the authentication server. The authentication server receives the encrypted biometric data, decrypts it with the first key, and authenticates the user based on the decrypted biometric data.

  In a preferred embodiment, the authentication server can send a specific signal to the user equipment. The user apparatus receives the specific signal, and does not hold the biometric data or read the second key before receiving the specific signal, and after receiving the specific signal. In addition, the biometric data can be retained and the second key can be read out.

  In a preferred embodiment, the authentication server can generate a random number and send it to the user device. The user device encrypts the random number received from the authentication server and the stored biometric data with the read second key, and transmits the encrypted random number and biometric data to the authentication server. can do. The authentication server decrypts the encrypted random number and biometric data with the first key, and authenticates the user based on both the decrypted random number and the decrypted biometric data be able to.

  In a preferred embodiment, the user device stores a device ID storage unit that stores a device ID that is an ID of the user device, and a device ID transmission unit that transmits the device ID stored in the storage unit to the authentication server. And input means for inputting a user ID for specifying the user, and user ID transmission means for transmitting the input user ID to the authentication server. The authentication server includes a device ID receiving unit that receives the device ID from the user device, and a first key corresponding to the received device ID among a plurality of first keys respectively corresponding to a plurality of device IDs. A first key acquisition means for acquiring a user ID, a user ID reception means for receiving the user ID from the user device, and a biometric corresponding to the received user ID among a plurality of biometric data respectively corresponding to a plurality of user IDs Biometric data acquisition means for acquiring data, decrypting the encrypted biometric data received from the user device with the acquired first key, the decrypted biometric data, The acquired biometric data is compared and, as a result of the comparison, if the decrypted biometric data matches the acquired biometric data, the user is authorized. It is possible to authenticate as a user.

  Furthermore, the authentication server can generate a random number and transmit it to the user device. The user device encrypts the random number received from the authentication server and the stored biometric data with the read second key, and transmits the encrypted random number and biometric data to the authentication server. can do. The authentication server decrypts the encrypted random number and biometric data with the first key, also compares the decrypted random number with the generated random number, and the compared random numbers are also compatible with each other In this case, the user can be authenticated as a valid user.

  A user apparatus according to a second aspect of the present invention includes a biometric measurement unit that measures a user's biological body, and a second key storage unit that stores a second key that is paired with a first key, and performs authentication. Each time a request is made to the authentication server, the biometric unit causes the user to perform a biometric measurement, stores biometric data representing the biometric measurement result, and reads the second key from the second key storage unit The stored biometric data is encrypted with the read second key, and the encrypted biometric data is transmitted to the authentication server.

  Each means described above can be constructed by hardware, a computer program, or a combination thereof. The processor can read and execute a computer program. Further, when information processing is performed by reading a computer program into a processor, a storage area existing on a hardware resource such as a memory may be used as appropriate.

  The same type of means (for example, transmission means, storage means, or reception means) among the plurality of means described above may be realized by one piece of hardware, one computer program, or one combination thereof. It may be realized by a plurality of hardware, a plurality of computer programs, or a plurality of combinations of the above.

  The authentication method according to the third aspect of the present invention includes a step of causing a user to measure a living body by a living body measuring unit each time a user apparatus used by the user requests authentication from the authentication server, and the user apparatus includes: Holding biological data representing the measurement result of the biological body, the user device reading a second key paired with a first key from a second key storage means, and the user device, Encrypting the stored biometric data with the read second key, the user device transmitting the encrypted biometric data to the authentication server, and the authentication server, Receiving the encrypted biometric data, the authentication server decrypting the encrypted biometric data with the first key, and the authentication server, Serial based on the decoded biometric data, and a step of performing authentication of the user.

  Hereinafter, a system according to an embodiment of the present invention will be described with reference to the drawings.

  FIG. 1 is a block diagram showing a configuration of a system according to the present embodiment.

  The system includes a public server 1, a database 2 that is communicably connected to the public server 1, an authentication server 3 that authenticates a user, a database 4 that is communicably connected to the authentication server 3, A service providing server 5 capable of providing a user with a predetermined service after authentication by the authentication server 3 and a user device 7 used by the user are provided. The public server 1, the authentication server 3, and the user device 7 can transmit / receive information to / from each other via a communication network such as the Internet 8.

  In the database 2, the public key of the device 7 is associated with each ID of the user device 7 (hereinafter, device ID).

  The public server 1 is a computer system that issues a public key corresponding to the user device ID of each user device 7. The public server 1 receives a device ID and a public key request corresponding to the device ID from the authentication server 3, and searches the database 2 for the public key corresponding to the device ID according to the request, and acquires the public key. Pass the obtained public key to the authentication server.

  In the database 4, the biometric data of each user is associated with each user ID.

