JP2009277082A - Service execution system and method using damper resisting device and damper resisting device - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an information processing service execution system for preventing illegal use in using, by offline, an information processing service system to be basically used by online. <P>SOLUTION: This service execution system using a damper resisting device (for example, IC card) to be mounted on a user side terminal for use is configured to make the damper resisting device store offline authentication data including offline authentication frequency and offline final authentication date, user information related with a user, authentication condition data and an authority confirmation and determination part for determining authentication propriety in offline, and to decide the authentication propriety by the authority confirmation and determination part by using the offline authentication data, user information and authentication condition data stored in the damper resisting device during offline and to, when the preset authentication conditions are satisfied by the content of the offline authentication data and the user information, permit the provision of the information processing service even during offline. <P>COPYRIGHT: (C)2010,JPO&INPIT

Description

  The present invention relates to a system for providing a service using a tamper resistant device such as an IC card.

A conventional information processing service is described in Patent Document 1 below.
In this patent document 1, the debit card system before that took a mechanism for making an online inquiry in real time for a customer's account balance and executing an immediate debit or an immediate deposit hold for every transaction. The IC card balance upper limit and the current IC card balance are stored in the card, and a reserve deposit frame corresponding to the sum of the IC card balance and the unsettled amount of offline sales is set in the cardholder's deposit account. When the IC card balance is greater than or equal to the transaction transaction price by inserting the IC card into the merchant terminal, the transaction transaction is authenticated by offline processing, and the price related to the transaction transaction is calculated from the IC card balance. Reduce the amount and update the balance in the IC card in the IC card in the held deposit and the offline sales unsettled amount by batch processing. Method for processing settlement sales outstanding amount to account pull down have been described.

In addition, in a service using copyright-protected software, information (expiration date, etc.) about the user (user) who purchased the right to use the software is stored in the member database of the license management server, When using software in a user PC (user terminal), in order to confirm authority, in principle, it is necessary to connect to the license management server of the software online and authenticate each time. Therefore, when the user uses the software, it is assumed that the user is connected to the network (= online state). In principle, the license management server checks the expiration date when the user can use the software online, but if it is not connected to the network (= offline state), the license management server checks the number of offline authentications in the user PC, The software was allowed to be used up to a certain number of times.
JP 2001-143007 A

  In the above-mentioned Patent Document 1, a mechanism for using data offline is provided by holding data in an IC card, but the authorization for using the service is performed by the member store terminal side. , When using offline, if the program and data on the merchant terminal side are altered (in the above example, the number of times offline use or product price is changed), there is a possibility that unauthorized use may be possible was there.

In the service using copyright-protected software, the user information such as the expiration date is stored in the member database of the license management server in the same manner as described above, and is used as data for determining offline usage (number of offline usages). And the use period etc.) are stored on the user PC, there is a problem that unauthorized use due to falsification of information may be possible. In other words, although a mechanism for offline use is provided, data (offline use frequency and usage period) that is used for determining offline use is stored on the user PC, and the information is altered by analyzing the difference information. (Forgery: For example, the number of offline use: 1 → 2 → 3... → 1), and there is a possibility that unauthorized use by copying the entire terminal information may be possible.
In addition, the decision logic for offline use is also incorporated into the program such as “being a certain number of times or less”, “being within a certain predetermined period”, etc., so that it cannot be flexibly changed or updated later. Also hot.
The present invention aims to solve the problems of the prior art as described above.

The present invention stores authority confirmation means, user information, and information for offline authentication (offline authentication count, online last authentication date, etc.) in a tamper resistant device such as an IC card or a USB token, and provides an offline service. During use, unauthorized use of the service can be prevented by checking user authentication and use authority (use authorization authentication) by means of authority confirmation in the tamper-resistant device. It is.
That is, according to claim 1, in the service execution system including a management side server, a user side terminal connected to the management side server via a network, and a tamper-resistant device used by being mounted on the user terminal, the user side When the tamper resistant device is attached, the terminal determines whether it is online or offline with the management server. If it is online, the terminal issues an instruction to perform user authentication to the management server. In the case of being offline, the tamper resistant device has state management means for issuing an instruction to perform user authentication,
The tamper resistant device includes an authentication information storage unit that stores offline authentication data and user information, an authentication condition storage unit that stores an authentication condition preset by the management server via a network, and the user side terminal. When receiving an instruction to perform user authentication, when the offline authentication data and the user information satisfy the preset authentication condition, an authority confirmation determination unit that permits service provision is provided. ,
When the management server receives an instruction to perform user authentication from the user side terminal, if the user information satisfies an authentication condition preset in the management server, the management server permits service provision. It is comprised so that it may have the authority confirmation determination means to do.

