JP2009094592A - Communication system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To solve the following problem: when connected to the Internet to receive services in a digital broadcast viewing environment, such as a television, there is no mechanism for performing authentication by using an IC in connection with contract information. <P>SOLUTION: A mechanism for performing authentication by using an IC card is defined by a contract information distributing means in the digital broadcast viewing environment and a means for acquiring synchronization information independently between the IC card and a service provider on the Internet. <P>COPYRIGHT: (C)2009,JPO&INPIT

Description

  The present invention relates to authentication of devices in a communication system. In particular, the present invention relates to an apparatus for authenticating a receiver connected to a network in a digital broadcast viewing environment.

  As described in Non-Patent Document 1 below, there is a method of controlling digital broadcast content that can be viewed by the user according to the content contracted by the user, as an “access control method in digital broadcasting”. In the above method, the contract information of the user and the information encrypted with the common key Km, which is the secret information, the key Kw necessary for decrypting the content are generated as EMM, and the secret information Km that can decrypt the EMM is generated for each IC card. Are recorded and distributed. When the user renews the contract, the digital broadcast content that can be viewed according to the contract can be controlled by transmitting a new EMM. At that time, only the IC card in which the secret information Km is recorded can be decrypted. The EMM is transmitted to the IC card by the method described in Non-Patent Document 1 below, such as sending the EMM through the same route as the broadcast content. The IC card is used by being inserted into a receiver that can receive digital broadcasting.

Japan Radio Industry Association Access Control Method for Digital Broadcasting Standard ARIB STD-B25

  In a digital broadcast viewing environment such as a television, one method for using a service with authentication on the Internet is a method in which a Web browser function of a receiver uses authentication information and presents it when using the service. By using a common key Km acquired using an IC card or secret information equivalent to EMM as authentication information, it becomes possible to provide a service based on the contents of the contract of the user. Therefore, there is a first problem that there is no realization method when receiving services on the Internet.

  Further, it is conceivable to copy the authentication information to the receiver in order to use the authentication information for the Web browser function of the receiver and to improve the speed of service provision. There is a threat that the authentication information is copied, and a person who is not contracted can use the service. As a countermeasure, it is conceivable to shorten the validity period of the authentication information in the receiver and provide new authentication information from the IC card in a short time. With this measure, it is possible to reduce the chance of using the service in the case of illegal copying. However, in the method of controlling service usage by EMM transmission, it takes a long time to transmit EMM to all users, and it is difficult to provide authentication information from the IC card to the receiver in a short time. There is a second problem. Therefore, a new method for solving the above-described problems is demanded.

  In order to solve the above problems, the present invention has the following configuration. In the following expression, a communication system is used, but a method using the communication system and each device (receiver or server) are also included in the present invention.

  In a communication system having an authentication server for authenticating a receiver and an authentication information management server connected to the receiver, the authentication server and the authentication information management server are secret information shared by the authentication server and the authentication information management server. The authentication server and the authentication information management server respectively acquire asynchronous information indicating different values at each time point, and the authentication server uses the secret information and the asynchronous information, A communication system for generating authentication information for authenticating a receiver.

  In this communication system, the authentication information management server transmits the authentication information to the receiver at regular intervals, and the authentication server authenticates the receiver that has received the authentication information.

  In the communication system, the authentication server and the authentication information management server use the distribution path of the communication system at regular intervals or when receiving a request from the receiver. A communication system capable of sharing the authentication code by transmitting the code from at least one to the other.

  In this communication system, the authentication server generates the authentication information using the secret information, the authentication code, and the asynchronous information.

  In this communication system, the authentication information management server transmits the authentication information to the receiver at regular intervals, and the authentication server authenticates the receiver.

  The communication system further includes a second authentication server, wherein the receiver transmits the authentication information to the authentication server and the second server, and the second server authenticates to the authentication server. A communication system for transmitting request information for requesting information verification.

More specifically, the present invention assumes a configuration as shown in FIG.
In the above configuration, the receiver 11 to the receiver 1n (hereinafter collectively referred to as the receiver 1) are connected to the network 8 and the authentication code distribution path 9, and the service providing function 3 is connected to the network 8. The authentication code generation / transmission function 4 is connected to the authentication code distribution path 9. The authentication code distribution route 9 is not particularly defined. For example, it may be the same as the route for sending broadcast content described in Non-Patent Document 1, or the same route as the network 8 to which the receiver is connected. It is done.

