JP2009134667A - System and method for issuing tamper resistant device - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To impose no temporal and geographic restrictions on a user and to require no input terminal nor its operator at a window. <P>SOLUTION: The system includes a management server 108 communicable with a user terminal 101, and an issuing terminal 106 communicable with the user terminal 101. The management server 108 generates issuance information based on application information transmitted from the user terminal 101, generates authorization information based on issuance information hash generated from the issuance information and a user ID input from the user terminal 101, and sends the issuance information and the authorization information to the user terminal 101. The issuing terminal 106 generates the issuance information hash from the issuance information, and determines whether the user ID included in the authorization information matches the user ID transmitted from the user terminal 101, and whether the issuance information hash created by the management server 108 matches the issuance information hash generated by the issuing terminal 106. When matching is determined, the issuing terminal 106 issues a tamper resistant device based on the issuance information. <P>COPYRIGHT: (C)2009,JPO&INPIT

Description

  The present invention relates to a tamper resistant device issuing system and a tamper resistant device issuing method in the tamper resistant device issuing system.

  When a service provider provides a service to a user, the service provider issues a tamper resistant device to the user, and the service provider is only for a user having a tamper resistant device such as an IC card or an IC chip embedded device. May provide services. In this case, when the service provider provides a service to a new user, a tamper resistant device must be issued. Here, the tamper-resistant device refers to a device having a physical or logical protection function so that data cannot be tampered with from the outside or cannot be intercepted.

  Conventionally, in order to immediately issue a tamper resistant device, the user goes to the sales counter that also serves as the tamper resistant device issuing organization, and the operator of the sales counter inputs the user application information to a dedicated input terminal. As a result, they were issued with tamper resistant devices.

  The outline of the tamper resistant device issuance system according to the prior art will be described with reference to FIG. As shown in FIG. 8, the system according to the prior art includes a service provider window 701, a communication network 702, and a tamper resistant device issue manager management center 703. The window 701 is connected to the management center 703 via the communication network 702.

  The window 701 issues a tamper resistant device based on a service application submitted by a user who wishes to issue a tamper resistant device. The window 701 includes an input terminal 704, a communication cable 705, and an issuing terminal 706. The input terminal 704 is connected to the issuing terminal 706 via the communication cable 705.

  The communication network 702 is a communication network such as the Internet, a public network, a dedicated line, and a mobile communication network. The management center 703 transmits issuance information to the input terminal 704 based on the application information received from the input terminal 704. The management center 703 includes a management server 707. The management server 707 includes an issue information storage unit 708.

  The input terminal 704 is, for example, a personal computer (PC), and the issuing terminal 706 is a device that issues a tamper resistant device.

  The management server 707 performs the main operation of this system and is configured by a server, a computer, and the like. The issue information storage unit 708 is a storage unit that stores data, and is configured by a memory or a hard disk. The issue information storage unit 708 stores at least issue information.

  Next, the configuration of the system according to the related art will be described with reference to FIG. As illustrated in FIG. 9, the input terminal 704 includes an input unit 801 and a communication unit 805. The input unit 801 is a unit for inputting application information from the user, and includes, for example, a keyboard and a mouse. The issuing terminal 706 includes tamper resistant device issuing means 802. The tamper resistant device issuing means 802 is a means for issuing a tamper resistant device.

  The management server 707 includes an issue information storage unit 708, issue information generation means 803, issue completion flag setting means 804, and communication means 806. The issue information generation unit 803 is a unit that generates issue information from the application information received from the input terminal 704. The issue completion flag setting means 804 is a means for setting a completion flag after receiving a completion message from the input terminal 704.

  Then, the process in the system which concerns on a prior art is demonstrated using FIGS. 8-10. First, the user submits a service application form in which an identification card (for example, a driver's license) and application information are written to the operator of the window 701 (S901). The operator of the window 701 confirms the identity of the user based on the identification card, and inputs the application information entered in the service application form through the input unit 801 (S902). The communication unit 805 transmits the application information to the management server 707 (S903). Upon receiving the application information, the management server 707 generates issuance information from the application information by the issuance information generation unit 803, and stores the issuance information in the issuance information storage unit 708 (S904).

