JP2007108840A - Authentication code registering device and electronic equipment - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To register an authentication code with excellent confidentiality using an existing authentication code and to carry out safe authentication procedure of excellent versatility. <P>SOLUTION: When registering an authentication code in a communication system composed of an authenticated device 11b and an authenticating device 11a, a command issued from the authenticated device is observed on the authenticating device side through a wired line, and the authentication code is generated according to the input conditions and registered. For instance, when the issue of a specific command in a specific pattern (a command string of existing commands in a special pattern) is detected as the input condition, an authentication code registration mode is started correspondingly, and the authentication code is detected corresponding to the contents of the following commands. The detected result is registered as the authentication code. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to a communication system used when an authentication procedure using an authentication code such as various IDs and passwords is performed, and more particularly to an improvement in a method for registering an authentication code.

In conventional communication systems, it is important to ensure the confidentiality of information to be handled, not limited to wireless communication and wired communication. Therefore, in order to protect the information, the information itself is subjected to encryption processing and transmitted, or a mechanism for limiting the communication partner itself is provided.
An authentication technique is one of the mechanisms for limiting the communication partner itself (for example, see Patent Document 1).
Here, authentication is a procedure performed prior to communication of information in order to communicate only with a partner who has been accessed using an authentication code (ID, password, etc.) registered or distributed in advance. Generally, at the time of authentication, operations such as ID and password input are performed to confirm the identity of the person (a regular communication partner). However, depending on the communication system, the communication device itself may be authenticated instead of the person. In this case, data corresponding to an ID and a password is stored in advance in a communication device that requests communication.
On the other hand, the authentication device checks whether the authentication code at the time of request is registered, regardless of the person or the communication device, and if it is registered, permits the connection.

In such a system, the authentication code is pre-registered when the user starts using the communication system, or the product is sold as a product in which the authentication device and the device to be authenticated pre-register the authentication code. is there. And, as an operation performed when the user starts using the communication system, simple registration that allows each device to recognize only the pair of the authentication device and the device to be authenticated is performed, when inputting an ID and password determined by the user's intention. There is a case to do.
In addition, when the user inputs an ID and password, the authentication device or the device to be authenticated requires an input operation unit. Therefore, in a device that does not have an input operation unit or cannot be attached, the above simple registration function It is effective to use. Also, in the wireless communication system, when performing simple registration, the authentication device and the device to be authenticated are arranged close to each other, and the authentication code is delivered by weak radio waves.

FIG. 9 is a schematic perspective view showing a configuration of a conventional wireless communication system having a simple registration function.
In FIG. 9, the authentication device 1a has a registration start button 2a and an antenna 3a, and the device to be authenticated 1b has a registration request button 2b and an antenna 3b.
In order to register the authentication code, the registration start button 2a of the authentication device 1a and the registration request button 2b of the device to be authenticated 1b are simultaneously pressed to perform wireless communication between the antennas 3a and 3b and issued from the device to be authenticated 1b. The authentication code is stored in the authentication device 1a.

FIG. 10 is an explanatory diagram showing a registration procedure in a wireless communication system having a conventional simple registration function.
First, the registration start button 2a of the authentication device 1a is pushed. Next, the registration request button 2b of the device to be authenticated 1b is pressed within a predetermined time (for example, about several seconds) separately determined. As a result, a registration request is issued from the device to be authenticated 1b and reaches the authentication device 1a.
Here, if the registration request reaches the authentication device 1a within a predetermined time, the authentication device 1a confirms the content of the registration request and issues a registration permission.
In this way, if registration permission is notified to the device to be authenticated 1b, an authentication code is issued from the device to be authenticated 1b, and the authentication device 1a is reached. The authentication device 1a registers (saves) the authentication code and issues a registration notification. This registration notification is notified to the device to be authenticated 1b, and a series of registration processing ends. During this time, the authentication device 1a and the device to be authenticated 1b are close to each other, and the radio waves handled on the wireless path are weak, thereby preventing wireless interception and authentication code leakage.
In the case of a wired communication system, the wireless path is replaced with a wired path. Leakage of the authentication code can be prevented if it is a dedicated line, but if a general line is used, a method such as encryption of the authentication code is separately added to prevent leakage of the authentication code (see, for example, Patent Document 1). ).
JP 2001-209615 A

As described above, in order to protect the information to be communicated, it is necessary to perform encryption processing on the information itself and to limit the communication partner itself, and to limit the communication partner, authentication is required prior to communication. It is necessary to do this, and the authentication code used for this authentication needs to be registered in advance.
However, the authentication code itself may be leaked when the authentication code is registered. In particular, in registration using a wireless path, there is a risk that the contents of communication may be deciphered by wireless interception. If the authentication code is read, there is a risk that information will be easily seen or tampered with thereafter.