Terminal-side authentication information management functions 21 to 2n (hereinafter collectively referred to as terminal-side authentication information management function 2) are connected to the receiver 1, respectively. Although the connection method is not particularly defined, the terminal-side authentication information management function 2 is a physical medium such as an IC card, and when it is inserted into the receiver, software in the receiver or hardware such as an IC chip For example, it may be installed in a receiver as wear.
The authentication related information generation function 5 is connected to the service providing function 3, the authentication code generation / transmission function 4, the synchronization information management function 7, and the individual information management function 6, and the individual information management function 6 is an authentication code generation / transmission function. 4 is also connected. These connection forms are not specified, but each function is implemented on a separate server, connected to the corporate network or the Internet to communicate with each other, or offline information passing between servers or specific A case where data is exchanged by wiring, a case where data is exchanged inside the server mounted on the same server, and the like can be considered.

  The receiver 1 includes a network communication function 11 for communicating with the service providing function 3 via the network 8, and an authentication code communication function 12 for communicating with the authentication code generation / transmission function 4 via the authentication code distribution path 9. An authentication information recording function 13 for recording / managing authentication information generated by the terminal side authentication information management function 2 as authentication information 131, and a terminal side authentication information management function for exchanging data with the terminal side authentication information management function 2; Communication function 14.

  The terminal-side authentication information management function 2 is individually allocated to the communication function 21 with the receiver that exchanges data with the receiver, the authentication information generation function 22 that generates authentication information, and the terminal-side authentication information management function 2. Terminal-side individual information recording function 23 that records and manages the individual ID 231 and the individual key Ki, which are stored information, the authentication code management function 24 that records and manages the authentication code 241 sent from the authentication code generation and transmission function, and synchronization information A synchronization information management function 25 for acquiring, recording, and managing 251.

  The individual ID 231 is assumed to be grasped by the individual information management function 6.

  For the individual key Ki, the present invention includes the case of the above-mentioned common key Km, the case of a common key different from Km, and the use of a secret key in a public key cryptosystem.

  The synchronization information is information that is acquired by the synchronization information management function 7 and the terminal side authentication information management function 2 as the synchronization information 701 and the synchronization information 251, respectively, and becomes the same. The synchronization information is not particularly defined, but it may be time information, synchronization information such as a random number that is meaningful only on the system sent from the synchronization server, or the like. When using time information as synchronization information, the synchronization information management function 7 and the terminal-side authentication information management function 2 obtain the same value by means such as determining in advance that a specific time is used as synchronization information. be able to. As for the method for acquiring the synchronization information, the synchronization information is acquired when the time information included in the digital broadcast is acquired via the receiver, or the specific information is acquired from the server holding the synchronization information on the network. Included in the invention.

  As a method for generating authentication information, information including the synchronization information 251 and the authentication code 241 is encrypted with Ki and the authentication information is combined with the information and the authentication code is not used as a system. In addition, there is a case where the synchronization information 701 is encrypted with Ki and the authentication information is obtained by adding the authentication code to the information. When the authentication code 241 is not used for generating the authentication information, the following authentication code generation function 51 and authentication code generation / transmission function 4 do not exist, and operations related thereto are not performed. When Ki is a secret key in the public key cryptosystem, an electronic signature is performed for encryption.

  The service providing function 3 records and manages the authentication information provided from the authentication related information generating function 5 and compares the authentication information with the authentication information 131 sent from the receiver. A network communication function 32 for communicating with the receiver.

  The authentication code generation / transmission function 4 receives the authentication code provided from the authentication related information generation function 5 and encrypts it using the individual key Ki provided from the individual information management function 6, and an authentication code An authentication code communication function 42 for sending an encrypted authentication code to the receiver via the code distribution path 9 is provided.

  In addition to encryption using the individual key Ki, when encryption is performed using a key used in a group provided in common to a plurality of terminal side authentication information management functions 2, or when encryption is not performed, These are also included in one embodiment of the present invention.

  The authentication related information generation function 5 generates an authentication code 241 as a random number and provides the authentication code generation function 51 provided to the authentication code generation / sending function 4, synchronization information 701 provided from the synchronization information management function 7, and authentication code generation An authentication information generation function 52 that generates authentication information based on the authentication code 241 provided from the function 51 and the individual ID and Ki provided from the individual information management function 6 is provided.

The authentication code 241 is generated for each terminal-side authentication information management function 21, or is generated for each group that is commonly provided in the number of terminal-side authentication information management functions 2, or all terminal-side authentication information management functions. In the case of generating in common to the two, etc. can be considered.
As a method for generating authentication information, the same contents as the operation of the terminal side authentication information management function 2 are performed.

The individual information management function 6 records and manages the individual ID assigned to each terminal-side authentication information management function 2 in association with Ki, and provides the individual ID provided to the authentication related information generation function 5 and the authentication code generation / transmission function 4 And an individual key Ki recording function 61.
In the authentication code generation / transmission function 4, when encryption is performed using a key used in a group, the key used in the group may also be managed.