When the issue information is generated, the communication unit 806 transmits the issue information to the input terminal 704 (S905). The communication unit 805 that has received the issue information transmits the issue information to the issue terminal 706 (S906). When the issuing terminal 706 receives the issue information, the tamper resistant device issuing unit 802 issues a tamper resistant device storing authentication information used in the new service (S907). When the tamper resistant device is issued, the input terminal 704 transmits the completion message generated by the tamper resistant device issuing means 802 to the management server 707 (S908). The management server 707 that has received the completion message sets a completion flag for the record of the corresponding issue information (S909).
http://www.dnp.co.jp/cmc/products/cps/cx320sysstr.html http://www.sys.sbs-np.co.jp/news/2003/1115-01.html http://www.multos.gr.jp/event_seminor/pdf/sm014_02.pdf

  However, in such a conventional tamper-resistant device issuance system, in order for the user to issue a tamper-resistant device, the user inputs at the service provider window 701 based on the service application form. Since it is necessary to wait for the application information to be input by the input unit 801 of the terminal 704, the user is limited in time. Further, since it is difficult to install many windows 701, the user is subjected to geographical restrictions. Furthermore, the service provider needs to prepare an input terminal 704 at the window 701 and arrange an operator.

  The present invention has been made in order to solve the above-described problems, and the tamper resistant tamper resistant user is not subject to time restrictions, does not need to prepare an input terminal at the window, and does not need to place an operator. An object is to provide a device issuing system and an issuing method.

  The tamper resistant device issuance system according to the present invention is a tamper resistant device issuance system comprising a management server capable of communicating with a user terminal and an issuing terminal capable of communicating with the user terminal, wherein the management server includes the user Based on the issuance information generating means for generating issuance information from the application information transmitted from the terminal, the first encrypted issuance information obtained by encrypting the issuance information, and the first principal ID transmitted from the user terminal, Authority information generating means for generating authority information, and means for transmitting the issue information and the authority information to the user terminal, wherein the issue terminal generates the authority information generated from the user terminal. Information generating means for generating encrypted second encrypted issue information in the same manner as the means, and the first person I of the authority information transmitted from the user terminal Information verifying means for judging whether or not the second identity ID transmitted from the user terminal matches and the first encrypted issue information matches the second encrypted issue information And a tamper resistant device issuing means for issuing a tamper resistant device based on the issue information when it is determined that the authority information verification means match.

  Further, another tamper resistant device issuing system according to the present invention is a tamper resistant device issuing system comprising a user terminal, a management server capable of communicating with the user terminal, and an issuing terminal, wherein the management server includes: Based on issuance information generating means for generating issuance information from the application information transmitted from the user terminal, the first encrypted issuance information obtained by encrypting the issuance information, and the first principal ID transmitted from the user terminal. Authority information generating means for generating authority information, and communication means for transmitting the issue information and the authority information to the user terminal, wherein the user terminal transmits the issue information transmitted from the management server and Information writing means for writing authority information to an information transmission tamper-resistant device storing a second principal ID, wherein the issuing terminal is configured to provide the information transmission tamper-resistant device; Information reading means for reading the issue information, the authority information, and the second principal ID from a vice, and information generation for generating second encrypted issue information obtained by encrypting the issue information in the same manner as the authority information generating means Authority to determine whether the first identity ID and the second identity ID match and the first encrypted issue information matches the second encrypted issue information When it is determined that the information verification unit and the authority information verification unit match, a tamper resistant device issuing unit that issues a tamper resistant device based on the issue information is provided.

  In the above-described tamper resistant device issuance system or other tamper resistant device issuance system, the authority information generation unit is based on the first encrypted issuance information, the first identity ID, and the first issuance terminal ID. The authority information is generated, and the authority information verification means matches the first and second principal IDs, and the first issuing terminal ID of the authority information and the second of the issuing terminal. It may be determined whether or not the issuing terminal IDs match and the first encrypted issue information matches the second encrypted issue information.

  In the above-described tamper resistant device issuance system or another tamper resistant device issuance system, the authority information generation unit may encrypt the issuance information using a hash function.

  A tamper resistant device issuance method according to the present invention is a tamper resistant device issuance method in a tamper resistant device issuance system comprising a management server that can communicate with a user terminal, and an issuance terminal that can communicate with the user terminal. An issue information generation step in which the management server generates issue information from the application information transmitted from the user terminal, and the management server transmits the first encrypted issue information obtained by encrypting the issue information and the user terminal. An authority information generating step for generating authority information based on the first identity ID, a transmission step in which the management server transmits the issue information and the authority information to the user terminal, and the issue terminal, Generates second encrypted issue information obtained by encrypting the issue information transmitted from the user terminal in the same manner as the authority information generation step. And the issuing terminal confirms that the first principal ID of the authority information transmitted from the user terminal matches the second principal ID transmitted from the user terminal, and When the authority information verifying step for determining whether or not the first encrypted issuance information and the second encrypted issuance information match and the authority information verification step determines that they match, the issuing terminal A tamper resistant device issuing step for issuing a tamper resistant device based on the information.