  The present invention has been made in view of such a situation, and enables registration of an authentication code excellent in secrecy using an existing authentication code, and a system that realizes a versatile and secure authentication procedure. The purpose is to provide.

In order to achieve the above object, an authentication code registering apparatus according to the present invention includes a command recognition unit for recognizing an input command, and input conditions for the specific command when the specific command is recognized by the command recognition unit. Correspondingly, the apparatus has a recognition code generation means for generating a recognition code, and a recognition code storage means for storing the recognition code generated by the recognition code generation means in a predetermined storage means.
The electronic device of the present invention uses a first communication means for performing communication using a first communication path for performing data communication, and a second communication path for transmitting a specific command different from the first communication path. Second communication means for performing communication, and an authentication code registration unit for generating and registering an authentication code based on a command input from the second communication path, wherein the authentication code registration unit is an input A command recognition means for recognizing a command to be executed, a recognition code generation means for generating a recognition code corresponding to an input condition of the specific command when the specific command is recognized by the command recognition means, and the recognition code generation And a recognition code storage means for storing the recognition code generated by the means in a predetermined storage means.

The electronic device according to the present invention includes an authentication code storing unit that stores an authentication code for requesting registration to the authentication device, a specific command issuing unit that issues a specific command for executing a predetermined process, and a specification by the specific command issuing unit. Command sequence sending means for controlling command issuance, generating a command string of a special pattern corresponding to the authentication code stored in the authentication code storing means, and sending the command pattern of the special pattern to the authentication device It is characterized by that.
The control program of the present invention is a control program for controlling an authentication code registration unit of an authentication device that registers an authentication code and authenticates the device to be authenticated, and is input to the control means of the authentication code registration unit. A command recognition step for recognizing a command, a recognition code generation step for generating a recognition code corresponding to an input condition of the specific command when the specific command is recognized by the command recognition step, and the recognition code generation step. A recognition code storing step of storing the generated recognition code in a predetermined storage means is executed.

According to the authentication code registration device and the electronic apparatus of the present invention, since the recognition code is generated and registered in accordance with the input condition of the specific command input from the authentication code issuing side, the authentication code issuance is performed. An authentication code can be transmitted from the side to the authentication registration side with a specific command and an issuance condition (input condition) for registration.
Therefore, it is possible to perform authentication registration using an existing command without providing a new command for authentication registration, and it is possible to easily add an authentication function in various electronic devices. is there.
In the authentication code registration device and the electronic device of the present invention, the second communication path is used in a system that performs data communication using the first communication path and transmits a specific command using the second communication path. Thus, it is possible to register an authentication code by using a limited specific command transmitted for the purpose of authentication registration different from the original purpose. Therefore, there is an effect that the confidentiality of the authentication code registration can be easily increased by using the second communication path with high confidentiality for the first communication path for data communication in which it is difficult to ensure confidentiality. .

In the electronic device of the present invention, a special pattern command sequence corresponding to the authentication code is generated using an existing command, and the special pattern command sequence is transmitted to the authentication device, whereby the authentication code is assigned to the authentication device. Can communicate. Therefore, it is possible to perform authentication registration using an existing command without providing a new command for authentication registration, and it is possible to easily add an authentication function in various electronic devices. is there.
Further, according to the control program of the present invention, the authentication code registration unit of the authentication device is controlled, and a process for generating and registering a recognition code corresponding to the input condition of the specific command input from the authentication code issuing side is performed. Can be executed.
Therefore, the authentication code can be transmitted from the issuer side of the authentication code to the authentication registration side with a specific command and issuance conditions (input conditions), and registration can be performed without providing a new command for authentication registration. It is possible to easily realize a system that can perform authentication registration using the above command.

Hereinafter, the present embodiment will be described using a specific example.
The authentication code registration system according to the present embodiment is a communication system including an authenticated device that generates an existing command (specific command) and executes various processes, and an authentication device that authenticates the authenticated device. When the authentication code is registered, the command issued from the device to be authenticated is observed on the authentication device side through the wired path, and the authentication code is generated and registered according to the input condition. For example, as an input condition, for example, by detecting that a specific command is issued in a specific pattern (a command string of a special pattern by an existing command), the authentication code registration mode is started correspondingly, and the following command An authentication code is detected corresponding to the content, and the detection result is registered as an authentication code.
In other words, in this embodiment, by registering an authentication code according to an existing command and its input conditions, it is possible to perform an authentication code registration process by transmitting an existing command without providing a new dedicated command. Also, confidentiality can be ensured by processing using a wired path.
In particular, the present embodiment has a second communication path (for example, a dedicated wired path) in addition to a radio path for performing data communication, and has only a command system for data communication on the second communication path. Therefore, the present invention provides an authentication code registration system capable of performing safer authentication code registration via a second communication path in a system in which an authentication registration command cannot be prepared.