  The synchronization information management function 7 acquires the synchronization information 701 and provides it to the authentication code generation / transmission function 4.

  Consider a case where the user operates the receiver 1 and the terminal side authentication information management function 2 to receive a service from the service providing function.

  It is assumed that the user makes a contract with the service provider in advance and distributes the terminal side authentication information management function 2 or only the individual ID and the individual key Ki. Alternatively, it is assumed that only the terminal side authentication information management function 2 or the individual ID and the individual key Ki are purchased and the information is shared with the service provider side. It is assumed that the service provider manages the individual ID and the individual key Ki in the individual information management function 6.

  The authentication related information generation function 5 generates an authentication code 241 periodically or when there is a request from the receiver, and provides it to the authentication code generation / transmission function 4. The authentication code generation / transmission function 4 is provided with the individual key Ki from the individual information management function, encrypts the authentication code 241 with Ki, and sends it to the authentication code communication function 12 of the receiver 1.

  In addition to encryption using the individual key Ki, encryption using a key used in a group provided in common for the plurality of terminal-side authentication information management functions 2 is also conceivable.

  Although it does not prescribe | regulate especially as a delivery method to the receiver 1, it is the same as the path | route which sends the broadcast content described in the nonpatent literature 1, for example, or the network which the receiver described in the nonpatent literature 1 connects In the case of 8, it is conceivable.

  The receiver 1 receives the encrypted authentication code 241 from the authentication code generation / transmission function 4 and passes it to the terminal side authentication information management function 2. The terminal-side authentication information management function 2 is decrypted using the individual key Ki and then held in the authentication code management function 24.

  The authentication codes in the terminal side authentication information management function 2 and the authentication related information generation function 5 are updated periodically or when a request is received from the receiver.

  The synchronization information management function 25 in the terminal side authentication information management function 2 acquires the synchronization information 251. The terminal side authentication information management function 2 uses the authentication information generation function 22 to store the individual ID 231, the individual key Ki 232, the synchronization information 251, and the authentication code, if necessary, stored in the terminal side authentication information management function 2. 241, the authentication information 131 is generated and passed to the receiver 1. On the other hand, the synchronization information management function 7 acquires the synchronization information 701.

  The authentication related information generation function 5 uses the authentication information generation function 52 to store the individual ID, the individual key Ki, the synchronization information 701, and the authentication code generated above if necessary, stored in the individual information management function. 241 is used to generate authentication information and pass it to the service providing function 3. The service providing function 3 holds authentication information.

The validity period of the authentication information held in the receiver 1 and the service providing function 3 is a short period, and is updated and used before or after the validity period expires. At that time, when the authentication information is required for generating the synchronization information and the authentication information, the authentication code is newly acquired or generated, thereby becoming new authentication information.
When the user operates the receiver 1 to communicate with the service providing function 3 via the network 8 and transfers the service, the user requests authentication by presenting the authentication information 131 to the service providing function 3. To do. Since the service providing function 3 also holds authentication information for each individual ID, authentication can be performed by determining whether or not they match. When Ki is a secret key in the public key cryptosystem, authentication can be performed by verifying the signature. Further, since the user can be identified with the authentication, the service provision can be controlled in accordance with the contents of the contract of the user.

The above method enables authentication in network communication in an environment such as a receiver in a digital broadcast reception environment, and can solve the first problem that there is no realization method for receiving services on the Internet.
In addition, by using the synchronization information that can be obtained by the terminal-side authentication information management function 2 as well as the authentication code, the authentication information can be frequently updated by the above method, and the service use is controlled by EMM transmission. The method solves the second problem that it takes a long time to transmit EMM to all users and it is difficult to provide authentication information from the IC card to the receiver in a short time. Can do.

  According to the present invention, when a service on a network is received in a digital broadcast receiving environment, it is possible to control service provision contents according to a user's contract contents. In addition, it is possible to reduce the threat of giving and receiving services as a user.

Examples relating to the present invention are shown in Example 1 and Example 2.
In the first embodiment and the second embodiment, a user who subscribes to CATV receives a product delivery service based on a CATV data broadcast advertisement.

In the first embodiment, the authentication information is used as a cookie, and then the home delivery service authenticates the STB using SAML (Security Assertion Markup Language).
In the second embodiment, a case where the authentication information is used as the equivalent of Artifact in SAML and the home delivery service authenticates the STB is shown.

  In addition, this invention is not limited by these Examples.

  As shown in FIG. 2, the STB, authentication service Web server function, and home delivery service Web server function shown in the embodiment are connected to other devices via a network, an external storage device such as a computing device, a memory, and a hard disk. An electronic computer or a home appliance that includes a communication device for communicating with the device, an input device such as a keyboard and buttons, an output device such as a monitor, and an interface for transmitting and receiving data between these devices. Then, the CPU performs processing by executing a predetermined program loaded on the memory.