  Another tamper resistant device issuing method according to the present invention is a tamper resistant device issuing method in a tamper resistant device issuing system comprising a user terminal, a management server capable of communicating with the user terminal, and an issuing terminal. An issuance information generating step in which the management server generates issuance information from application information transmitted from the user terminal; and the first encrypted issuance information in which the management server is encrypting the issuance information and the user terminal. An authority information generating step for generating authority information based on the first identity ID transmitted from the server, a transmitting step in which the management server transmits the issue information and the authority information to the user terminal, and the user terminal. Is a tamper resistant device for information transmission in which the issue information and the authority information transmitted from the management server are stored in a second identity ID. An information writing step of writing to the information transmitting step, the issuing terminal reading the issuing information, the authority information and the second personal ID from the tamper-resistant device for information transmission, and the issuing terminal including the issuing information The authority information confirmation step for generating the second encrypted issue information encrypted in the same manner as the authority information generation step, and the issuing terminal is configured such that the first principal ID and the second principal ID match. And when the authority information verifying step for determining whether or not the first encrypted issue information and the second encrypted issue information match, and the authority information verifying step, the issuing terminal Includes a tamper resistant device issuance step for issuing a tamper resistant device based on the issuance information.

  In the above-described tamper resistant device issuance method or other tamper resistant device issuance method, the authority information generation step is based on the first encrypted issue information, the first principal ID, and the first issue terminal ID. The authority information is generated, and in the authority information verification step, the first principal ID and the second principal ID match, and the first issuing terminal ID of the authority information and the second of the issuing terminal It may be determined whether or not the issuing terminal IDs match and the first encrypted issue information matches the second encrypted issue information.

  In the above-described tamper resistant device issuance method or another tamper resistant device issuance method, the authority information generation step may encrypt the issuance information using a hash function.

  According to the present invention, in order for a user to issue a tamper resistant device, the user waits for the operator to input application information by the input means of the input terminal based on the service application form at the service provider's window. Since there is no need, the user is not limited in time, and the service provider does not need to prepare an input terminal at the window, and does not need to place an operator at the window.

(First embodiment)
First, the outline of the tamper resistant device issuing system according to the present invention will be described with reference to FIG. The tamper resistant device issuance system includes a user input terminal 101 (user terminal), a communication network 104, a tamper resistant device issuance manager management center 105, and a service provider issuance terminal 106, as shown in FIG. ing.

  The input terminal 101 is, for example, a mobile terminal, a mobile phone with an Internet connection function, or a PDA with a wireless function, and includes a CPU, a ROM, a RAM, a display, an input button, and the like.

  The communication network 104 is a communication network such as the Internet, a public network, a dedicated line, a mobile communication network, and a wireless LAN.

  The management center 105 transmits authority information and issue information to the input terminal 101 based on the information received from the input terminal 101. Here, the authority information is composed of a principal ID, an issuing terminal ID, and an issuing information hash, and is composed of text data or binary data. The authority information includes data of a principal ID header, principal ID, issue terminal ID header, issue terminal ID, issue information hash header, and issue information hash. Each header includes information on an identifier and a data length (the same applies hereinafter). The issuance information is a script in which commands and data are generated according to the issuance procedure so that the issuance terminal 106 can issue the tamper resistant device, based on the application information and the tamper resistant device issuance template. Data, text data or binary data.

  The management center 105 includes a management server 108. The management server 108 includes an issue information storage unit 109. The management server 108 performs the main operation of this system. However, it is not necessary to be physically single, and a configuration in which processing is performed in a distributed manner may be employed. The issuance information storage unit 109 is a storage unit that stores data, and includes a memory and a hard disk. The issue information storage unit 109 stores at least issue information.

  The issuing terminal 106 is a device that issues tamper resistant devices. For example, the issuing terminal 106 is installed in a supermarket or a convenience store, and is installed in one or more tamper resistant device issuing systems. The issuance terminal 106 includes an issuance information storage unit 107. The issuance information storage unit 107 is a storage unit that stores data, and includes a memory and a hard disk. The issue information storage unit 107 stores at least issue information.