FIG. 1 is a schematic perspective view showing the configuration of a communication system applied to the first embodiment of the present invention.
In FIG. 1, the authentication apparatus 11a has a registration start button 12a, an antenna 13a, and a wired path connection port 14a, and the authenticated apparatus 11b has a registration request button 12b, an antenna 13b, a wired path connection port 14b, and a wired path (second line). Communication channel) 15.
As a basic function of the device to be authenticated 11b used in this system, an existing command issue function for issuing an existing command used for normal processing in a predetermined order for registration of an authentication code and sending it to the authentication device 11a through the wired path 15 And a function to be authenticated that is authenticated using an authentication code registered in the authentication device 11a in response to the issuance of the existing command.
On the other hand, as a basic function of the authentication device 11a used in the present system, an authentication code generation function for detecting an existing command issued from the device to be authenticated 11b and generating an authentication code based on the issue order of the existing command; A recognition code registration function for registering the generated authentication code in the authentication device 11a and authentication of the device to be authenticated at the time of data transmission through the wireless (first specified time) based on the registered authentication code It includes an authentication function.
In order to register the authentication code in this example, the registration start button 12a of the authentication device 11a and the registration request button 12b of the device to be authenticated 11b are pressed as a trigger input, and communication is performed via the wired path 15 to be authenticated. An operation of generating and registering authentication codes corresponding to the order of issuing the existing commands issued from the device 11b in the authentication device 11a is executed.

FIG. 2 is an explanatory diagram showing a registration procedure in a communication system having a simple registration function applied to this embodiment.
First, the registration start button 12a of the authentication device 11a is pressed. Next, the registration request button 12b of the device to be authenticated 11b is pushed within a predetermined time (about several seconds) separately determined. As a result, a registration request is issued from the device to be authenticated 11b and reaches the authentication device 11a. Here, if the registration request reaches the authentication device 11a within a predetermined time, the authentication device 11a confirms the content of the registration request and issues a registration permission.
In addition, by accepting only button operations within a predetermined time in this operation, accidents due to operations by unspecified persons are prevented to ensure safety, and the intention of the user to request registration is clearly defined on the device side It is configured to recognize and register.
Thereafter, if registration permission is notified to the device to be authenticated 11b, an authentication code is issued from the device to be authenticated 11b, and the authentication device 11a is reached. The authentication device 11a registers (saves) the authentication code and issues a registration notification. Then, a registration notification is notified to the device to be authenticated 11b, and a series of registration processing is completed. During this time, the authentication device 11a and the device to be authenticated 11b are connected by wire to prevent the authentication code from leaking.
In addition, when some kind of trouble occurs in such a registration procedure and the registration request does not properly reach the authentication apparatus 11a, or when the authentication apparatus 11a cannot perform proper registration, an error notification to that effect may be issued. It is possible to process it as synonymous with error notification by not issuing registration permission or registration notification. When an error occurs in this way, a display or the like for notifying the user of the occurrence of the error may be performed using a display unit (not shown) or the like on the device to be authenticated 11b side.

FIG. 3 is a block diagram showing a part of the internal configuration of the authentication device 11a in the communication system having a simple registration function applied to the present embodiment, and observes a command input from the device to be authenticated 11b through a wired path. An authentication code corresponding to the command is registered, and a block for performing authentication and data transmission / reception by a wireless path using the registered authentication code is mainly shown.
As shown in FIG. 3, the authentication apparatus 11a of this example includes a command distribution block 11a1, a main communication block (first and second communication means) 11a2, an authentication code storage block 11a3, and an authentication code registration block 1a4. The registration start button 12a, the antenna 13a, and the wired path connection port 14a have the configuration shown in FIG. The terminal 16a is an output terminal for commands to a subsequent circuit.
First, the function of each block will be described. The command distribution block 11a1 transmits the command input from the wired path connection port 14a to the main communication block 11a2 and also to the authentication code registration block 11a4. The command distribution block 11a1 transmits a reply command from the main communication block 11a2 to the wired path connection port 14a.
In addition, the main communication block 11a2 performs various controls related to communication with respect to each of the wired path and the wireless path, and transmits and receives data.
The authentication code storage block 11a3 stores the authentication code written from the authentication code registration block 11a4, and outputs the stored authentication code to the main communication block 11a2 by access from the main communication block 11a2.
Further, the authentication code registration block 11a4 is an element that is a feature of this example, and the command input from the command distribution block 11a1 is observed from the start cue from the registration start button 12a, and a specific pattern issuance is issued. If it is in order, the subsequent command is identified, and a code corresponding to the identification result is written in the authentication code storage block 11a3 as an authentication code. The authentication code storage block 11a3 uses a non-volatile storage medium such as a battery backup type semiconductor memory.

