JP2009031940A - Issuing system for onetime password - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an issuance technology of a one-time password which can be easily introduced while securing high security by managing information necessary for introduction in a batch. <P>SOLUTION: The carrier side device of a portable telephone receives a connection request from a portable telephone, and detects the identification information of the portable telephone from the connection request, and receives the request of a license code from the portable telephone, and reads the license code corresponding to the identification information from a database, and transmits it to the portable telephone. The portable telephone stores the received license code in a storage means, and receives a password request by the operation of a user, and generates a one-time password based on the license code and prescribed variables by using the password request as a chance. <P>COPYRIGHT: (C)2009,JPO&INPIT

Description

  The present invention relates to a technique for performing authentication using a password, and particularly to a technique for generating a one-time password necessary for authentication using a mobile phone as a token.

  2. Description of the Related Art In recent years, information technology (IT) using a network such as the Internet has progressed remarkably, and it has become possible to use IT throughout the workplace and at home.

  For example, access to a banking system such as bank transfer via the Internet and remote access to an in-house system are widely used.

  In this way, when logging in to a system via a network, authentication using an ID and a password is generally performed.

  However, there are problems of unauthorized access to the system due to password leakage, estimation, and brute force attacks, and high security is desired.

  For this reason, various techniques for improving security using hardware tokens and one-time passwords have been proposed.

Moreover, as a prior art relevant to this invention, there exists a technique disclosed by the following patent document 1 and nonpatent literature 1, for example.
JP-T-2004-524605 Internet, http://japan.rsa.com/products/securid/securid.html, RSA SecurID, 6/19/2007 search

  As described in Patent Document 1 and Non-Patent Document 1, if a one-time password generated by a hardware token is used, security against password leakage, estimation, and brute force attacks is improved.

  However, although security is improved, hardware tokens must be distributed to all users, which increases the introduction cost. In particular, huge costs were required to distribute hardware tokens to all users of banking systems.

  Also, in order to use the system, this hardware must always be carried, and there is a problem that it is troublesome. In addition, if the user loses this hardware while carrying it, the hardware token must be invalidated, new hardware must be prepared and physically handed over to the user again, which saves the system administrator time. As it becomes necessary, the user cannot use the system for a long time before physically receiving a new hardware token.

  On the other hand, there is a so-called software token that generates a one-time password using application software installed on a personal computer (PC) or a mobile phone.

  In this case, since the user can use a PC or a mobile phone that is originally used by the user, there is no inconvenience of carrying a separate token and no hardware installation cost.

  However, when installing a software token, it is necessary to input unique information (such as a license code) for each user. For this reason, a license code or the like is distributed to each user, which causes a security problem.

  In addition, if it is necessary for the user himself to perform complicated code input and software setting, there is a problem that the user is avoided.

  Therefore, the present invention provides a technique for issuing a one-time password that can be easily introduced while collectively managing information necessary for introduction and ensuring high security.

In order to solve the above problems, the present invention employs the following configuration.
That is, the password issuing system of the present invention is
A mobile phone and a carrier side device that communicates with the mobile phone via a mobile network;
Carrier side device
A connection means for receiving a connection request from a mobile phone;
ID detecting means for detecting identification information of the mobile phone from the connection request;
Receiving means for receiving a request for a license code from the mobile phone;
Transmitting means for reading out the license code corresponding to the identification information from the database and transmitting it to the mobile phone;
The mobile phone
Storage means for storing the received license code;
Receiving means for receiving a password request by a user operation;
Password generation means for generating a one-time password based on the license code and a predetermined variable in response to the password request.

  The password issuing system may use the time when the password request is received as the variable.

The mobile phone stores identification information in a ROM provided with tamper-resistant means,
The identification information read from the ROM may be transmitted to the carrier side device in addition to the connection request.

The one-time password issuance method of the present invention is as follows:
The mobile phone carrier side device
Receiving a connection request from a mobile phone;
Detecting identification information of the mobile phone from the connection request;
Receiving a request for a license code from the mobile phone;
Reading the license code corresponding to the identification information from the database and transmitting it to the mobile phone; and
The mobile phone
Storing the received license code in a storage means;
Receiving a password request by a user operation;
Generating a one-time password based on the license code and a predetermined variable triggered by the password request;

  The time when the password request is received may be used as the variable.

The mobile phone has a ROM having tamper-resistant means for storing the identification information,
The identification information read from the ROM may be transmitted to the carrier side device in addition to the connection request.