  The authentication server 3 is a computer system provided with hardware resources such as a processor and storage resources (for example, memory). The authentication server 3 receives the device ID from the user device, stores the received device ID, requests the public server 1 for a public key corresponding to the device ID, and sets the device ID in response to the request. A corresponding public key can be received from the public server 1 and the received public key can be stored in a storage resource. Further, the authentication server 3 receives the user ID from the user device 7 and stores it in a storage resource, retrieves and acquires biometric data corresponding to the user ID from the database 4, and stores the acquired biometric data in the storage resource. It can also be made. The authentication server 3 receives the biometric data encrypted with the private key of the user device 7 from the user device 7, stores the received biometric data in a storage resource, and stores the biometric data in the acquired public key. Can also be decrypted. The authentication server 3 can also determine whether or not the user is valid, depending on whether or not the decrypted biometric data matches the biometric data obtained by searching. The authentication server 3 can also cause the service providing server 5 to provide a predetermined service to the user when it is determined that the user is valid.

  The user device 7 includes a biological measurement unit 14 that measures a user's biological body, and stores the device ID of the user device 7 and the secret key of the user device 7. In addition, the user device 7 sends the stored device ID to the authentication server 3, sends the user ID input by the user to the authentication server 3, measures the user's living body by the living body measuring unit 14, and the measurement result Can be encrypted with the stored secret key, and the user ID encrypted with the secret key can be sent to the authentication server 3.

  FIG. 2 is a functional block diagram of the user apparatus.

  The user device 7 includes, for example, a control unit (for example, a CPU) 10 that controls the operation of the user device 7, an operation unit (for example, a numeric keypad) 11 that is used by the user to input information such as a user ID, and a user's living body. The biometric measurement unit 14 that outputs the measurement result as analog information, the A / D conversion unit 13 that converts the analog information output from the biometric measurement unit 14 into digital information, and the device ID and secret key of the user device 7 A storage unit (for example, a non-volatile memory) 15 for storing, a temporary storage unit (for example, a volatile memory) 18 for temporarily storing biometric data called by the control unit 10, and an external device for communication A communication interface device (hereinafter abbreviated as “communication I / F”) 12 is provided. For example, the user device 7 can be a tamper-resistant device so that the secret key 16 and the device ID 17 in the storage unit 15 are not illegally stolen. Specifically, for example, when the user device 7 tries to read information in the storage unit 15 illegally (for example, when a predetermined casing of the user device 7 is physically opened). The information in the storage unit 15 is destroyed. Further, in the user device 7, at least the tamper resistance of the storage unit 15 can be made higher than that of the temporary storage unit 18.

  The operation of the user device 7 will be described in detail when the processing flow performed with reference to FIG.

  FIG. 3 shows a series of processing flows performed at the time of user authentication. In this figure, “step” is abbreviated as “S”. Hereinafter, the flow of user authentication will be described with reference to FIG.

  When the control unit 10 of the user device 7 detects a predetermined event (for example, when reception of a notification indicating that authentication can be accepted is detected from the authentication server 3), the device ID is read from the storage unit 15, and the device ID Is stored in the temporary storage unit 18 (S1). Moreover, the control part 10 receives the input of user ID from a user via the operation part 11, and memorize | stores the input user ID in the temporary memory part 18 (S2). The control unit 10 sends the device ID and user ID (that is, the device ID acquired in S1 and the user ID input in S2) stored in the temporary storage unit 18 and the authentication request via the Internet 8. Is transmitted to the authentication server 3 (S3).

  Then, the authentication server 3 requests the public key (P) corresponding to the received device ID from the public server 1 (S4), and responds to the request from the public server 1 to the public key (P) corresponding to the device ID. ) Is received (S5). The authentication server 3 can store the received public key (P) in its own storage resource (for example, memory).

  Next, the authentication server 3 searches and acquires the biometric data corresponding to the user ID received in S3 from the database 4 (S6), and the acquired biometric data is acquired on, for example, a storage resource. It can be associated with a public key (P).

  Next, the authentication server 3 generates a random number (R) (S7), and transmits the generated random number (R) to the user device 7 via the Internet 8 (S8). This random number (R) is used to ensure that biometric data received from the user device 7 thereafter is legitimately output from the user device 7 in the series of processing flow shown in FIG. . The authentication server 3 can associate the random number (R) with the acquired public key (P) and biometric data on the storage resource.