In other words, in this example, the existing command codes owned by the system during normal operation are combined in a special order and repetition into a specific pattern that is not normally used and issued as a trigger code for registering the authentication code. When this issuance is confirmed, the subsequent code is stored as an authentication code in the authentication code storage block 11a3. As a result, it is now possible to issue and register secure and secure authentication codes without major changes to existing systems and command systems.
As an existing command used for registration of an authentication code, a command that does not interfere with the normal operation of the system as much as possible is selected and used. For example, in a system for storing and reading data, malfunctions may occur by simply assigning a command used for checking or referencing (reading) the data being saved, rather than erasing or rewriting the data being saved. Even if it occurs, it is preferable to devise so that the data stored at the minimum can be maintained.

Next, a specific example from activation, observation, and registration performed in the authentication code registration block 11a4 of this example will be described.
First, in this example, it is assumed that there are existing commands CMD_A and CMD_B issued via a wired path. Also, CMD_A is defined as data 1, CMD_B is defined as data 0, and the authentication code is 8 [bit].
The authentication code registration block 11a4 starts from the start signal from the registration start button 12a and waits for an input from the command distribution block 11a1. Here, it is assumed that the specific pattern of the command waiting in the authentication code registration block 11a4 is {CMD_A, CMD_A, CMD_B, CMD_B, CMD_A, CMD_B, CMD_B, CMD_A}. That is, in the above-described definition, the specific pattern code is {11001001}.
Then, the command input from the command distribution block 11a1 is observed, and if it matches the specific pattern, the command input continuously is observed.
Here, if the observed input pattern is {CMD_A, CMD_A, CMD_A, CMD_A, CMD_B, CMD_A, CMD_A, CMD_B}, for example, the authentication code is {11110110} based on the above-described definition. } Is written in the authentication code storage block 11a3 as an authentication code.
Therefore, the authentication code registration block 11a4 completes a series of operations after the writing process to the authentication code accumulation block 11a3, and stops observing the command input from the command distribution block 11a1.

FIG. 4 is a flowchart showing the operation of the authentication device 11a in the communication system having the simple registration function applied to this embodiment.
First, when the registration start button 12a is pressed (S001), first, the command counter i and the time counter time are initialized (i = 0, time = 0) (S002).
Next, a command input is waited (S003), and the elapse of a predetermined specified time (first specified time) T1 is determined until the first command input (in the state of the command counter i = 0) is detected (S004). ). Here, if the specified time T1 has passed without the first command input, this processing is terminated (S015).
If the first command input is detected before the specified time T1 has elapsed, the command counter is incremented by 1 (i = i + 1) (S005), and the i-th input command is the i-th command (in the specific pattern described above) Here, it is determined whether or not it matches (referred to as a standby command) (S006). If the i-th input command does not coincide with the i-th standby command of the specific pattern, the process is terminated (S015).
If the i-th input command matches the i-th standby command, it is determined whether this is the last standby command (i = 8) (S007). If it is not the last standby command, the process goes to S003. Return and repeat the command input wait operation. If it is the last standby command, it is determined whether or not all commands have been input within a predetermined specified time (second specified time) T2 (S008), and all commands have been input within the specified time T2. If not, this process ends (S015).

If all commands are input within the specified time T2, the command counter is initialized (S009), and the process proceeds to an authentication code input operation. First, the authentication code is waited for input (S010). If the command corresponds to the authentication code while confirming the input command (S012), the sequence is remembered and all codes are accumulated (S013). The process proceeds to writing an authentication code (S014). Then, after the authentication code writing process, the registration operation is terminated (S015). Note that error processing and error information when the operation is terminated (S015) in the middle of processing are separately defined in the system. Based on this definition, for example, the above-described error notification and display to the user are performed.
As described above, in this example, two specified time determinations are provided in S004 and S008. That is, S004 determines whether or not the input of the specific pattern itself starts, and S008 determines whether or not the specific pattern (all commands) can be input within the time. However, in practice, only one of them may be determined, and it is possible not to provide a specified time.