  Further, the present invention may be a program for causing a computer to execute the password issuing method. Furthermore, the present invention may be a program in which this program is recorded on a computer-readable recording medium. The function can be provided by causing the computer to read and execute the program of the recording medium.

  Here, the computer-readable recording medium refers to a recording medium that accumulates information such as data and programs by electrical, magnetic, optical, mechanical, or chemical action and can be read from the computer. . Examples of such a recording medium that can be removed from the computer include a flexible disk, a magneto-optical disk, a CD-ROM, a CD-R / W, a DVD, a DAT, an 8 mm tape, and a memory card.

  Further, there are a hard disk, a ROM (read only memory), and the like as a recording medium fixed to the computer.

  ADVANTAGE OF THE INVENTION According to this invention, the information required for introduction can be managed collectively, and the authentication technique with easy introduction can be provided, ensuring high security.

The best mode for carrying out the present invention will be described below with reference to the drawings. The configuration of the following embodiment is an exemplification, and the present invention is not limited to the configuration of the embodiment.
§1. Overall Configuration FIG. 1 is a diagram showing an overall configuration of a system according to the present invention. The system 10 of this example includes an authentication server 1, a mobile communication network (carrier side device) 2, a mobile phone 3, and the like. The mobile phone 3 generates a one-time password and authenticates the authentication server 1 with the password. It is a receiving system.

  The mobile communication network 2 receives a radio wave from the mobile phone 3 and outputs a radio wave to the mobile phone 3 to transmit a radio communication device 21 for performing wireless communication and a call signal received by the radio communication device 21 to the mobile communication network 2. Mail and content are provided to the mobile phone according to the data signal received by the data communication network for performing data (packet) communication with the mobile phone 3 via the relay device 22 and the wireless communication device 21 relayed to the destination. And a subscriber information storage unit (HLR: Home Location Register) that stores information (subscriber information) such as a mobile phone number associated with a mobile phone UID.

  The wireless communication device 21 transmits a reception unit 211 that receives a radio wave from the mobile phone 3, a demodulation unit 212 that demodulates the received radio wave into an electric signal, and transmits the signal to the relay device 22 if the electric signal is a call signal. A control unit 213 is provided for controlling the data signal to be transmitted to the data communication network 23.

  The call signal transmitted from the wireless communication device 21 is transmitted to the call destination via the subscriber system mobile communication control station (MCC) or the relay system 22 of the relay system mobile communication control station (MGC).

On the other hand, the data signal transmitted from the wireless communication device 21 is transferred to another network such as the mail server 222, the content server 223, and the Internet by the router 221.

  The content server 223 provides content for mobile phones such as traffic information, weather, news, ringtones, application software (hereinafter also simply referred to as an application). In particular, in the present embodiment, an application for generating a one-time password is downloaded and a license code set for the application is issued.

§2. Content Server FIG. 2 is a schematic diagram of the content server 223. As shown in the figure, the content server 223 includes an arithmetic processing unit 32 including a central processing unit (CPU) and a main memory, a storage unit (hard disk) 33 storing data and software for arithmetic processing, an input / output port. 34, a computer including a communication control unit (CCU) 35 and the like.

The input / output port 34 is appropriately connected with a console having an input device such as a keyboard, a mouse, and a CD-ROM drive, and an output device such as a display device and a printer.
The CCU 15 controls communication with other computers via a network.

  An operating system (OS) and application software are installed in the storage unit 33. In addition, it has a database 241 that stores the telephone number and license code of each mobile phone in association with each other.

The arithmetic processing unit 32 appropriately reads out and executes the OS and application program from the storage unit 33 and performs arithmetic processing on information input from the input / output port 34 and the CCU 35 and information read from the storage unit 33, thereby connecting It also functions as control means, license transmission means, application providing means, and identification information detection means.
As an application providing means, when an application software download request (signal) is received from a mobile phone, the application software

  As the connection control means (connection means), a data signal is received from the mobile phone 3 via the wireless communication device 21 or the router 221, and if this data signal is a connection request, the mobile phone 3 Establish a connection for.

  The wireless communication device 21 receives identification information (for example, UID) unique to each mobile phone from the mobile phone 3 and transmits the UID or information that can specify the UID when sending the demodulated data signal to the packet network. The original information is sent in addition to the data signal.

  As the identification information detecting means, identification information (UID) or information that can identify the UID is detected from the received data signal, and a telephone number corresponding to the information that can identify the UID or UID is retrieved from the HLR.