  FIG. 3 is a diagram showing a configuration of the first exemplary embodiment of the present invention.

  It is assumed that the card information management business has an authentication service Web server function 3, an authentication code generation / transmission function 4, an authentication related information generation function 5, a card information management function 6, and a synchronization information management function 7. It is assumed that the customer information management company has a customer information management function 10. Assume that a home delivery service provider has a home delivery service Web server function 9. Assume that the user owns STB1 and an IC card.

STB11 to STB1n (hereinafter collectively referred to as STB1) are connected to the Internet 81 and the authentication code distribution path 82, and the authentication service Web server function 3 and the home delivery service Web server function are authenticated to the Internet 81. The authentication code generation / transmission function 4 is connected to the code distribution path 82. The authentication code distribution path 82 is not particularly defined, but for example, it may be the same as the path for sending broadcast content described in Non-Patent Document 1, or the same path as the Internet 81 to which the receiver is connected. It is done.
IC cards 21 to 2n (hereinafter collectively referred to as IC cards 2) are inserted and connected to the STB 1, respectively.

  The authentication related information generation function 5 is connected to the authentication service Web server function 3, the authentication code generation / transmission function 4, the synchronization information management function 7, and the individual information management function 6, and the individual information management function 6 generates the authentication code. The sending function 4 is also connected. These connection forms are not specified, but each function is implemented on a separate server, connected to a corporate network or the Internet to communicate with each other, or offline information passing between servers or specific A case where data is exchanged by wiring, a case where data is exchanged inside the server mounted on the same server, and the like can be considered.

  The STB 1 communicates with the authentication service Web server function 3 via the Internet 81, the network communication function 11 for communicating with the home delivery service Web server function, and the authentication code generation / transmission function 4 via the authentication code distribution path 9. Authentication code communication function 12, authentication information recording function 13 for recording and managing the cookie generated by IC card 2 as authentication information 131, and communication function 14 for the IC card for exchanging data with IC card 2. Prepare.

  The IC card 2 records a communication function 21 with the STB that exchanges data with the STB, a cookie generation function 22 that generates cookies, and an individual ID 231 and an individual key Km that are information individually allocated to the IC card 2 The terminal-side individual information recording function 23 to be managed, the authentication code management function 24 for recording / managing the authentication code 241 sent from the authentication code generating / sending function, and the synchronization for acquiring and recording / managing time information 251 as synchronization information An information management function 25 is provided. The individual ID 231 is assumed to be grasped by the individual information management function 6.

  The individual key Km is the same as the master key used for controlling the viewing of CATV broadcasts.

  The synchronization information is information that is acquired by the synchronization information management function 7 and the IC card 2 as the synchronization information 701 and the synchronization information 251, respectively, and is the same. In this embodiment, the synchronization information is time information. As time information, the time that is exactly 5 minutes is obtained as synchronization information. For example, assume that the synchronization information is October 12, 2005, 23:15:00, and the next synchronization information uses the information on October 12, 2005, 23:20:00, five minutes later.

  The authentication service Web server function 3 records and manages the cookie provided from the authentication related information generation function 5 and compares it with the cookie 131 sent from the receiver, and the STB and the cookie management function 31 via the Internet 81. A network communication function 32 for communicating with the home delivery service Web server function 9 and an authentication ticket management function 33 for managing communication regarding SAML with the STB and the home delivery service Web server are provided.

  The authentication code generation / transmission function 4 receives the authentication code provided from the authentication related information generation function 5 and encrypts it using the individual key Km provided from the individual information management function 6, and an authentication code An authentication code communication function 42 for sending an encrypted authentication code to the receiver via the code distribution path 9 is provided.

  The authentication related information generation function 5 generates an authentication code 241 as a random number and provides the authentication code generation function 51 provided to the authentication code generation / sending function 4, synchronization information 701 provided from the synchronization information management function 7, and authentication code generation A cookie generation function 52 that generates a cookie based on the authentication code 241 provided from the function 51 and the individual ID and Km provided from the individual information management function 6 is provided.

  The card information management function 6 records and manages the card ID and Km allocated to each IC card 2 in association with each other, and provides the card ID and individual key Km provided to the authentication related information generation function 5 and the authentication code generation / transmission function 4. A recording function 61 is provided.

  The synchronization information management function 7 acquires the time information 701 and provides it to the authentication code generation / transmission function 4.

  The home delivery service Web server function 9 includes an authentication ticket inquiry function for managing SAML communication with the STB and authentication service Web server function, and a network communication function for communicating with the STB and authentication service Web server function via the Internet 81. 32.