The operation of this example has been described with reference to the flowcharts, but the following cases may be considered as special cases.
For example, in the above-described example, as a command input condition, the registration button 12a is pressed and a specific pattern is matched, but the registration of the authentication code is selected by inputting only one command because of the system configuration. If it can be identified, or if it can be identified that the registration of the authentication code is selected by the first command after the power is turned on, the authentication code registration process may be performed according to the condition. For example, in a certain system, when the first command after power-on is decided, by entering another command, it is decided to select the registration process of the authentication code, and this If the process proceeds to registration of the authentication code by identifying the command, it is possible to register the authentication code with a simpler process. That is, for those that can be set with a command input different from normal as a condition, the authentication code can be registered according to the condition.
In addition to the command input, an operation such as a button operation or a connector connection may be detected, it may be determined that registration of the authentication code has been selected by this detection, and the authentication code may be registered by subsequent command input. . That is, the authentication code registration using the existing command can be performed by combining some state detection input and command input.

Further, the correspondence between the authentication code and the command is not one-to-one, but a plurality of commands may be associated with each code 0 or 1 with respect to the authentication code (0 or 1). For example, when there are three types of commands A, B, and C, the command A and C are defined as data 0 constituting the authentication code, and the command B is defined as data 1 constituting the authentication code. Is possible. This is effective when it is inconvenient to input only two commands in a system operation (when malfunctions occur).
Furthermore, instead of defining 1-bit data of the authentication code with one command, it is also possible to define a plurality of bit data. For example, 2 bits 00 of the authentication code is defined for the command A, 2 bits 01 of the authentication code is defined for the command B, 2 bits 10 of the authentication code is defined for the command C, and By defining 2 bits 11 of the authentication code, one authentication code can be defined using a small number of command strings.
In other words, various methods such as button operation, connector connection detection, power-on detection, etc. can be adopted for trigger input when starting authentication registration, and also regarding transmission conditions and detection conditions of specific commands and authentication codes, Various methods can be adopted.

However, in actual design, the following precautions are necessary particularly in the above special case and also in a non-special case (such as the example shown in FIG. 4).
First, the command to be handled is a command normally used in the main communication block 11a2. The main communication block 11a2 should not malfunction or be unintentionally written, deleted, or communicated by issuing a specific pattern and authentication code. Further, during use of the normal main communication block 11a2, a specific pattern is detected in the authentication code registration block 11a4, and an authentication code (unintentional code) is continuously formed, which must not be written in the authentication code storage block 11a3.
For this reason, the starting point for starting registration is important, and it is also necessary to provide the specified time described above. In addition, it is important to define a specific pattern and associate an authentication code with a command. These are useful for preventing erroneous writing. In addition, which command is assigned to a specific pattern and which command is associated with the authentication code is also useful for preventing erroneous writing and for preventing unintended operation of the main communication block 11a2.
Since the authentication code is not limited to one, a frame format that can handle “address, authentication code” and a plurality of authentication codes is used instead of only “authentication code” in S010 to S014 of FIG. It is possible. In this case, the address is associated with the address space of the authentication code storage block 11a3. As a result, the address space of one authentication code storage block 11a3 can be divided into a plurality of devices and effectively shared among a plurality of devices to be authenticated.
In this example, the registration start buttons 12a and 12b are provided. However, in the method of generating the starting point for starting registration, for example, it is possible to turn on the power. In this case, the registration start button 12a or 12b becomes unnecessary.

Next, a second embodiment of the present invention will be described.
5 and 6 are schematic perspective views showing the configuration of a communication system applied to the second embodiment of the present invention.
In the system shown in FIGS. 5 and 6, the authentication device 21a is a memory card used as a recording medium such as a digital camera 21c, and the device to be authenticated 21b reads an image from the memory card and outputs it to an output device such as a monitor or a printer. FIG. 5 shows a state in which a memory card (authentication device 21a) is attached to the digital camera 21c, and FIG. 6 shows that the memory card (authentication device 21a) is removed from the digital camera 21c. It shows a state where it is attached to the reader (authenticated device 21b).