  As the license transmission means, the license code corresponding to the telephone number is read from the database and transmitted to the mobile phone.

  The carrier server 240 is a computer that functions as a web server as a sales site that sells licenses for authentication and the like. The carrier-side server 240 includes a storage unit (database) 241 that stores a license key and a user's mobile phone number in association with each other.

§3. Mobile Phone FIG. 3 is a block diagram of a mobile phone 3 according to the present invention.
As shown in the figure, the cellular phone 3 of this embodiment includes an antenna 301, a radio circuit unit 302, a communication control unit 303, a storage unit 304, a key operation unit 306, an audio codec 307, an audio output unit (receiving unit) 308, audio An input unit (sending unit) 309, a mail control unit 311, a display unit 312, an arithmetic processing unit 313, a ROM 314, and the like are provided.

  The antenna 301 is used for transmission / reception of radio waves when communicating with the radio base station BS. The radio circuit unit 302 demodulates the radio wave received by the antenna 301 to generate a reception signal, modulates the transmission signal to a predetermined frequency, and outputs the modulation signal via the antenna 301.

  The communication control unit 303 performs control such as decoding the demodulated signal generated by the wireless circuit unit 302 and outputting the encoded transmission signal to the wireless circuit unit 302 to perform communication.

The storage unit 304 includes a flash memory, SRAM (Static Random Access Memory), N
It is composed of a VRAM (Nonvolatile Random Access Memory) or the like, and stores telephone directory data (call destination list), sent / received mail data, message data, application programs, and the like.

  The key operation unit 306 includes operation keys 361 for inputting telephone numbers and characters, operation keys 362 for selecting a selection menu, and the like. As the key operation unit 306, an input dial (jog dial), a touch panel, or the like may be used.

  The audio codec 307 receives the audio data decoded by the communication control unit 303, decodes the audio data according to the specifications of the audio encoding method, converts the analog data, and outputs the converted audio signal to the audio output unit 308. The audio codec 307 digitally converts the audio signal input from the audio input unit 309, encodes the audio signal according to the specifications of the audio encoding method, and outputs the encoded audio data to the communication control unit 303.

  The audio output unit 308 includes a speaker and an amplifier, and outputs the audio signal as audio. The voice input unit 309 includes a microphone and an amplifier, and inputs a speaker's voice as the voice signal.

  The mail control unit 311 receives the mail data decrypted by the communication control unit 303, decrypts it with a predetermined specification, and stores it in the storage unit 304. Further, the mail control unit 41 generates mail data based on an input from the key operation unit 306 and outputs the mail data to the communication control unit 303. As a result, the mail data is encoded by the communication control unit, transmitted by the radio circuit unit 302, and an e-mail is transmitted to the communication partner via the radio base station. In addition, the mail control unit 311 reads the received mail data from the storage unit 304 and causes the display unit 312 to display the content of the mail.

  The display unit 312 includes an LCD (Liquid Crystal Display), an EL display, and the like, and displays a telephone number, mail contents, a standby image, and the like.

The arithmetic processing unit 313 includes a CPU (central processing unit), a main memory, and the like. The arithmetic processing unit 313 realizes functions such as the request accepting unit, the password generating unit, and the display control unit by performing arithmetic processing based on information from each unit and application software.

  As a function of the request receiving means (receiving means), a request for a password or a license code is received by a user operation. For example, when the menu key 360 of the key operation unit 306 is pressed by the user, a selection menu is displayed on the display unit 312 and a selection such as “acquire password” or “license code acquisition” is accepted from the selection menu.

  The password generation means generates a one-time password based on the license code and a predetermined variable in response to the password request.

  As a display control unit, the one-time password generated by the password generation unit is displayed on the display unit 312.

  The ROM 314 is a read-only memory having tamper resistant means, and stores identification information (such as UID) of the mobile phone. The tamper resistant means of the ROM 314 is a protection structure that prevents an internal circuit from being broken and cannot be analyzed when the package is opened, a circuit that does not respond to reading other than a specific algorithm by the communication control unit 303, and the like.

§4. Authentication Device FIG. 4 is a schematic configuration diagram of the authentication server 1 in the present embodiment. As shown in the figure, the authentication device 1 includes an arithmetic processing unit 12 including a central processing unit (CPU) and a main memory, and a storage unit (hard disk) that stores data and software for arithmetic processing. 13, a so-called computer including an input / output port 14, a communication control unit (CCU) 15 and the like.