  Next, the configuration of the tamper resistant device issuing system according to the present invention will be described with reference to FIG. As shown in the figure, the tamper resistant device issuing system includes an input terminal 101, a communication network 104, an issuing terminal 106 and a management server 108.

  The input terminal 101 includes an input unit 201, an issue request message generation unit 202, a tamper resistant device reading unit 203 for authenticating authentication, an issue request message generation unit 204, a response message storage unit 205, a completion message storage unit 206, a communication unit 218, and a communication Means 220 are provided.

  The input unit 201 is a unit through which application information and an issuing terminal ID are input from a user, and includes, for example, an input button. Here, the application information is personal information provided by the user and necessary for generating the issuance information in the management server 108. For example, it is composed of data such as a user name, a telephone number, an address, and a service name to be used, and is composed of text data. The issuing terminal ID is identification information of the issuing terminal 106 managed by the management server 108, and consists of text data or binary data.

  The identity authentication tamper resistant device reading means 203 reads the identity ID of the identity authentication tamper resistant device such as an IC card or IC chip embedded device issued by a public institution. Here, the principal ID is identification information of the tamper resistant device and is composed of text data or binary data.

  The issuance request message generation unit 202 is a unit that generates an issuance request message based on the application information input by the input unit 201, the issuance terminal ID, and the principal ID read by the identity authentication tamper resistant device reading unit 203. Here, the issuance request message is composed of application information, an issuance terminal ID, and a principal ID, and is composed of text data or binary data. It also includes an issue request message header, application information header, application information, issue terminal ID header, issue terminal ID, principal ID header, and principal ID.

  The response message storage unit 205 and the completion message storage unit 206 are storage means for storing data, and are configured by a memory or a hard disk. The response message storage unit 205 stores at least a response message. Here, the response message is composed of issuance information and authority information, and is composed of text data or binary data. It also includes a response message header, issue information header, issue information, authority information header, and authority information. The completion message storage unit 206 stores at least a completion message. Here, the completion message is a message indicating that the issuance of the tamper resistant device is completed, and is composed of text data or binary data. In addition, a completion message header and a completion message are included.

  The issue request message generation unit 204 is a unit that generates an issue request message based on the person ID read by the tamper resistant device reading unit 203 for authenticating the user and the response message stored in the response message storage unit 205. Here, the issue request message is composed of a response message and a principal ID, and is composed of text data or binary data. It also includes an issue request message header, a response message header, a response message, a principal ID header, and a principal ID.

  The management server 108 includes an issue information storage unit 109, an issue request information analysis unit 213, an issue information generation unit 214, an authority information generation unit 215, a response message generation unit 216, an issue completion flag setting unit 217, and a communication unit 219.

  The issue request information analysis unit 213 is a unit that acquires application information, an issue terminal ID, and a principal ID from the issue request message received from the input terminal 101.

  The issuance information generation unit 214 is a unit that generates issuance information based on the application information and stores it in the issuance information storage unit 109.

  The authority information generation unit 215 generates an issuance information hash from the issuance information stored in the issuance information storage unit 109 using a predetermined hash function, and based on the issuance terminal ID, the principal ID, and the issuance information hash, It is a means for generating authority information.

  The response message generation unit 216 is a unit that generates a response message based on the issue information. The issue completion flag setting unit 217 is a unit that sets a completion flag for the record of the corresponding issue information stored in the issue information storage unit 109 based on the completion message received from the input terminal 101. Here, the completion flag is a flag for determining whether or not the tamper resistant device of the issue information has been issued. The issue information with the completion flag set indicates that the tamper resistant device has been issued, and the issue information with no completion flag set indicates that the tamper resistant device has not been issued.

  The issue terminal 106 includes an issue information storage unit 107, an issue request message analysis unit 207, an authority information confirmation unit 208, an authority information verification unit 209, a tamper resistant device issue unit 210, an issue terminal ID storage unit 212, and a communication unit 221. Yes.

  The issue request message analysis unit 207 is a unit that acquires authority information, a principal ID, and issue information from the issue request message received from the input terminal 101 and stores the issue information in the issue information storage unit 107.

  The authority information confirmation unit 208 is a unit that generates an issuance information hash based on the issuance information stored in the issuance information storage unit 107. Here, the issue information hash is generated using a hash function used by the authority information generation means 215.