Next, the configuration of each part in this example will be described.
First, in the authentication device 21a, photographs and videos taken with the digital camera 21c are stored. The authentication device 21a has a wireless communication function with a built-in antenna 23a, and has a structure that allows data to be transmitted to and received from the device to be authenticated 21b via the antenna 23b. The wired path connection port 24a of the authentication device 21a is the same as the existing memory card I / F, and is inserted into the memory card connector of the digital camera 21c without using the wired path 15 shown in FIG. Can do.
Next, the wired path connection port 24b of the device to be authenticated 21b is the same as the existing memory card I / F, and a memory card can be inserted as a memory card connector. Therefore, the connection to the wired path connection port 24a can be made without going through the wired path, and data transmission / reception is performed in accordance with the specifications of the memory card.
The external connection path 26 is, for example, a video output line, and can output a photograph taken with a digital camera and stored in a memory card to a television screen. Or it is an audio | voice output line, for example, and the music file preserve | saved at the memory card can be output to a speaker etc. Alternatively, for example, it is a computer connection line, and a data file stored in a memory card can be output to a computer, a printer, or the like.
In the state shown in FIG. 5, the authentication device 21a is inserted into the digital camera 21c and transmits and receives data via a wireless path. In the state shown in FIG. 6, the authentication device 21a is replaced with a memory card connector of the device to be authenticated 21b, and data can be transmitted and received via a wired path.

In the present embodiment, authentication code registration is first performed in the state shown in FIG. 6, and then only in response to an authentication request from the device to be authenticated 21b registered in the state shown in FIG. Permits the connection, and transmits the data (photograph or the like) stored in the authentication device 21a (memory card) to the device to be authenticated 21b.
In registering the authentication code, only the command of the existing memory card specification is used to guarantee the operation and stored data of the memory card itself, and the authentication code of the authentication target device 21b is stored in the authentication device 21a. You can write to the block. Specifically, as existing commands handled by the memory card, it is assumed that there are two systems, that is, a command used for data writing and a command used for data reading. Of these, only a command used for data reading is registered as an authentication code. Therefore, even if a malfunction occurs, it can be terminated by an error operation without affecting the data in the memory, and the stored data can be guaranteed.

In the configuration of this example, the memory card may not be provided with a function such as a registration start button. Therefore, as a function corresponding to the registration start button serving as an alternative means, for example, the authentication device 21a has a power-on time when a memory card connector is inserted, and the authenticated device 21b has a memory card physically inserted into the memory card connector. It can be defined as a point in time. However, the device to be authenticated 21b needs a button or the like for waiting for insertion of the authentication device 21a.
Further, as an equivalent function, the authentication target device 21b is provided with a registration start button, and is defined as the time when the memory card already inserted is turned on (or turned off and then turned on again) by pressing the button. Can be kept.
As yet another alternative, a function corresponding to a registration start button in a method involving insertion / extraction of a memory card includes an authentication device (memory card) 21a from the stage where the authentication device 21b has already been inserted. It can be defined as a point in time when a registration start request (corresponding to pressing the registration start button) is issued from 21b to the authentication apparatus 21a via the antennas 23b and 23a. However, in this case, since the authentication code has not yet been registered, the wireless command from the device to be authenticated 21b needs to be a dedicated control command for registration (communication regardless of whether authentication is possible) or the like.
It is also possible to adopt a system in which the registration permission notification is performed on the wireless route, and a predetermined time is defined from that point, and the authentication code is issued and registered on the wired route.

In addition to this, test communication is performed by combining command transmission / reception on the wireless path and command transmission / reception on the wired path (existing command) for erroneous startup and security enhancement, and between the appropriate authentication device and the device to be authenticated. It is also possible to adopt a system in which an authentication code is issued and registered after confirming that normal communication is performed.
For example, the registration request processing start of the device to be authenticated 21b is issued to start registration request processing on the wireless route, the authentication device 21a requests to issue CMD_A five times on the wireless route, and the device to be authenticated 21b issues CMD_A on the wired route. Is issued five times after issuing the request notification on the wireless path, and the authentication device 21a confirms both the wired path and the wireless path. After this confirmation, CMD_B is requested to be issued three times again on the wireless path, CMD_B is issued three times on the wired path from the device to be authenticated 21b, then a request achievement notification is issued on the wireless path, and the authentication apparatus 21a Confirms both wired and wireless routes. After repeating such a procedure a plurality of times, the process proceeds to issue a registration request and issue an authentication code.
As a result, it can be assured that the device to be authenticated 21b is not an existing device (for example, a conventional memory card host device) that can simply issue CMD_A and CMD_B.