  Next, in the operation of the apparatus in FIG. 3, the operation when a user receives a product delivery service after applying for a CATV service from a customer information management company will be described with reference to the drawings.

  FIG. 5 shows an operation when the user applies to the customer information management company and acquires an IC card in the apparatus of FIG.

  The user creates an application for using the CATV service and sends it to the customer information management company by mail or the like (step 5101). It is assumed that the use application includes customer information necessary for providing the service, such as name, date of birth, address, and billing method. A customer information management company may be operated by a CATV station. Next, after the customer information management company accepts the use application, the customer information is stored (step 5102), the IC card issuance request is requested from the card information management company (step 5103), and the card information management company Accept (step 5201). The request route may be a mail, e-mail, or an original application requesting issuance online. The card information management company issues an IC card according to the issuance request (step 5202) and sends it to the customer information management company (step 5203). The IC card includes a card ID and Km. Assume that the Km in the IC card is physically protected from unauthorized use. The customer information management company accepts the IC card and manages the card ID allocated to the IC card and the customer information in association with each other (step 5104). The customer information management company sends the IC card to the user (step 5105), and the user receives it (step 5302).

  The above is the operation when the user applies to the customer information management company and acquires the IC card.

  As a method other than the above, the card information management company issues a plurality of IC cards in advance and provides them to the customer information management company, and the customer information management company obtains the application in advance after obtaining the application from the user. It is conceivable to assign the IC card to the user and send it to the user.

  FIG. 6 shows an operation in the case of holding cookies in the STB and authentication service Web server function using the authentication code sent from the card ID management company in the apparatus of FIG.

  As an operation premise, the synchronization information management function 7 included in the card ID management company periodically acquires time information from an NTP (Network Time Protocol) server on the Internet and uses it as synchronization information (step 6101). . As for the frequency of acquisition, it is assumed that the synchronization information in units of 5 minutes is acquired so as not to deviate from the IC card. Further, the IC card accepts a card request confirmation command from the STB at intervals of 15 seconds (steps 6201 and 6301), and obtains time information included in the command as synchronization information (step 6302). A response is returned to the card request confirmation command (step 6303 and step 6202).

The authentication related information generation function 5 provided in the card ID management business operator generates a random number as an authentication code using the authentication code generation function 51 (step 6102), acquires the card ID and Km from the card information management function 6, and authenticates. Using the authentication code encryption function 41 of the code generation / transmission function 4, the information including the authentication code is encrypted with Km as a part of the contract information (step 6103) to generate an EMM. Next, the EMM is sent to the same route as the CATV video content delivery route using the authentication code communication function 42 (step 6104).
The STB receives the EMM by the authentication code communication function 12 (step 6203), issues an EMM reception command (step 6204), and is accepted by the IC card (step 6304). The IC card decrypts the EMM and obtains an authentication code (step 6305). The IC card returns a response to the EMM reception command to the STB (step 6306). At this time, the IC card instruction information is included as an instruction from the IC card to the STB, and a command for accessing the IC card and acquiring a cookie (here, a cookie acquisition command) is issued to the STB. Instruct. The STB accepts the response (step 6205), and issues a cookie acquisition command according to the IC card instruction (step 6206). The IC card receives a cookie acquisition command (step 6307) and generates a cookie (step 6308). As a method for generating a cookie at this time, it is assumed that information including time information and an authentication code is encrypted with Km, and the authentication code is combined with the information.

  In addition to sending the authentication code in the EMM, the case where the authentication code is sent in the EMM individual message is also included in this embodiment.

  Next, the IC card returns a response to the cookie acquisition command (6309), and the STB accepts it (step 6207). The response includes the generated cookie, and the STB obtains the cookie (step 6208).

  On the other hand, the cookie generation function provided in the card ID management business also generates a cookie in the same manner as the cookie generation on the IC card (step 6105).

  The operations from step 6102 to step 6105 described above are repeated by periodically generating an authentication code. For example, the authentication code generation function determines whether 2 hours have elapsed since the generation of the authentication code (step 6106). If 2 hours have elapsed, step 6102 is executed.

  The above is the operation when the cookie is held in the STB and authentication service Web server function using the authentication code sent from the card ID management company.

  In addition, it may be considered that the time information is encrypted with Km and the authentication code is combined with the information as authentication information without using the authentication code as the entire system. When the authentication code is not used for generating the authentication information, the operation in FIG. 6 is not performed.

  FIG. 7 shows the STB and authentication service Web server function using the authentication code sent from the card ID management company by requesting the card ID management company to send the authentication code in the apparatus of FIG. Operation when Cookie is retained is shown. This operation is based on the receiver operation in the viewing / listening information collection information in Part 1 Section 4.5.1 of Non-Patent Document 1, and adds operations related to this patent.