  In the tamper resistant device, the tamper resistant device includes an authentication information storage unit that stores at least offline authentication data including the number of times of offline authentication and an online final authentication date and user information, and the management server via a network. An authentication condition storage means for storing authentication conditions including a preset number of offline authentications possible and an authentication possible period from the online final authentication date and user information, and an instruction to perform re-user authentication from the user side terminal In the case of the offline authentication data, the number of offline authentications is within the number of offline authentications possible, and the date of authentication is within the authentication possible period from the online final authentication date, and user authentication is received. If the user information matches the user information included in the authentication conditions, the service It is configured to have a privilege confirmation decision means for permitting the provision of.

  According to a third aspect of the present invention, when the management-side server performs user authentication and succeeds, the offline authentication data stored in the tamper resistant device is set to 0 as the offline authentication count, and the online final authentication date is set to The authentication date is set, and at least one of the user information and the authentication condition is updated to the user information and the authentication condition stored in the management server.

  The tamper resistant device includes a management side server, a user side terminal connected to the management side server via a network, and a tamper resistant device used by being mounted on the user terminal. An anti-tamper device in the service execution system, an authentication information storage unit that stores offline authentication data and user information, an authentication condition storage unit that stores an authentication condition preset by the management server via a network, When receiving an instruction from the user terminal to perform user authentication, if the offline authentication data and the user information satisfy the preset authentication condition, authority confirmation determination means for permitting provision of a service And it is comprised so that it may have.

  Further, claim 5 is a data recording medium for the tamper resistant device according to claim 4, wherein the offline authentication data and the user information are stored in the authentication information storage means of the tamper resistant device; Storing the authentication condition preset by the management server via the network in the authentication condition storage unit of the device, and performing the user authentication from the user side terminal in the authority confirmation determination unit of the tamper resistant device When receiving the instruction, if the offline authentication data and the user information satisfy the preset authentication condition, a computer recording a program for causing the computer to execute the step of permitting service provision A readable data recording medium.

Further, the present invention is applied to the case where the copyright-protected software is used in a user PC, and a management server, a user PC connected to the management server via a network, In a system for executing a service that allows copyright protected software to be used on a user PC, including a tamper-resistant device used by being mounted on the user PC,
When the tamper resistant device is mounted, the user PC determines whether the management server is online or offline, and if it is online, instructs the management server to perform user authentication. State management means for instructing the tamper resistant device to perform user authentication when it is offline,
The tamper resistant device includes offline authentication data including the number of offline authentications and online final authentication date, authentication information storage means for storing user information including presence / absence of membership fee delivery and expiration date, and the management server via the network. An authentication condition storage means for storing authentication conditions including a preset number of offline authentications possible and an authentication possible period from the online final authentication date and user information, and an instruction to perform re-user authentication by the user PC In the case where the number of offline authentications is within the number of offline authentications possible and the date of authentication is within the authentication period from the online final authentication date, or the membership information is delivered in the user information. And at least one of the certification conditions if it is within the expiration date When satisfied, anda privilege confirmation decision means for permitting use of the copyrighted software in the user PC,
When the management server receives an instruction to perform user authentication from the user PC, the membership fee has been paid in the user information, and if it is within the expiration date, the copyright protection is performed by the user PC. It is configured so as to have an authority confirmation judging means for permitting the use of software.