  An input device such as an operation unit (input button) and a memory reader and an output device such as a display device and a printer are appropriately connected to the input / output port 14.

The CCU 15 controls communication with other computers via a network.
An operating system (OS) and application software (security information notification program) are installed in the storage unit 13.

  The arithmetic processing unit 12 appropriately reads out and executes the OS and application program from the storage unit 13, and performs authentication processing by processing the information input from the input / output port 14 and the CCU 15 and the information read from the storage unit 13. It also functions as a reception unit, an authentication processing unit, a result notification unit, and a relay unit.

  As a function of the authentication accepting means, when an access request signal (packet) from a user terminal to an in-house system is received via a gateway (edge router), if the source terminal is before authentication, an authentication message Is displayed and prompts the user to enter identification information (PIN) and a one-time password.

  As the function of the authentication processing means, the registration information corresponding to the PIN received by the authentication accepting means is read from the database, and the user ID and the one-time password received from the user terminal with reference to the predetermined registration information are valid. It is determined whether or not. At this time, the authentication processing means calculates a valid password from the registration information corresponding to the PIN and a predetermined variable, and determines a match with the received password. Since the predetermined function changes the password every time it is calculated, that is, generates a one-time password, even if the password is eavesdropped on the communication path, a third party cannot use this password next time. Moreover, since it becomes a different password every time, it is not estimated.

  In this embodiment, time is adopted as the predetermined variable, and even if the authentication server 1 and the mobile phone 3 calculate the password independently, the same result can be obtained if the calculation time is the same. The calculation times of the mobile phone 3 and the authentication server 1 may not be exactly the same, and may be synchronized by correcting the time required for communication, the time required for input to the user terminal, and the like.

  As the result notification means, the authentication reception means and the relay means are notified of the authentication result, for example, the address of the terminal that has been authenticated as a legitimate access with matching passwords.

  The relay means refers to the header of the access request signal received from the user terminal and relays it to the in-house system if the access is from a valid terminal notified from the result notification means. If not, the access request signal is blocked.

  In this embodiment, the authentication device 1 authenticates and relays the access request signal. However, the present invention is not limited to this, and the authentication device 1 authenticates and notifies the other device of the authentication result by the result notifying unit. Based on the result, another device such as a router, a proxy server, or a firewall may relay or block the access request signal.

§5. Password Issuing Method and Authentication Method A password issuing method and an authentication method in the system 10 having these configurations will be described with reference to FIG.

5-1. Pre-registration The system administrator of corporation A orders an seed code for the number of passwords from the administrator terminal to the server 240 on the carrier side sales site (S1).

  In response to the order, the server returns a seed code file listing the seed codes used for generating the password to the administrator terminal (S2).

  The system administrator inputs the seed code file to the authentication apparatus 1 of the in-house system via the network and inputs the mobile phone number of each user (S3).

The authentication device 1 expands the input seed code and stores the registration information of each user in the storage unit, and stores the registration information and the mobile phone number of each user in association with each other. Further, the authentication device 1 outputs a file (stdid file) that lists the registration information, and a csv format file (mapping file) that associates a code that specifies the registration information with a mobile phone number (S4). . The output stdid file and mapping file are received by the administrator terminal via the network.

  The system administrator who has received these files transmits these files to the carrier-side server 240 (S5). Note that the authentication device 1 may transmit to the carrier side server without going through the system administrator.

The carrier-side server 240 stores the registration information (license key) and the user's mobile phone number in the database 241 in association with each other based on the stdid file and the mapping file (S6).

5-2. Acquiring a license key In response to an operation of a user (an employee of corporation A), the mobile phone 3 connects to an application download server (content server) 223 and requests download of a password issuing application. In response to this, the download server 223 reads the application from the storage unit and transmits it to the mobile phone 3 (S7).

  The mobile phone 3 starts the downloaded application and automatically accesses the license activation server (content server) 223 (a specific http request for requesting a license code) (S8). At this time, the mobile phone 3 transmits the identification information (UID) read from the ROM to the activation server 223 together with the http request. Note that the download server and the activation server may be integrated or separate.

  Upon receiving the request for the license code, the activation server 223 refers to the HLR, obtains the mobile phone number corresponding to the mobile phone UID, reads the license key corresponding to the mobile phone number, and sends it to the mobile phone 3. Transmit (S9).

