JP2008176383A - Method for creating one-time password, method for authenticating one-time password, one-time password creation apparatus, ic card with function to create one-time password, one-time password authentication apparatus, ic card program, and computer program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a one-time password creation apparatus and a one-time password authentication apparatus preventing a user's PIN (Personal Identification Number) from being known by a third party in two-factor authentication that uses a one-time password and the PIN, while reducing the input burden on the user. <P>SOLUTION: The one-time password creation apparatus comprises an IC card 1 and an IC card viewer 6. When the user 6 inputs a PIN 60 to the IC card viewer 2, the IC card 1 creates a one-time password while using as parameters a counter value held in the IC card 1 and the PIN 60 input by the user 6. A web server 5 serving as the one-time password authentication apparatus creates a one-time password while using as parameters a counter value held in the web server 5 and the PIN of the user 6 stored in the web server 5, and authenticates the one-time password obtained from the user 6. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to a technique for authenticating a user, and more particularly to a technique for authenticating a user using a one-time password which is a disposable password.

  Two-factor authentication is attracting attention for applications such as net banking as a measure against phishing and spyware. Two-factor authentication is a method for authenticating a user by combining two authentication factors having different properties.

  When authenticating a user by two-factor authentication, a password such as a PIN (Personal Identification Number), which is an authentication factor related to “know” only, and “know only by myself” In general, user authentication is performed using an authentication element other than the authentication element according to the above.

  Biometric information (for example, fingerprint), which is an authentication factor related to “self”, may be used as an authentication factor other than “know” only. On the other hand, since users have a strong sense of resistance, there are increasing cases of using one-time passwords (OTP: One Time Password), which is an authentication factor related to “has only you”.

  There are two methods of generating an OTP using a token, a time synchronization method and a counter method. For example, Patent Document 1 discloses an invention related to a technique for generating an OTP by a counter synchronization method. 2 discloses an invention related to a technique for generating an OTP by a time synchronization method.

Patent Document 1 is an invention that improves the confidentiality of an encryption key used when generating a counter value or a one-time password by advancing a counter used in a counter synchronization method based on a random number. Further, Patent Document 2 is an invention that prevents unauthorized use of a one-time password by including a second or a counter value indicating the number of times a one-time password is generated in the time used in the time synchronization method.
JP 2001-352324 A JP 11-316740 A

  Certainly, the security of user authentication can be improved by using two-factor authentication that combines user authentication by PIN and user authentication by OTP. However, when performing user authentication, a PIN that only the user knows can be used for net banking. It is necessary to input to the web server 5, and it is inevitable that the PIN is passed to a third party by a phishing scam or the like.

  Furthermore, in the two-factor authentication by password and OTP, although the security of user authentication is improved, the user needs to input both PIN and OTP.

  Accordingly, the present invention provides a one-time password generation method in which a PIN that only a user can know does not pass a personal identification number to a third party due to phishing, etc., and can further reduce the input burden on the user. An object is to provide a one-time password authentication method, a one-time password generation device, an IC card having a one-time password generation function, a one-time password authentication device, an IC card program, and a computer program.

  A first invention for solving the above-described problem is a method of generating a one-time password used for user authentication, step a1): when generating the one-time password of a user to be authenticated, A step of acquiring a stored password from the user, step b2): the password acquired from the user in step a1) and variable data different each time the one-time password is generated as parameters, The step of generating the one-time password of the user is executed in order by performing an operation according to the algorithm.

  Further, the second invention is a one-time password generation device for generating a one-time password used for user authentication, wherein the one-time password generation device acquires a password of a user to be authenticated from the user. One-time password generation for generating the one-time password of the user by calculating according to a predetermined algorithm using variable data that is different each time the password acquired from the user and the one-time password are generated as parameters And display means for displaying the one-time password.

  Furthermore, a third invention is the one-time password generation device according to the second invention, wherein the one-time password generation device includes an IC card having a command that operates as the one-time password generation means, An IC card viewer for mounting an IC card, the IC card viewer comprising the password acquisition means and the display means, and transmits a command APDU of the command including the acquired password to the IC card, The one-time password included in the response APDU of the command of the IC card is displayed.

  Furthermore, the fourth invention is an IC card for generating a one-time password used for user authentication, and the IC card uses the one-time password as variable data that is different each time the one-time password is generated. A counter that is updated every time it is generated, and after updating the counter, the command data transmitted from the terminal and the value of the counter are used as parameters, and calculation is performed according to a predetermined algorithm, thereby A one-time password generation command for generating a time password and transmitting the generated one-time password to the terminal is provided.