FIG. 7 is a block diagram showing a schematic configuration of an authentication device 21a and an authenticated device 21b in a communication system having a simple registration function applied to this embodiment.
The authentication device 21a includes a connector 212, an I / F unit 213, an authentication code registration unit 214, a memory control unit 215, a flash memory unit 216, and the like in a card-type casing 211.
On the other hand, the device to be authenticated 21b includes a connector 222, a memory card control unit 223, a wireless communication unit 224, a main control unit 225, and the like in a housing 221.
In the authentication device 21a, the connector 212 is connected to the connector 222 of the device to be authenticated 21b, and the I / F unit 213 performs conversion of data transmitted to and received from the device to be authenticated 21b via the connector 212.
The authentication code registration unit 214 observes the command input from the device to be authenticated 21b through the wired path (connector), registers the authentication code corresponding to the command of the specific pattern, and uses the registered authentication code to register the wireless path. Authentication and data transmission / reception.
The memory control unit 215 controls data writing and reading with respect to the flash memory unit 216.
If no specific pattern command relating to authentication is observed, data transmitted to and received from the device to be authenticated 21b is transmitted to the memory control unit 215 side through the authentication code registration unit 214. However, commands of a specific pattern may be captured on the authentication code registration unit 214 side and may not be transmitted to the memory control unit 215 side, but all commands regardless of whether or not a specific pattern command is observed. May be transmitted to the memory control unit 215 side through the authentication code registration unit 214.
In the authenticated device 21b, the memory card control unit 223 includes a function of the memory card I / F, and manages access to the memory card connected via the connector 222.
The wireless communication unit 224 controls wireless communication using the antenna 23b.
The main control unit 225 includes a CPU, RAM, ROM, and the like, and controls the entire device to be authenticated 21b.

FIG. 8 is a block diagram mainly showing the internal configuration of the authentication code registration unit of the authentication device 21a shown in FIG.
The basic configuration is the same as the example shown in FIG. 3, but regarding the connection, in this example, a signal line between the main communication block 21a2 and the authentication code registration block 21a4 is added. Through this connection, processing such as a registration start function using both the above-described wired path and wireless path, prevention of erroneous activation, and security enhancement can be performed.
Further, the terminal 22a is a terminal for inputting, for example, a connector connection detection signal, and this input activates an authentication code registration operation. The terminal 27a is an output terminal to the memory control unit 215.
In the case of the method of registering the authentication code by inserting the memory card into the connector as in this example, unlike the conventional registration method via the wireless path, another device to be authenticated 21b is registered by mistake or intentionally. It is also possible to ensure that it is not possible to perform.

In addition, this invention is not limited to the above Example, Furthermore, a deformation | transformation is possible.
For example, in the above embodiment, a wired path is used as a communication path for issuing a command to the authentication code registration block. In the present invention, if security is ensured, a command is issued using a wireless path. It is also possible to register the authentication code safely in the system. Therefore, the second communication path for registering the authentication code is not limited to a wired path but may be a wireless path.
In the above-described embodiment, the process for registering the authentication code has been described. However, various parameters can be registered using the same method.
In the above-described embodiment, the device to be authenticated 21b has a function of inserting a memory card as the authentication device 21a and issuing an authentication code, and a function of receiving authentication by the authentication device 21a via wireless communication in one case. However, it is also possible to separate them.
When the device to be authenticated 21b is separated into the authentication code issuing device and the authentication main body device, first, the memory card is set in the authentication code issuing device and the authentication code is registered in the memory card. Next, authentication and data communication are performed wirelessly between the main body to be authenticated and the memory card, and data is output from the main body to be authenticated to an output device.

In the above-described embodiment, the authentication code is stored in the recognition code storage block in the authentication code registration unit on the authentication device side, but is stored in a non-volatile recording medium arranged outside the authentication code registration unit. May be.
In the above-described embodiments, the configuration in which the authentication code registration unit is built in the authentication device such as a memory card has been described. However, the authentication device in which the authentication code registration unit can be mounted is widely applied to various electronic devices that perform authentication. Is possible. Moreover, it is not limited to a structure incorporated in an electronic device, and may be configured as a single authentication code registration device in the form of an IC chip or a circuit module.

Furthermore, the present invention can also be configured as a control program supplied to an apparatus equipped with the first and second communication means and the system controller (CPU). That is, the function of the present invention can be realized by incorporating a control program for executing the operation of the above-described embodiment into the controller of the authentication code registration unit.
In particular, the present invention can be realized by using existing communication means and an existing command system. Therefore, if it is a compatible device, it can be realized by adding a control program without changing the existing hardware. In this type of device, it is possible to improve the function at low cost.