  When receiving the random number (R), the control unit 10 of the user device 7 can store the random number (R) in the temporary storage unit 18. When receiving the random number (R), the control unit 10 holds the biometric data in the temporary storage unit 18 (S9). Specifically, for example, until the random number (R) is received, the control unit 10 keeps the biometric measurement impossible by turning off the power to the biometric measurement unit, or the like. Even if the biometric measurement is performed, the biometric data is not stored in the temporary storage unit 18 by discarding the biometric data without storing it in the temporary storage unit 18. When the random number (R) is received, the control unit 10 makes the biometric measurement possible by turning on the power to the biometric measurement unit or the biometric data when the biometric measurement is performed. Is stored in the temporary storage unit 18 to store the biometric data in the temporary storage unit 18. More specifically, for example, when the random number (R) is received, the control unit 10 instructs the user to perform a biological measurement via a display unit (not shown) (for example, displays a message to that effect). When the biological measurement is performed by the biological measurement unit 14, the biological data is stored in the temporary storage unit 18. By performing such control, it is possible to shorten the time for which the biometric data is stored in the temporary storage unit 18, and therefore, it is possible to contribute to preventing leakage of the biometric data.

  Next, when the biometric measurement is performed (for example, immediately after the biometric measurement is performed), the control unit 10 reads the secret key from the storage unit 15 and the read secret key is the temporary storage unit 18. Remember me. Then, the control unit 10 encrypts the received random number (R) and the biometric data stored in the temporary storage unit 18 with the secret key (S) stored in the temporary storage unit 18 (S10). The converted biometric data and random number (R) are transmitted to the authentication server 3 via the Internet 8 (S11). Here, until the biometric measurement is performed, the secret key is not read to the temporary storage unit 18, and after the biometric measurement is performed, the secret key is read to the temporary storage unit 18. The time accumulated in the storage unit 18 can be shortened, thus contributing to prevention of leakage of the secret key. Note that either the biometric data holding or the secret key reading may be performed first.

  The authentication server 3 receives the random number (R) and biometric data encrypted with the secret key from the user device 7, and uses the received biometric data and random number (R) using the public key (P) received in S5. Then, decryption is performed (S12).

  Then, the authentication server 3 performs an authentication process (S13). Specifically, the authentication server 3 compares the biometric data obtained by the decryption in S12 with the biometric data retrieved in S6, and the random number (R) obtained by the decryption in S12. And the random number (R) generated in S7. The authentication server 3 can determine that the user who entered the user ID is a valid user when the biometric data is compatible with each other and the random numbers (R) are compatible with each other. It can be determined that the user is an unauthorized user.

  The authentication server 3 can transmit the result of the authentication process to the user device 7 via the Internet 8 (S14). Here, the user device 7 that has received the notification of the authentication result when it is determined that the user is a legitimate user accesses the service providing server 5 via, for example, the Internet 8 (S15), and the user provides the service. It can be received (S16).

  As described above, according to the above-described embodiment, each time the user is authenticated by the authentication server 3, the user stores the regular user device 7 (specifically, the secret key (abstractly, the encryption key)). And the biometric unit 14 of the public key (abstractly the decryption key) that is paired with the private key is registered on the server side), the biometric measurement must be performed. The biometric data obtained by the above is encrypted with the secret key of the user device 7 and transmitted to the authentication server 3. As a result, even if the biometric data itself is stolen, the biometric measurement at the biometric measurement unit 14 of the authorized user device 7 is required at the time of authentication, and thus the stolen biometric data is used. It is not possible. For this reason, it is possible to prevent an unauthorized user from being authenticated as a valid user.

  Further, according to the above-described embodiment, as described above, the transmitted biological data is obtained by performing biological measurement. Thus, the user does not have to store the biometric data in a storage medium such as an IC card or a magnetic card and carry it.

  Further, according to the above-described embodiment, the user can be authenticated by any user device 7 as long as it is a regular user device 7 as described above. Therefore, for example, if the user device 7 is a portable device such as a mobile phone, the user device 7 can be used for authentication, and even if it is forgotten, the user device 7 is installed in a facility such as an Internet cafe. If 7 is installed, authentication can be performed from the user device 7 of the facility. In this way, authentication can be performed from anywhere where there is a legitimate user device 7.

  Moreover, according to embodiment mentioned above, the authentication server 3 produces | generates a random number (R) in a series of processes, and transmits to the user apparatus 7, and the user apparatus 7 not only biometric data but the random number (R ) Is also encrypted with a secret key and transmitted to the authentication server 3, and the authentication server 3 also verifies the validity of the encrypted random number (R). Thereby, even if the biometric data encrypted with the secret key is stolen, there is no random number (R), so that it is possible to prevent an unauthorized user from being authenticated as a valid user. Further, even if a random number (R) issued in a certain series of processes and biometric data encrypted with a secret key is stolen, the numerical value of the random number (R) is determined for each series of processes. Even in this case, it is possible to prevent an unauthorized user from being authenticated as a valid user.

  As mentioned above, although embodiment of this invention was described, this embodiment is only the illustration for description of this invention, and is not the meaning which limits the scope of the present invention only to this embodiment. The present invention can be implemented in various other modes without departing from the gist thereof.