  As an operation premise, the synchronization information management function 7 included in the card ID management company periodically acquires time information from an NTP (Network Time Protocol) server on the Internet and uses it as synchronization information (step 6101). . As for the frequency of acquisition, it is assumed that the synchronization information in units of 5 minutes is acquired so as not to deviate from the IC card. Further, the IC card accepts a card request confirmation command from the STB at intervals of 15 seconds (step 6201 and step 6301), and obtains time information included in the command as synchronization information (step 6302). A response is returned to the card request confirmation command (step 6303 and step 6202).

  Next, the STB issues a user call request command based on a user operation or a request for transmitting viewing history information from the IC card (step 7207). The IC card accepts the user call request command (step 7304), and the STB returns a response including an IC card instruction to call the card ID management company (step 7305). The STB accepts an instruction from the IC card (step 7204) and makes a call to the card ID management business operator (step 7205). The card ID management business operator returns a response to the call (step 7103), the STB accepts the response (step 7206), and issues a call connection state notification command (step 7207). The IC card accepts the call connection status notification command (step 7306), encrypts the viewing history information using the secret information in the IC card and sends it to the card ID management business operator (step 7307). The STB transfers the encrypted information (step 7208), and the card ID management company accepts it (step 7104). The card ID authenticator sends an EMM as a reply to the viewing history information, and sends an authentication code accordingly. Therefore, a random number as an authentication code is generated using the authentication code generation function 51 (step 7105), the card ID and Km are acquired from the card information management function 6, and the authentication code encryption function 41 of the authentication code generation / transmission function 4 is acquired. Is used to encrypt information including the authentication code as part of the contract information using Km (step 7106) to generate an EMM. Next, the EMM is transmitted using the authentication code communication function 42 (step 7107).

The STB receives the EMM by the authentication code communication function 12 (step 7209), and the subsequent operation is the same as the above step 6204 to step 6207, and the STB obtains the cookie generated by the IC card (step 7211). .
On the other hand, the cookie generation function provided in the card ID management business also generates a cookie in the same manner as the cookie generation on the IC card (step 7108).

  The above is the operation when the user requests the card ID management business operator to send the authentication code and uses the authentication code sent from the card ID management business operator to hold cookies in the STB and authentication service web server functions. It is.

  In addition, it may be considered that the time information is encrypted with Km and the authentication code is combined with the information as authentication information without using the authentication code as the entire system. When the authentication code is not used for generating the authentication information, the operation in FIG. 7 is not performed.

  FIG. 8 shows an operation of updating the cookie using the synchronization information in the apparatus of FIG. 3 after obtaining the synchronization information at an interval shorter than the interval for obtaining the authentication code after updating the cookie with the authentication code. .

  The synchronization information management function 7 provided in the card ID management company periodically acquires time information from an NTP (Network Time Protocol) server on the Internet and uses it as synchronization information (step 8102). It is determined whether 5 minutes have passed since the previous cookie generation (step 8101), and the cookie is updated (step 8103).

  On the other hand, the IC card accepts a card request confirmation command from the STB at intervals of 15 seconds (step 8201 and step 8301), and obtains time information included in the command as synchronization information (step 8302). It is determined whether or not 5 minutes have passed since the previous cookie generation (step 8303). If 5 minutes have passed, a response including a command for issuing a cookie acquisition command is returned to the card request confirmation command. (Step 8305 and Step 8203). The STB issues a cookie acquisition command according to the IC card instruction (step 8204). The IC card accepts a cookie acquisition command (step 8306) and generates a cookie (step 8307). Next, the IC card returns a response to the cookie acquisition command (8308), and the STB accepts it (step 8205). The response includes the generated cookie, and the STB obtains the cookie (step 8206).

  If five minutes have not elapsed, a response that does not include an instruction to issue a cookie acquisition command is returned (steps 8304 and 8202).

  The above is the operation for obtaining the synchronization information at an interval shorter than the interval for obtaining the authentication code after updating the cookie by the authentication code, and updating the cookie using the synchronization information.

  9 and 10 show a case where the card ID management business operator authenticates the STB using Cookie and the home delivery service business operator authenticates the STB using the authentication result in the operation of the apparatus of FIG. The operation is shown.

  As a premise, the card ID management company stores the cookie in the cookie management function 31 in the authentication service Web server function 3, and stores the cookie in the authentication information recording function 13, and each network communication function calls and uses it. To do. For example, as a network communication function on the STB side, a Web browser provided in the STB can be considered.