It is a schematic perspective view which shows the structure of the communication system applied to the 1st Embodiment of this invention. It is explanatory drawing which shows the registration procedure in the communication system shown in FIG. It is a block diagram which mainly shows the internal structure of the authentication code registration part of the authentication apparatus of the communication system shown in FIG. It is a flowchart which shows the registration procedure in the communication system shown in FIG. It is a schematic perspective view which shows the structure of the communication system applied to the 2nd Embodiment of this invention. It is a schematic perspective view which shows the state at the time of the authentication registration of the communication system shown in FIG. It is a block diagram which shows schematic structure of the authentication apparatus and to-be-authenticated apparatus in the communication system which has the simple registration function applied to this. It is a block diagram which shows the internal structure of the authentication code registration part mainly of the authentication apparatus shown in FIG. It is a schematic perspective view which shows the structure of the radio | wireless communications system which has the conventional simple registration function. It is explanatory drawing which shows the registration procedure in the radio | wireless communications system which has the conventional simple registration function.

Explanation of symbols

  11a: Authentication device, 11b: Device to be authenticated, 12a: Registration start button, 12b: Registration request button, 13a, 13b ... Antenna, 14a, 14b ... Wired connection port, 15 ... Wired route.

Claims (19)

Command recognition means for recognizing input commands;
A recognition code generating means for generating a recognition code corresponding to an input condition of the specific command when a specific command is recognized by the command recognition means;
A recognition code storage means for storing the recognition code generated by the recognition code generation means in a predetermined storage means;
An authentication code registration device comprising:   First communication means for performing communication using a first communication path for performing data communication, and second communication for performing communication using a second communication path for transmitting a specific command different from the first communication path 2. The authentication code registration apparatus according to claim 1, wherein the command recognition means recognizes a specific command input from the second communication path.   The authentication code registration device according to claim 2, wherein the first communication path is a wireless communication path.   The authentication code registration device according to claim 2, wherein the second communication path is a wired communication path.   2. The authentication code registering apparatus according to claim 1, wherein the command recognition means identifies a specific trigger input and activates a recognition operation for the specific command when a specific button operation is detected.   6. The authentication code registering apparatus according to claim 5, wherein the command recognition means activates a recognition operation for the specific command based on a specific command input within a first specified time from a specific trigger input.   6. The authentication code registration apparatus according to claim 5, wherein the command recognition means detects an authentication code based on a specific command input after a specific trigger is input.   6. The authentication code registration device according to claim 5, wherein the specific trigger input is a specific button operation input.   6. The authentication code registration device according to claim 5, wherein the specific trigger input is a connector connection detection input.   The command recognition means identifies an input pattern of a specific command, starts an authentication code recognition operation when the specific pattern is detected, and then detects the authentication code based on the input specific command The authentication code registration device according to claim 1.   11. The authentication code registration apparatus according to claim 10, wherein the command recognition unit detects an authentication code based on the specific command when the input of the specific command is completed within a second specified time. A first communication means for performing communication using a first communication path for performing data communication;
Second communication means for performing communication using a second communication path for transmitting a specific command different from the first communication path;
Generating an authentication code based on a command input from the second communication path, and having an authentication code registration unit for registration;
The authentication code registration unit
Command recognition means for recognizing input commands;
A recognition code generating means for generating a recognition code corresponding to an input condition of the specific command when a specific command is recognized by the command recognition means;
A recognition code storage means for storing the recognition code generated by the recognition code generation means in a predetermined storage means;
An electronic device comprising:   The electronic device according to claim 12, wherein the first communication path is a wireless communication path.   The electronic device according to claim 12, wherein the second communication path is a wired communication path. An authentication code storage means for storing an authentication code for requesting registration to the authentication device;
A specific command issuing means for issuing a specific command for executing a predetermined process;
Controls issuance of a specific command by the specific command issuing means, generates a command string of a special pattern corresponding to the authentication code stored in the authentication code storage means, and sends the command pattern of the special pattern to the authentication device Command string sending means;
An electronic device comprising:   First communication means for performing communication using a first communication path for performing data communication, and second communication for performing communication using a second communication path for transmitting a specific command different from the first communication path 16. The electronic apparatus according to claim 15, wherein the command string sending means sends a command string using a second communication path.   The electronic device according to claim 16, wherein the first communication path is a wireless communication path.   The electronic device according to claim 16, wherein the second communication path is a wired communication path. A control program for controlling an authentication code registration unit of an authentication device that registers an authentication code and authenticates a device to be authenticated,
In the control means of the authentication code registration unit,
A command recognition step for recognizing the input command;
A recognition code generating step for generating a recognition code corresponding to an input condition of the specific command when the specific command is recognized by the command recognition step;
A recognition code storage step of storing the recognition code generated by the recognition code generation step in a predetermined storage means;
A control program characterized by causing

Images