  The authority information verification unit 209 compares the principal ID (first principal ID) of the authority information with the principal ID (second principal ID) of the issue request message, and issues the authority information issue terminal ID (first issue terminal). ID) and the issuing terminal ID (second issuing terminal ID) stored in the issuing terminal ID storage unit 212, and further, the issue information hash (first encrypted issue information) of the authority information and the authority information confirmation The issuance information hash (second encrypted issuance information) generated by the means 208 is compared to determine whether or not they all match. The tamper resistant device issuing unit 210 is a unit that issues a tamper resistant device based on the issue information and generates a completion message when the authority information verification unit 209 determines that all match.

  Next, the configuration of the input terminal will be described with reference to FIG. As shown in the figure, the input terminal 101 includes a control unit 301 configured by a CPU 302, a ROM 303, and a RAM 304, an input device 305, an output device 306, an input / output control circuit 307, a response message storage unit 205, and a completion message storage unit. These components are connected to each other by a system bus.

  The control unit 301 executes various arithmetic processes for realizing the input terminal 101. The CPU 302 is a central processing unit, and executes transfer and arithmetic processing based on a main program stored in the ROM 303, a program expanded in the RAM 304 or the like, temporarily stored data, and the like.

  The input device 305 is a data input device such as an input button, and constitutes a part of the input unit 201. The output device 306 is a display device such as an LCD. The input / output control circuit 307 performs control for executing data input / output with an external device.

  Next, the configuration of the management server will be described with reference to FIG. As shown in the figure, the management server 108 includes a control unit 401 including a CPU 402, a ROM 403, and a RAM 404, an input device 405, an output device 406, an input / output control circuit 407, and an issue information storage unit 109. These components are connected to each other by a system bus.

  The control unit 401 executes various arithmetic processes for realizing the management server 108. The CPU 402 is a central processing unit, and executes transfer and arithmetic processing based on a main program stored in the ROM 403, a program developed in the RAM 404 and the like, temporarily stored data, and the like.

  The input device 405 is a data input device such as a keyboard and a mouse. Data can be input to the issue information storage unit 109 by the input device 405. The output device 406 is a display device such as an LCD or a CRT, or a printer. The input / output control circuit 407 performs control for executing data input / output with an external device.

  Next, the configuration of the issuing terminal will be described with reference to FIG. As shown in the figure, the issuing terminal 106 includes a control unit 501, an input device 505, an output device 506, an input / output control circuit 507, an issue information storage unit 107, and an issue terminal ID storage configured by a CPU 502, a ROM 503, and a RAM 504. A unit 212 is provided, and these components are connected to each other by a system bus.

  The control unit 501 executes various arithmetic processes for realizing the issuing terminal 106. The CPU 502 is a central processing unit, and executes transfer and arithmetic processing based on a main program stored in the ROM 503, a program developed in the RAM 504, and temporarily stored data.

  The input device 505 is a data input device such as a keyboard and a mouse. The input device 505 can input data to the issue information storage unit 107 or the issue terminal ID storage unit 212. The output device 506 is a display device such as an LCD or a CRT, or a printer. The input / output control circuit 507 performs control for executing data input / output with an external device.

  Next, a process in the tamper resistant device issuance system, that is, a tamper resistant device issuance method according to the present invention will be described with reference to FIGS. First, the user accesses the management server 108 and obtains the issuing terminal ID of the issuing terminal 106 that issues the tamper resistant device (S601). The user inputs application information and issuance terminal ID, which are personal information of the user, using the input unit 201 of the input terminal 101 (S602), and the person from the tamper-resistant device for personal authentication to the tamper-proof device reading unit 203 for personal authentication The ID is read (S603).

  Then, the issue request message generation unit 202 of the input terminal 101 generates an issue request message from the application information, the issue terminal ID, and the principal ID, and transmits the issue request message to the management server 108 via the communication network 104 (S604). .

  The issuance information generation unit 213 of the management server 108 acquires application information, authority information, and a principal ID from the issuance request message (S605). The issue information generation means 214 of the management server 108 generates issue information from the application information (issue information generation step), and stores the issue information in the issue information storage unit 109 (S606). The authority information generation unit 215 of the management server 108 generates an issuance information hash from the issuance information using a predetermined hash function, and generates authority information from the issuing terminal ID, the principal ID, and the issuance information hash (S607, authority information generation). Step). The response message generation unit 216 of the management server 108 generates a response message from the authority information and the issue information, and transmits the response message to the input terminal 101 via the communication network 104 (S608, transmission step).