Then, the mobile phone 3 stores the license key received from the activation server 223 in the application area (area accessible by the application) of the storage unit.

5-3. Password Issuing Method and Authentication Method When the user accesses the in-house system, when the user performs an activation operation (password request), the mobile phone 3 reads the application from the storage unit and executes it (S10).

The password generation means of the mobile phone 3 that executed the application converts the license code stored in the storage unit in response to the password request and the time (predetermined variable) of the password request using a one-way hash function, Generate (calculate) a one-time password. Also, the mobile phone 3 displays the generated one-time password on the display unit 312 as shown in FIG.

Then, when the user instructs the user terminal to access the in-house system and the user terminal transmits an access request to the authentication apparatus 1, the authentication reception unit of the authentication apparatus 1 requests the user's PIN and one-time password.

When the user reads the one-time password displayed on the mobile phone 3 and inputs the PIN and the one-time password to the user terminal 3, the user terminal 3 transmits them to the authentication device 1.

The authentication device 1 reads the license key corresponding to the received PIN with reference to the storage unit 13, and obtains the access request time (current time or time obtained by correcting the current time with a communication delay time) and the license key. Convert with a one-way hash function to calculate a one-time password. Then, the authentication device 1 determines whether or not the calculated one-time password matches the received one-time password, and authenticates as a valid terminal if they match (S11).

By relaying the access request from the terminal authenticated by the authentication apparatus 1 to the in-house system and the reply from the in-house system to the terminal, the user terminal can remotely access the in-house system via the network.
As described above, according to the present embodiment, since it is not necessary for each user to distribute a license code and input (set), it is possible to easily use a one-time password while maintaining high security.

Further, since the content server 223 on the carrier side pays out the license key based on the UID that the user or the system administrator of the corporation A does not know, the risk of leakage can be further suppressed.

<Others>
The present invention is not limited to the illustrated examples described above, and various modifications can be made without departing from the scope of the present invention.
For example, the mobile phone 3 and the authentication device 1 may acquire the correct time from a time server on the network by NTP (Network Time Protocol).

  Thereby, since the mobile phone 3 and the authentication device 1 are always corrected at the correct time, the correction process can be simplified and the effective period of the one-time password can be shortened.

  In the present embodiment, the time is used as the predetermined variable. However, a different value can be calculated for each calculation, and the mobile phone 3 and the authentication device 1 can calculate a matching value independently. It may be a request count, a fluctuation function, a pseudo random number, or the like.

Schematic diagram of the entire system Schematic configuration diagram of content server Functional block diagram of mobile phone Schematic configuration diagram of authentication device Explanatory diagram of password issuing method and authentication method Figure showing a password display example

Explanation of symbols

10 system (password issuing system)
1 Authentication server 2 Mobile communication network (carrier side device)
3 Mobile phone

Claims (6)

A password issuing system having a mobile phone and a carrier-side device that communicates with the mobile phone via a mobile network,
Carrier side device
A connection means for receiving a connection request from a mobile phone;
ID detecting means for detecting identification information of the mobile phone from the connection request;
Receiving means for receiving a request for a license code from the mobile phone;
Transmitting means for reading out the license code corresponding to the identification information from the database and transmitting it to the mobile phone;
The mobile phone
Storage means for storing the received license code;
Receiving means for receiving a password request by a user operation;
Password generating means for generating a one-time password based on the license code and a predetermined variable triggered by the password request;
One-time password issuing system with   The one-time password issuing system according to claim 1, wherein a time when the password request is received is used as the variable. The mobile phone
Identification information is stored in a ROM equipped with tamper resistant means,
2. The one-time password issuing system according to claim 1, wherein the identification information read from the ROM is transmitted to a carrier side device in addition to the connection request. The mobile phone carrier side device
Receiving a connection request from a mobile phone;
Detecting identification information of the mobile phone from the connection request;
Receiving a request for a license code from the mobile phone;
Reading the license code corresponding to the identification information from the database and transmitting it to the mobile phone; and
The mobile phone
Storing the received license code in a storage means;
Receiving a password request by a user operation;
Generating a one-time password based on the license code and a predetermined variable triggered by the password request;
To issue a one-time password.   The method for issuing a one-time password according to claim 4, wherein a time when the password request is received is used as the variable. The mobile phone
ROM provided with tamper-resistant means for storing the identification information;
5. The one-time password issuing method according to claim 4, further comprising: a transmitting unit that transmits the identification information read from the ROM to the carrier side device in addition to the connection request.

Images