  Further, the fifth invention is an IC card program mounted on an IC card for generating a one-time password used for user authentication, and the IC card is updated every time the one-time password is generated. After the counter is updated, the counter value and the command data transmitted from the terminal are used as parameters, and the one-time password of the user is generated and generated by calculating according to a predetermined algorithm. An IC card program for causing the IC card to function as a one-time password generation command for transmitting the one-time password to the terminal.

  Further, the sixth invention is a method for authenticating a one-time password generated by a user, step a): obtaining the identification data of the user to be authenticated and the one-time password from the user, step b ): Step of determining the password corresponding to the identification data acquired in step a) from the database storing the password in association with the user identification data, step c): indexing in step b) Step of generating the one-time password on the authenticating side by using variable data that is different each time the password and the one-time password are authenticated as parameters, and calculating in accordance with a predetermined algorithm, acquired in step d): step a) The one-time password of the user and the password; Tsu and collates the one-time password generated authentication side flop c), the characterized in that performing the step of authenticating the one-time password of the user acquired in step a), in this order.

  Furthermore, a seventh invention is a one-time password authentication device for authenticating a one-time password generated by a user, wherein the one-time password authentication device includes a database for storing the password in association with the identification data of the user; The password acquisition means for acquiring the identification data and the one-time password of the user from the user, and the password corresponding to the acquired identification data is determined from the database, and is different each time the one-time password is authenticated. Means for generating the one-time password of the one-time password authentication device by calculating the variable data and the calculated password as a parameter according to a predetermined algorithm, the one-time password of the one-time password authentication device, and the By matching the one-time password over THE, characterized in that it comprises a one-time password authentication means for authenticating said one-time password of the user.

  The eighth invention is a computer program implemented in a server that authenticates a one-time password generated by a user, wherein the server acquires the identification data of the user and the one-time password from the user. Variable data and password that differ each time the one-time password is authenticated by determining the password corresponding to the acquired identification data from a password acquisition means and a database that stores the password in association with the user identification data And generating the one-time password of the one-time password authentication device, and calculating the one-time password of the one-time password authentication device and the one-time password of the user by calculating according to a predetermined algorithm. By, as a one-time password authentication means for authenticating said one-time password of the user, a computer program for operating the server.

  The one-time password generated in the present invention is generated by using a user's PIN and different seed data (for example, a counter value and time) as parameters each time the user's one-time password is generated. It is an authentication factor having two properties: “has only” and “know only”.

  Therefore, as long as the one-time password generated in the present invention is generated by the same procedure as that for generating the user's one-time password and the user's one-time password is authenticated, there are two factors. In addition to being expected to have the same effect as authentication, there is no need to enter the user's PIN on the authentication side, reducing the risk of a PIN being passed to the hands of a third party due to phishing, etc. The burden can be reduced.

  By implementing the one-time password generating apparatus according to the present invention with an IC card viewer used in combination with an IC card and an IC card, it becomes possible to use an IC cash card, an IC credit card, etc. This makes it easier to apply to banking and other financial institution systems.

  According to the above-described present invention, a PIN that only a user can know does not pass a PIN to a third party due to phishing, etc., and can further reduce the user's input burden. A generation method, a one-time password authentication method, a one-time password generation apparatus, an IC card having a one-time password generation function, a one-time password authentication apparatus, an IC card program, and a computer program can be provided.

  From here, this invention is demonstrated in detail, referring a figure. FIG. 1 is a diagram for explaining a system for user authentication using a one-time password (OTP: One Time Password). This system includes an IC card 1 possessed by a user 6 and data communication with the IC card 1. An IC card viewer 2 having a function to perform, a client 3 operated by the user 6, and a web server 5 connected to the client 3 via the network 4 and providing a certain service (for example, network banking). Has been.

  In the system shown in FIG. 1, the function of the OTP generation device according to the present invention is realized by the IC card 1 and the IC card viewer 2, and the web server 5 has the function of the OTP authentication device according to the present invention.

  The OTP method includes a time synchronization method and a counter synchronization method, but the OTP method used in this embodiment is a counter synchronization method.

  In the counter synchronization method, the counter value of the web server 5 and the counter value of the IC card 1 are synchronized, and the OTP used for user authentication is the PIN 60 (Personal Identification Number) that is the password of the user 6 and the IC. Using the counter value of the card 1 as a parameter, it is generated inside the IC card 1 according to a predetermined algorithm (for example, cryptographic operation using an encryption key).