  While the user is watching CATV, the STB displays an advertisement of a home delivery service provider distributed by data broadcasting (step 9301). For example, detailed information, prices, and the like are displayed as advertisements for products for sale. The user operates the STB to instruct connection to the home delivery service Web server function operated by the home delivery service provider (step 9302). The STB connects to the home delivery service Web server function 9 (step 9303). The home delivery service Web server function accepts a connection from the STB (step 9101). Next, the authentication ticket inquiry function 91 generates AuthnRequest in accordance with the SAML regulations (step 9102), and transmits an HTTP redirect including an instruction to connect to the authentication service Web server function 3 of the card ID management business operator to the STB ( Step 9103 and Step 9304).

  In the response, AuthnRequest is included, and the STB connects to the authentication service Web server function 3 with the content including AuthnRequest. At that time, Cookie is presented. The authentication service Web server function 3 accepts a connection from the STB (step 9201). The authentication service Web server function 3 compares the cookie in the cookie management function 31 with the cookie presented from the STB and confirms that they are the same (step 9202). Next, the authentication ticket management function 33 acquires AuthnRequest (step 9203), and since the authentication by Cookie has been established, an assertion and corresponding artifact are generated (step 9204). Next, a response is generated (step 9205). Response includes Artifact. Next, the card ID and the generated Association are stored in association with each other (step 9206). This is based on the assumption that an inquiry is made from the home delivery service provider by the Assertion, and is stored in order to acquire a card ID corresponding to the inquiry and customer information corresponding to the card ID.

  Next, an HTTP redirect including an instruction to connect Response to the home delivery service Web server function 9 is transmitted to the STB (Steps 9207 and 9205). The home delivery service Web server function accepts a connection from the STB (step 9104). A response is acquired using the authentication ticket inquiry function 91 (step 9105), an ArtifactResolve is generated to verify the artifact included in the response (step 10101), and sent to the authentication service Web server function 3 (step 10102). The authentication server Web server function 3 accepts ArtifactResolve using the authentication ticket management function 33 (step 10201), and confirms the corresponding assertion (step 10202).

  If the assertion is confirmed, an artifact response is generated (10203) and sent to the home delivery service Web server function (10204). Artifact Response includes Assertion. The home delivery service Web server function accepts ArtifactResponse (step 10103) and acquires the assertion (step 10104). At this time, the verification of Artifact is completed and the STB is authenticated. Next, if the information contained in the Association or the user has used the service, content for the user is generated using the history (step 10105) and sent to the STB (step 10106). The STB accepts the content (step 10301) and displays it to the user. The user performs an operation such as purchasing a product from the inside, and requests delivery from the delivery service Web server function 9 from the STB (10302). The home delivery service Web server function 9 accepts the home delivery request (step 10107).

  Since the user's address is necessary for home delivery, customer information is inquired of the card ID management company based on the assertion (step 10205). The card ID management business accepts the inquiry (step 10205), inquires the customer information management business about the customer information, and obtains customer information from the customer information management business (step 10206). At that time, if it is necessary to prevent the card ID management company from browsing according to the customer information management company's customer information protection policy, the customer information should be encrypted using encryption that can only be decrypted by the home delivery service company. It is also possible to provide the encrypted version. For example, by encrypting with the public key of the public key certificate issued to the home delivery service provider, it is possible to decrypt only with the private key possessed only by the home delivery service provider. Next, the card ID management company sends customer information (step 10207), and the home delivery service company accepts the customer information (step 10109), and decrypts it if encrypted (step 10110). Next, the customer is delivered to the user using the acquired customer information (step 10111).

  It is assumed that the exchange from step 10205 to step 10109 is automatically performed via the Internet. For example, it is assumed that an instruction content and a response are transmitted by SOAP.

  The above is the operation when the card ID management company authenticates the STB using Cookie, and the home delivery service company authenticates the STB using the authentication result.

FIG. 4 is a diagram showing one configuration of the second embodiment of the present invention.
In the second embodiment, a case where the authentication information is used as the equivalent of Artifact in SAML and the home delivery service authenticates the STB is shown.

  Compared to the first embodiment, the functional configuration uses an authentication ticket instead of a cookie. Therefore, the cookie generation function 22 in the first embodiment is replaced with the authentication ticket generation function 22, and the cookie management function 31 and the authentication ticket management function in the first embodiment. The same processing as in the first embodiment is performed except that 33 is changed to the authentication ticket management function 31, and the cookie generation function 52 in the first embodiment is changed to the authentication ticket generation function 52.

  The operation is the same from step 5301 to step 8206 in the first embodiment, and only the information generated and managed as the cookie is used as the authentication ticket.

  FIG. 11 shows an operation when the STB presents an authentication ticket to the home delivery service provider, verifies the authentication ticket, and authenticates the STB in the operation of the apparatus of FIG.