  The input terminal 101 stores the response message in the response message storage unit 205, and the issue request message generation unit 204 of the input terminal 101 issues an issue request from the response message and the identity ID newly read by the tamper resistant device reading unit 203 for authentication of the user. A telegram is generated (S609). The user goes to the installation location of the issuing terminal 106 corresponding to the issuing terminal ID, and transmits an issue request message to the issuing terminal 106 by the communication means 220 (S609).

  The issue request message analysis unit 207 of the issue terminal 106 acquires issue information, authority information, and principal ID from the issue request message (S610), and stores the issue information in the issue information storage unit 107. The authority information confirmation unit 208 of the issuing terminal 106 generates an issue information hash from the issue information using the hash function used by the authority information generation unit 215 (S611, authority information confirmation step). The authority information verification unit 209 of the issuing terminal 106 compares the authority information principal ID and the issuance request message principal ID, and compares the authority information issuing terminal ID and the issuing terminal ID stored in the issuing terminal ID storage unit 212. Further, the issue information hash of the authority information and the issue information hash generated by the authority information confirmation unit 208 are compared to determine whether or not they all match (S612, authority information verification step).

  When the authority information verification unit 209 of the issuing terminal 106 determines that all match, the tamper resistant device issuing unit 210 of the issuing terminal 106 issues a tamper resistant device based on the issued information (S613, tamper resistant device issuing step). . When the tamper resistant device issuing unit 210 of the issuing terminal 106 issues a tamper resistant device, the communication unit 221 transmits a completion message indicating that the issuance of the tamper resistant device is completed to the input terminal 101, and the completion message is stored in the completed message storage. The completion message is stored in the unit 206 and transmitted to the management server 108 by the communication means 218 (S614). When the management server 108 receives the completion message, the issue completion flag setting unit 217 sets a completion flag for the corresponding issue information stored in the issue information storage unit 109 of the management server 108 (S615). Note that when the authority information verification unit 209 of the issuing terminal 106 determines that at least one does not match, the issuing terminal 106 displays on the output device 506 that the tamper resistant device is not issued.

  In such a tamper-resistant device issuance system and tamper-resistant device issuance method, in order for the user to issue a tamper-resistant device, the user inputs at the service provider's window based on the service application form. Since there is no need to wait for the application information to be entered via the terminal input means, the user is not subject to time restrictions, and the service provider does not need to prepare an input terminal at the window. There is no need to place them. In other words, a conventional input terminal is not necessary, and the user can request the issuance of a tamper-resistant device. Therefore, there is no time restriction, and if a large number of issuance terminals 106 are installed, a supermarket or convenience store near the home can be provided. Since the tamper resistant device can be received at a store or the like, there is no geographical restriction.

(Second Embodiment)
The configuration of another tamper resistant device issuance system according to the present invention will be described with reference to FIG. As shown in the figure, this tamper resistant device issuing system includes an input terminal 601 (user terminal), a communication network 104, an issuing terminal 603, and a management server 108. The input terminal 601 is, for example, a personal computer (PC) installed in a user's home, and includes a CPU, ROM, RAM, hard disk, display, keyboard, and the like, and in particular, a browser program is stored in the hard disk. . The issuing terminal 603 is a device that issues tamper-resistant devices. For example, the issuing terminal 603 is installed in a supermarket or a convenience store, and one or more are installed in a tamper-resistant device issuing system.

  The input terminal 601 includes an input unit 201, an issuance request message generation unit 202, a tamper-proof device reading unit 203 for authenticating a user, a response message storage unit 205, a communication unit 218, and a tamper-resistant device information reading and writing unit 602 (information writing). Means).

  The tamper-resistant device information reading / writing unit 602 receives the response message stored in the response message storage unit 205 in the tamper-resistant device for information transmission storing the personal ID (second personal ID), for example, the tamper-resistant device for personal authentication. It is means for writing and reading a completion message from the tamper resistant device for personal authentication.

  The issuing terminal 603 includes an issuing information storage unit 107, a response message analysis unit 605, an authority information confirmation unit 208, an authority information verification unit 209, an anti-tamper device issuing unit 210, an issuing terminal ID storage unit 212, and an anti-tamper device information reading and writing. A storing unit 604 (information reading unit) is provided.

  The tamper resistant device information reading / writing unit 604 is a unit that reads a response message and a person ID from the tamper resistant device for personal authentication and writes a completion message to the tamper resistant device for personal authentication. The response message analysis unit 605 is a unit that acquires authority information and issue information from the response message read by the tamper resistant device information reading / writing unit 604 and stores the issue information in the issue information storage unit 107.