  The conventional counter-synchronized OTP is generated using only the counter value of the token as a parameter and is an authentication factor related to “has only”, whereas the OTP generated in the present invention is used. Is generated by using the PIN 60 of the user 6 and the counter value of the IC card 1 as parameters, so that it relates to “has only” and “know” only. As long as it becomes an authentication factor and authenticates the OTP generated in the present invention, two-factor authentication is performed.

  From here, the IC card 1 and the IC card viewer 2 as the OTP generation device according to the present invention and the web server 5 as the OPT authentication device will be described in more detail. FIG. 2 is a block diagram of the system illustrated in FIG. First, the IC card 1 and the IC card viewer 2 constituting the OTP generation apparatus according to the present invention will be described.

  As shown in FIG. 2, the IC card 1 secretly stores the counter 11 and the card key 12 as data used by the OTP generation command 10 and data used by the OTP generation command 10. is doing.

  The card key 12 stored in the IC card 1 is an encryption key that is different for each IC card 1, is generated from the master key 52 of the web server 5, is uniquely determined from the user ID that is identification information of the user 6, and the IC card 1 is issued, the card key 12 is stored secretly in the IC card 1. Further, when the IC card 1 is issued, the initial value of the counter 11 set by the web server 5 is stored secretly in the IC card 1.

  The OTP generation command 10 provided in the IC card 1 increments the value of the counter before generating the OTP of the user 6, and transmits the value of the counter 11 when the OTP generation command 10 is executed and the IC card viewer 2. The generated PIN 60 is converted into plain text, the plain text is encrypted according to a predetermined algorithm using the card key 12 stored in the IC card 1, and the OTP of the user 6 is generated. Reply to the card viewer 2.

  FIG. 3 is a diagram for explaining the IC card viewer 2 possessed by the user 6. The IC card viewer 2 is a device for mounting the IC card 1 and generating the OTP on the IC card 1, and is used when the user 6 inputs the button 20 and the user 6 inputs the PIN 60 when generating the OTP. And a display 22 for displaying the OTP generated by the IC card 1.

  When the user 6 presses the button 20, the IC card viewer 2 displays a screen for inputting the PIN 60 on the display 22, prompts the user 6 to input the PIN 60, and generates a command APDU of the OTP generation command 10 including the PIN 60 input by the user 6. Is sent to the IC card 1 and the OTP returned from the IC card 1 is displayed on the display 22.

  A browser is installed in the client 3 illustrated in FIG. 1, and the user 6 accesses the web server 5 connected to the client 3 through the network 4 by operating the client 3.

  The web server 5 has a function of authenticating an OTP transmitted from a client as one function of business logic for providing a service. In order to realize the function of authenticating the OTP, the web server 5 is configured as shown in FIG. The server 5 includes an OTP authentication unit 50 and a database 55 that stores data related to the user 6. The OTP authentication unit 50 stores the user ID and OTP of the user 6 to be authenticated in the OTP acquisition unit 51 and the database 55. An OTP generation unit 53 that generates an OTP on the web server 5 side from the generated data, and an OTP authentication unit 54 that authenticates the OTP of the user 6 transmitted from the client 3, and the OTP generation unit further includes an OTP generation unit on the server side It has a master key 52 used when generating an OTP.

  FIG. 4 is a diagram for explaining data stored in the database 55. In the database 55, the PIN 56 of the user 6 registered in advance in the web server 5 and the IC card 1 possessed by the user 6 specified by the user ID are associated with the user ID that is identification data allocated to each user 6. The counter 57 synchronized with the counter 11 is stored, and the value of the counter 57 corresponding to the authenticated user 6 is incremented before the OTP authentication means 50 operates and generates the OTP. The user ID, which is identification data assigned to each user 6, is notified to the user 6 when the IC card 1 is distributed to the user 6.

  The OTP acquisition unit 51 of the OTP authentication means 50 provided in the web server 5 has a function of accepting a user ID and OTP from the user 6 accessing the web server 5, and the OTP acquisition unit 51 is realized by one web page. The web page has at least a form for the user 6 to input the user ID and a form for the user 6 to input the OTP. The user 6 accessing the web server 5 can access the web page on the user 6 side. The generated OTP and user ID of the user 6 are input.

  The OTP generation unit 53 of the OTP authentication unit 50 has a function of generating the OTP of the web server 5 used when authenticating the OTP of the user 6. The user ID input to the OTP acquisition unit 51 and the web server 5 The server key is generated from the master key 52 stored in the server and the database 55 is referred to, the PIN 56 stored in association with the user ID input to the OTP acquisition unit 51 and the value of the counter 57 are acquired, The acquired PIN 56 and the value of the counter 57 are set as plain text, and the plain text is encrypted with a predetermined algorithm using the server key, thereby generating the OTP of the web server 5.