  As a premise, the card ID management company stores the authentication ticket in the authentication ticket management function 41 in the authentication service Web server function 3, and stores the STB in the authentication information recording function 13, which is called and used by each network communication function. Shall. For example, as a network communication function on the STB side, a Web browser provided in the STB can be considered. In addition, depending on the setting on the STB side, for a specific Web server (such as a Web server operated by an operator affiliated with a card ID management operator by performing data broadcasting to CATV such as a delivery service operator) Assume that there is a mechanism for presenting an authentication ticket.

  While the user is watching CATV, the STB displays an advertisement of a home delivery service provider distributed by data broadcasting (step 11301). For example, detailed information, prices, and the like are displayed as advertisements for products for sale. The user operates the STB to instruct connection to the home delivery service Web server function operated by the home delivery service provider (step 11302). The STB connects to the home delivery service Web server function (step 11303). At this time, the authentication ticket is presented to the home delivery service provider. The home delivery service Web server function 9 accepts the connection (step 11101) and acquires an authentication ticket (step 11102). In order to verify the authentication ticket, ArtifactResolve is generated by regarding the authentication ticket as SAML Artifact (11103), and ArtifactResolve is sent to Authentication Service Web Server Function 3 (Step 11104). The authentication service Web server function 3 accepts ArtifactResolve (step 11201) and confirms whether the authentication ticket management function matches the authentication ticket stored (step 11202). If the authentication ticket matches, an Association corresponding to the authentication ticket is generated (step 11203).

  Next, the card ID and the generated Association are stored in association with each other (step 9206). This is based on the assumption that an inquiry is made from the home delivery service provider by the Assertion, and stored in order to acquire a card ID corresponding to the inquiry and customer information corresponding to the card ID. Next, Artifact Response is generated (11205) and sent to the home delivery service Web server function (11206). Artifact Response includes Assertion. The home delivery service Web server function receives ArtifactResponse (step 11105) and acquires the assertion (step 11106). This completes verification of the authentication ticket and authenticates the STB. Next, if information contained in the Association or the user has used the service, content for the user is generated using the history (step 11107) and sent to the STB (step 11108). The STB accepts the content (step 11304).

  Subsequent processing is the same as that from step 10302 to step 110111 in the first embodiment.

  The above is the operation when the STB presents the authentication ticket to the home delivery service provider, verifies the authentication ticket, and the home delivery service provider authenticates the STB.

1 is a schematic configuration diagram of a network system to which an embodiment of the present invention is applied. It is a hardware block diagram of the apparatus which comprises a network system. 1 is a schematic configuration diagram of a network system to which an embodiment of the present invention is applied. 1 is a schematic configuration diagram of a network system to which an embodiment of the present invention is applied. It is a figure for demonstrating transmission / reception of information between each apparatus. It is a figure for demonstrating transmission / reception of information between each apparatus. It is a figure for demonstrating transmission / reception of information between each apparatus. It is a figure for demonstrating transmission / reception of information between each apparatus. It is a figure for demonstrating transmission / reception of information between each apparatus. It is a figure for demonstrating transmission / reception of information between each apparatus. It is a figure for demonstrating transmission / reception of information between each apparatus.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 ... Receiver, 3 ... Service provision function, 4 ... Authentication code transmission function, 6 ... Individual information management function, 7 ... Synchronization information management function

Claims (6)

In a communication system having an authentication server for authenticating a receiver and an authentication information management server connected to the receiver,
The authentication server and the authentication information management server store secret information shared by the authentication server and the authentication information management server, respectively.
Each of the authentication server and the authentication information management server obtains asynchronous information indicating different values at each time point,
The communication system, wherein the authentication server generates authentication information for authenticating the receiver using the secret information and the asynchronous information. The communication system according to claim 1, wherein
The authentication information management server sends the authentication information to the receiver at regular intervals,
A communication system, wherein the authentication server authenticates a receiver that has received the authentication information. The communication system according to claim 1, wherein
The authentication server and the authentication information management server use an authentication code for authentication from at least one to the other at regular intervals using a delivery path of the communication system or when a request is received from the receiver. The authentication code can be shared by transmitting to the communication system. The communication system according to claim 3,
The communication system, wherein the authentication server generates the authentication information using the secret information, the authentication code, and the asynchronous information. The communication system according to claim 4, wherein
A communication system, wherein the authentication information management server transmits the authentication information to the receiver at regular intervals, and the authentication server authenticates the receiver. The communication system according to claim 2 or 4,
A second authentication server;
The receiver transmits the authentication information to the authentication server and the second server,
The communication system, wherein the second server transmits request information for requesting verification of authentication information to the authentication server.

Images