  Next, processing in the tamper resistant device issuance system shown in FIG. 7, that is, another tamper resistant device issuance method according to the present invention will be described.

  The input terminal 601 stores the response message received from the management server 108 in the response message storage unit 205, and then the tamper resistant device information reading / writing unit 602 writes the response message to the tamper resistant device for personal authentication (information writing). Step). Thereafter, the user brings a tamper resistant device for personal authentication in which a response message is written, goes to the installation location of the issuing terminal 603 corresponding to the issuing terminal ID, and attaches the tamper resistant device for personal authentication to the issuing terminal 603. When inserted into the tamper device information reading and writing means 604, the tamper resistant device information reading and writing means 604 of the issuing terminal 603 reads the response message and the principal ID from the tamper resistant device for personal authentication (information reading step). Thereafter, the response message analysis unit 605 of the issuing terminal 603 acquires the issue information and authority information from the response message, and stores the issue information in the issue information storage unit 107. The authority information confirmation unit 208 of the issuing terminal 603 generates an issue information hash from the issue information using the hash function used by the authority information generation unit 215.

  When the tamper resistant device issuing unit 210 of the issuing terminal 603 issues a tamper resistant device, the tamper resistant device information reading / writing unit 604 writes a completion message in the tamper resistant device for personal authentication. After this, when the user inserts the tamper resistant device information reading / writing unit 602 of the input terminal 601 into the tamper resistant device information reading / writing unit 602 of the input terminal 601, the tamper resistant device information reading / writing unit 602 authenticates the user. The completion message is read from the tamper-resistant device for use, and the completion message is transmitted to the management server 108 by the communication means 218.

  The other steps are the same as the tamper resistant device issuing method described with reference to FIGS.

  Even in such a tamper-resistant device issuance system and tamper-resistant device issuance method, the user is not subject to time restrictions, the service provider does not need to prepare an input terminal at the window, and an operator is placed at the window. There is no need to do.

  Further, the present invention is not limited to the above-described embodiments, and various modifications can be made without departing from the scope of the present invention. In the embodiment described above, the configuration of one input terminal, one issuing terminal, and one management server has been described. However, the configuration of one or a plurality of input terminals, one or a plurality of issuing terminals, and one management server is described. In the present invention, the present invention can be applied.

1 is a conceptual diagram of a tamper resistant device issuance system according to the present invention. 1 is a configuration diagram of a tamper resistant device issuing system according to the present invention. FIG. It is a hardware block diagram of an input terminal. It is a hardware block diagram of a management server. It is a hardware block diagram of an issuing terminal. It is a flowchart which shows the process in the tamper resistant device issue system which concerns on this invention. It is a block diagram of the other tamper resistant device issuance system according to the present invention. It is a conceptual diagram of the system which concerns on a prior art. It is a block diagram of the system which concerns on a prior art. It is a flowchart which shows the process in the system which concerns on a prior art.

Explanation of symbols

101 Input terminal 104 Communication network 106 Issuing terminal 108 Management server 205 Response message storage unit 206 Completion message storage unit 207 Issuance request message analysis unit 208 Authority information confirmation unit 209 Authority information verification unit 210 Tamper resistant device issuance unit 214 Issuance information generation unit 215 Authority information generating means 601 Input terminal 602 Tamper resistant device information reading / writing means 603 Issuing terminal 604 Tamper resistant device information reading / writing means

Claims (8)