  The OTP authentication unit 54 of the OTP authentication unit 50 collates the OTP of the user 6 input to the OTP acquisition unit 51 with the OTP of the web server 5 generated by the OTP generation unit 53, thereby inputting the OTP acquisition unit 51. The validity of the OTP of the user 6 is verified.

  From here, the procedure for generating and authenticating the OTP of the user 6 will be described, taking the system of FIG. 1 as an example. FIG. 5 is a diagram showing a procedure for generating and authenticating the OTP of the user 6. Note that the client 3 only plays a role of mediating between the user 6 and the web server 5, and therefore the client 3 is omitted in the diagram of FIG.

  When the user 6 uses the service of the web server 5, the user 6 operates the client 3 to access the web server 5 (step S <b> 1), and when the web server 5 is accessed by the user 6, the OPT authentication unit 50. The OTP authentication unit 50 executes the OTP acquisition unit 51, transmits a web page for inputting the user ID and the OTP of the user 6 to the client 3, and sends the user ID and the OTP of the user 6 to the user 6. Is requested (step S2).

  When the web page for inputting the user ID and the OTP of the user 6 is displayed on the client 3, the user 6 presses the button 20 of the IC card viewer 2, and the user 6 instructs the IC card viewer 2 to generate an OTP. (Step S3).

  When the IC card viewer 2 receives the OTP generation instruction, the IC card viewer 2 requests the user 6 to input the PIN 60 by displaying a screen prompting the user 6 to input the PIN 60 on the display 22 (step S4).

  When the screen prompting the input of the PIN 60 is displayed on the display 22 of the IC card viewer 2, the user 6 operates the numeric keypad 21 of the IC card viewer 2 to input the PIN 60 into the IC card viewer 2 (step S5). When the PIN 60 is input, the IC card viewer 2 transmits the command APDU of the OTP generation command 10 including the input PIN 60 to the mounted IC card 1 (step S6).

  When the command APDU of the OTP generation command 10 is transmitted from the IC card viewer 2, the OTP generation command 10 of the IC card 1 is activated, and the OTP generation command 10 increments the value of the counter 11 of the IC card 1 (step S7) Using the PIN 60 transmitted from the IC card viewer 2 and the value of the counter 11 at that time as plain text, the plain text is encrypted according to a predetermined algorithm using the card key 12, and the OTP of the user 6 is generated. (Step S8).

  When generating the OPT of the user 6, the IC card 1 generates a response APDU including the generated OTP of the user 6, returns the generated response APDU to the IC card viewer 2 (step S9), and the IC card viewer 2 responds. The OTP of the user 6 included in the APDU is displayed on the display 22 (step S10).

  When the OTP of the user 6 is displayed on the display 22 of the IC card viewer 2, the user 6 inputs the displayed OTP and user ID of the user 6 on the input screen. It transmits to the server 5 (step S11).

  When the OTP acquisition unit 51 acquires the OTP and user ID of the user 6, the OTP authentication unit 50 of the web server 5 operates the OTP generation unit 53, and the OTP generation unit 53 first acquires the acquired user ID and the web server 5. The server key corresponding to the card key 12 stored in the IC card 1 possessed by the user 6 is generated from the master key 52 stored in (step S12).

  When generating the server key, the OTP generation unit 53 of the OTP authentication unit 50 searches the database 55, acquires the values of the PIN 56 and the counter 57 stored in association with the acquired user ID from the database 55, and acquires them. The plain text is used as the value of the PIN 56 and the counter 57, and the plain text is encrypted with the same algorithm as the IC card 1 using the generated server key, thereby generating the OTP of the web server 5 (step S13).

  When the OTP generation unit 53 generates the server OTP, the OTP authentication unit 54 of the OTP authentication unit 50 operates the client 3 by collating the acquired OTP of the user 6 with the generated OTP of the web server 5. The user 6 who is present is authenticated (step S14).

  Then, the OTP authentication means 50 of the web server 5 transmits the OTP authentication result of the user 6 to the client 3, and if the OTP authentication of the user 6 is successful, the service provided by the web server 5 is provided to the user. A web page for use by 6 is transmitted to the client 3, and the user 6 is allowed to use the service (step S15).

  The present invention is not limited to the embodiments described so far, and various modifications and changes can be made, and these are also within the equivalent scope of the present invention. For example, in the above-described form, the OTP method is a counter synchronization method, but the OTP method may be a time synchronization method.