  For example, the user device 7 may be any device having a function of measuring a living body, and may be, for example, a mobile phone, a PDA (Personal Digital Assistants), or the like.

  Further, for example, the user device 7 may be configured by a plurality of devices, and in this case, the function of the user device 7 may be distributed among the plurality of devices. Specifically, for example, the user device 7 may be a device including an information processing terminal such as a personal computer and a biometric unit connected thereto. In this case, the control unit 10, the operation unit 11, and the interface Reference numeral 12 is mounted on the information processing terminal, and the biological measurement unit 14, the A / D conversion unit 13, the storage unit 15, and the temporary storage unit 18 may be mounted on the biological measurement unit. In this case, the device ID may be an information processing terminal ID or a biometric unit ID.

  In addition, for example, data stored in the database 2 or data stored in the database 4 may be stored in the storage resource of the authentication server 3.

  For example, the secret key and the public key are specific to the user device 7, but may be specific to the user. In that case, the user can input a secret key to the user device 7.

It is a block diagram which shows the system configuration | structure which concerns on one Embodiment of this invention. It is a functional block diagram of a user apparatus. A series of processing flow performed at the time of user authentication is shown.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 1 ... Public server, 2, 4 ... Database, 3 ... Authentication server, 5 ... Service provision server, 7 ... User apparatus, 8 ... Internet, 10 ... Control part, 11 ... Operation part, 12 ... Interface, 13 ... A / D Conversion unit, 14 ... biometric data measurement unit, 15 ... storage unit, 16 ... secret key, 17 ... device ID, 18 ... temporary storage unit.

Claims (7)

User equipment used by the user;
An authentication server for authenticating the user,
The user equipment is
A biological measurement means for measuring the user's biological body;
A second key storage unit that stores a second key that is paired with the first key, each time when the authentication server is requested to authenticate, the biometric unit causes the user to measure the living body, Holding the biological data representing the measurement result of the living body, reading the second key from the second key storage means, encrypting the held biological data with the read second key, and Send the biometric data to the authentication server,
The authentication server receives the encrypted biometric data, decrypts it with the first key, and authenticates the user based on the decrypted biometric data.
Authentication system. The authentication server sends a specific signal to the user device;
The user apparatus receives the specific signal, and does not hold the biometric data or read the second key before receiving the specific signal, and after receiving the specific signal. Holding the biometric data and reading the second key,
The authentication system according to claim 1. The authentication server generates a random number and sends it to the user device;
The user device encrypts the random number received from the authentication server and the stored biometric data with the read second key, and transmits the encrypted random number and biometric data to the authentication server. And
The authentication server decrypts the encrypted random number and biometric data with the first key, and authenticates the user based on both the decrypted random number and the decrypted biometric data ,
The authentication system according to claim 1. The user equipment is
A device ID storage unit that stores a device ID that is an ID of the user device;
Device ID transmission means for transmitting the device ID stored in the storage means to the authentication server;
Input means for inputting a user ID for specifying the user;
User ID transmission means for transmitting the input user ID to the authentication server;
With
The authentication server is
Device ID receiving means for receiving the device ID from the user device;
First key acquisition means for acquiring a first key corresponding to the received device ID among a plurality of first keys respectively corresponding to a plurality of device IDs;
User ID receiving means for receiving the user ID from the user device;
The biometric data that has been received from the user device, comprising biometric data acquisition means for acquiring biometric data corresponding to the received user ID among a plurality of biometric data respectively corresponding to a plurality of user IDs Is decrypted with the obtained first key, the decrypted biometric data is compared with the obtained biometric data, and the decrypted biometric data is obtained as a result of the comparison. Authenticating the user as a valid user if it matches the biometric data provided,
The authentication system according to claim 1. In the user device used by the user,
Biometric means for measuring a user's biological body;
A second key storage unit that stores a second key that is paired with the first key, each time when the authentication server is requested to authenticate, the biometric unit causes the user to measure the living body, Holding the biological data representing the measurement result of the living body, reading the second key from the second key storage means, encrypting the held biological data with the read second key, and Transmitting the converted biometric data to the authentication server,
User device. Receiving a specific signal from the authentication server, before receiving the specific signal, neither holding the biometric data nor reading the second key, after receiving the specific signal, Holding the biometric data and reading the second key;
The user device according to claim 5. Each time the user device used by the user requests authentication from the authentication server, the biometric means causes the user to measure the living body
The user device holding biological data representing a measurement result of the biological body;
The user device reading a second key paired with the first key from the second key storage means;
The user device encrypting the stored biometric data with the read second key;
The user device transmitting the encrypted biometric data to the authentication server;
The authentication server receiving the encrypted biometric data;
The authentication server decrypting the encrypted biometric data with the first key;
And a step of authenticating the user based on the decrypted biometric data.

Images