A tamper resistant device issuance system comprising a management server communicable with a user terminal and an issuance terminal communicable with the user terminal,
The management server
Issuance information generating means for generating issuance information from the application information transmitted from the user terminal;
Authority information generating means for generating authority information based on the first encrypted issuance information obtained by encrypting the issuance information and the first principal ID transmitted from the user terminal;
Communication means for transmitting the issue information and the authority information to the user terminal,
The issuing terminal is
Authority information confirmation means for generating second encrypted issue information obtained by encrypting the issue information transmitted from the user terminal in the same manner as the authority information generation means;
The first principal ID of the authority information transmitted from the user terminal matches the second principal ID transmitted from the user terminal, and the first encryption issue information and the second encryption Authority information verification means for determining whether or not the computerized issue information matches,
A tamper resistant device issuance system, comprising: a tamper resistant device issuing means for issuing a tamper resistant device based on the issue information when it is determined that the authority information verification means match. A tamper resistant device issuing system comprising a user terminal, a management server capable of communicating with the user terminal, and an issuing terminal,
The management server
Issuance information generating means for generating issuance information from the application information transmitted from the user terminal;
Authority information generating means for generating authority information based on the first encrypted issuance information obtained by encrypting the issuance information and the first principal ID transmitted from the user terminal;
Communication means for transmitting the issue information and the authority information to the user terminal,
The user terminal is
Comprising information writing means for writing the issuance information and the authority information transmitted from the management server to an information transmission tamper-resistant device storing a second principal ID;
The issuing terminal is
Information reading means for reading the issued information, the authority information and the second identity ID from the tamper-resistant device for information transmission;
Authority information confirmation means for generating second encrypted issuance information obtained by encrypting the issue information in the same manner as the authority information generation means;
Authority information verification means for determining whether the first principal ID and the second principal ID match, and whether or not the first encrypted issue information and the second encrypted issue information match. When,
A tamper resistant device issuance system, comprising: a tamper resistant device issuing means for issuing a tamper resistant device based on the issue information when it is determined that the authority information verification means match. The authority information generation means generates the authority information based on the first encrypted issue information, the first principal ID, and the first issue terminal ID.
In the authority information verification means, the first principal ID and the second principal ID coincide with each other, and the first issuing terminal ID of the authority information and the second issuing terminal ID of the issuing terminal are identical. 3. The tamper resistant device issuance system according to claim 1, wherein the tamper resistant device issuance system determines whether the first encryption issuance information matches the second encryption issuance information.   The tamper-resistant device issuance system according to claim 1, wherein the authority information generation unit encrypts the issuance information using a hash function. A tamper resistant device issuance method in a tamper resistant device issuance system comprising a management server communicable with a user terminal and an issuance terminal capable of communicating with the user terminal,
An issue information generation step in which the management server generates issue information from application information transmitted from the user terminal;
An authority information generating step in which the management server generates authority information based on the first encrypted issuance information obtained by encrypting the issuance information and the first principal ID transmitted from the user terminal;
A transmission step in which the management server transmits the issue information and the authority information to the user terminal;
An authority information confirmation step in which the issuing terminal generates second encrypted issuance information obtained by encrypting the issuance information transmitted from the user terminal in the same manner as the authority information generating step;
The issuing terminal matches the first principal ID transmitted from the user terminal with the first principal ID transmitted from the user terminal, and the first encrypted issuance information. An authority information verification step for determining whether or not the second encryption issue information matches;
A tamper resistant device issuance method, comprising: a tamper resistant device issuance step in which the issuing terminal issues a tamper resistant device based on the issuance information when it is determined that they match in the authority information verification step. A tamper resistant device issuing method in a tamper resistant device issuing system comprising a user terminal, a management server capable of communicating with the user terminal, and an issuing terminal,
An issue information generation step in which the management server generates issue information from application information transmitted from the user terminal;
An authority information generating step in which the management server generates authority information based on the first encrypted issuance information obtained by encrypting the issuance information and the first principal ID transmitted from the user terminal;
A transmission step in which the management server transmits the issue information and the authority information to the user terminal;
An information writing step in which the user terminal writes the issuance information and the authority information transmitted from the management server to an information transmission tamper-resistant device storing a second principal ID;
An information reading step in which the issuing terminal reads the issuing information, the authority information, and the second identity ID from the tamper-resistant device for information transmission;
An authority information confirmation step in which the issuing terminal generates second encrypted issue information in which the issue information is encrypted in the same manner as the authority information generation step;
The issuing terminal determines whether the first principal ID and the second principal ID match, and whether the first encrypted issue information and the second encrypted issue information match. Authorization information verification step,
A tamper resistant device issuance method, comprising: a tamper resistant device issuance step in which the issuing terminal issues a tamper resistant device based on the issuance information when it is determined that they match in the authority information verification step. The authority information generation step generates the authority information based on the first encrypted issue information, the first principal ID, and the first issue terminal ID,
In the authority information verification step, the first principal ID and the second principal ID coincide with each other, and the first issuing terminal ID of the authority information and the second issuing terminal ID of the issuing terminal are identical. 7. The tamper resistant device issuance method according to claim 5, further comprising determining whether or not the first encryption issue information matches the second encryption issue information.   The tamper resistant device issuance method according to any one of claims 5 to 7, wherein the authority information generation step encrypts the issuance information using a hash function.

Images