  When the OTP method is the time synchronization method, when generating the OTP of the user 6, the token having the functions of the IC card 1 and the IC card viewer 2 described so far generates the PIN 60 and the OTP of the user 6. OTP is generated according to a predetermined algorithm using the time of day as a parameter.

The figure explaining the system which authenticates a user using a one-time password. The block diagram of the system which authenticates a user using a one-time password. The figure explaining an IC card viewer. The figure explaining the data memorize | stored in a database. A diagram showing a procedure for generating and authenticating a user OTP.

Explanation of symbols

1 IC card 10 OTP generation command, 11 IC card counter, 12 card key 2 IC card viewer 20 button, 21 numeric keypad, 22 display 3 client 4 network 5 web server 50 OTP authentication means, 51 OTP acquisition unit, 52 master key 53 OTP generation unit, 54 OTP authentication unit 55 database, 56 PIN, 57 counter 6 user 60 PIN stored by user

Claims (8)

A method for generating a one-time password used for user authentication,
Step a1): obtaining a password stored by the user from the user when generating the one-time password of the user to be authenticated;
Step b2): Using the password acquired from the user in step a1) and variable data that is different each time the one-time password is generated as a parameter, and calculating according to a predetermined algorithm, the one of the user Generating a time password,
One-time password generation method characterized by sequentially executing.   A one-time password generation device that generates a one-time password to be used for user authentication, wherein the one-time password generation device includes password acquisition means for acquiring a password of a user to be authenticated from the user, and the acquired from the user Each time the password and the one-time password are generated, variable data that is different each time is used as a parameter, and a one-time password generation unit that generates the one-time password of the user by calculating according to a predetermined algorithm, and the one-time password A one-time password generation device comprising display means for displaying.   3. The one-time password generation device according to claim 2, wherein the one-time password generation device includes an IC card having a command that operates as the one-time password generation means, an IC card viewer that mounts the IC card, The IC card viewer includes the password acquisition unit and the display unit, transmits the command APDU of the command including the acquired password to the IC card, and transmits the command APDU of the command of the IC card to the response APDU of the command A one-time password generating apparatus, wherein the one-time password included is displayed.   An IC card for generating a one-time password used for user authentication, and the IC card is updated each time the one-time password is generated as variable data that is different each time the one-time password is generated. After the counter is updated, the command data transmitted from the terminal and the value of the counter are used as parameters, and the one-time password of the user is generated by calculating according to a predetermined algorithm. An IC card comprising a one-time password generation command for transmitting the one-time password to the terminal.   An IC card program mounted on an IC card that generates a one-time password to be used for user authentication, the IC card having a counter that is updated each time the one-time password is generated. After the update, the value of the counter and the command data transmitted from the terminal are used as parameters, and the one-time password of the user is generated by calculating according to a predetermined algorithm, and the generated one-time password is stored in the terminal. An IC card program for causing the IC card to function as a one-time password generation command to be transmitted. A method for authenticating a one-time password generated by a user,
Step a2): obtaining the identification data and the one-time password of the user to be authenticated from the user;
Step b2): Determining the password corresponding to the identification data acquired in step a2) from the database storing the password in association with the user identification data;
Step c2): The authentication-side one-time password is generated by calculating according to a predetermined algorithm using different variable data as a parameter each time the password and the one-time password determined in step b2) are authenticated. Step,
Step d2): By comparing the one-time password of the user acquired in step a2) with the one-time password on the authentication side generated in step c2), the one-time password of the user acquired in step a2) Authenticating the time password,
One-time password authentication method characterized by sequentially executing.   A one-time password authentication device for authenticating a one-time password generated by a user, wherein the one-time password authentication device includes a database that stores the password in association with identification data of the user, the identification data of the user, and Password acquisition means for acquiring the one-time password from the user, the password corresponding to the acquired identification data is indexed from the database, and variable data and indexed password that are different each time the one-time password is authenticated , And means for generating the one-time password of the one-time password authentication device, the one-time password of the one-time password authentication device, and the one-time password of the user By collating a password, one-time password authentication apparatus characterized by comprising a one-time password authentication means for authenticating said one-time password of the user. A computer program implemented in a server for authenticating a one-time password generated by a user, wherein the server includes password acquisition means for acquiring the identification data of the user and the one-time password from the user, and the user's From the database that stores the password in association with identification data, the password corresponding to the acquired identification data is determined, variable data and the password that are different each time the one-time password is authenticated, and according to a predetermined algorithm By calculating, the means for generating the one-time password of the one-time password authentication device, the one-time password of the one-time password authentication device and the one-time password of the user are collated, As a one-time password authentication means for authenticating the one-time password of The, computer program for operating the server.

Images