Further, claim 7 is an application of the present invention to settlement of purchased goods between a member store terminal and a financial institution side server, and a member connected via the network to the financial institution side server and the financial institution side server. In a system for executing a settlement processing service for settlement of purchased products between a merchant terminal and a financial institution server, including a store terminal and a tamper-resistant device used by being attached to the merchant terminal,
When the tamper resistant device is attached, the member store terminal determines whether it is online or offline with the financial institution side server, and if it is online, performs user authentication to the financial institution side server. State management means for issuing an instruction to perform user authentication to the tamper resistant device when it is offline,
The tamper resistant device includes an offline authentication data including the number of offline authentications and an online final authentication date, user information including a balance within the tamper resistant device, authentication information storage means, and the financial institution side server via a network. Authentication condition storage means for storing authentication conditions including the number of offline authentication possible times and the authentication possible period from the online final authentication date and user information set in advance, and an instruction to perform user authentication from the member store terminal If received, if the number of offline authentications in the offline authentication data is within the number of offline authentications possible and the date of authentication is within the authentication possible period from the online final authentication date, or in user information At least one approval when the balance in the tamper-resistant device is equal to or greater than the purchased product amount If you satisfy the conditions, has a privilege confirmation decision means to allow off-line settlement, the,
When the financial institution side server receives an instruction to perform user authentication from the member store terminal, if the balance in the tamper-resistant device is equal to or greater than the purchased product amount in the user information, the authority confirmation determination that permits online payment It is comprised so that it may have a means.

  Further, claim 8 is a method invention corresponding to claim 1, claim 9 is a method invention corresponding to claim 6, and claim 10 is a method invention corresponding to claim 7.

As described above, in the present invention, using a tamper resistant device having characteristics that are difficult to be analyzed by a third party such as an IC card, the tamper resistant device of each user has not only data but also a calculation function for authority confirmation determination, Since it is configured to be able to confirm the use authority (authentication determination) by the authority confirmation determination means in the tamper resistant device, it can prevent unauthorized use due to unauthorized analysis or alteration of information on the user terminal, There is an effect.
In addition, since it is not necessary to store data and programs for offline use in the member store terminal, it is not necessary to prepare a dedicated terminal in the member store terminal, and information is stored in the tamper resistant device of each user. Since it is stored, it is easy to take over to another member store terminal, and the terminal that can be used is not limited.
In addition, since the determination logic for offline use is updated every time the data and the program stored in the tamper resistant device are online, it can always match the latest content stored in the management server.

Example 1
One embodiment of the present invention will be described by taking a service using copyright-protected software as an example.
FIG. 1 is a block diagram showing an embodiment of a system configuration for realizing a service using copyright-protected software.
In FIG. 1, 1 is an IC card, 2 is a user PC (Personal Computer), and 3 is a management server (license management server). The IC card 1 is used by being mounted on a user PC 2, and the user PC 2 and the management-side server 3 can be connected via a network 4 such as the Internet (or a dedicated line).

The IC card 1 is a tamper-resistant device, and has a characteristic that its contents are not easily analyzed by a third party. Other tamper-resistant devices include USB tokens.
The IC card 1 includes an application program 11 (copyright-protected software), a license management unit (management software) 12 that manages whether to start and operate the application program, and use when offline. An authority confirmation determination unit (authority confirmation determination program) 13 that determines whether or not authority authentication is possible, offline authentication data 14 that includes at least the number of offline authentications and an online final authentication date, and user information 15 (whether or not membership fees are delivered, expiration date, etc. In addition, blacklist information or the like may be included), and authentication condition data 16 used for authentication determination by the authority confirmation determination unit 13 is stored. However, the user information 15 and authentication condition data 16 stored in the IC card 1 need only be information on the user who uses the IC card. Note that the application program 11 and the license management unit 12 may be provided in the user PC 2 as described later.

  The user PC 2 includes an application program (copyright protected software) 21 and a license management unit (program software) that manages whether to start and operate the application program 21 in an online state or an offline state. 22 and the network interface state of the user PC 2, the online or offline state is automatically detected, and when it is online, the management server 3 is instructed to perform user authentication, and is offline. In this case, the IC card 1 (tamper resistant device) is instructed to perform user authentication, and in the online state, a state management unit (state management unit) that synchronizes information between the IC card 1 and the management server 3. Program) 23 is provided. However, the above information synchronization may be configured to be started on the management server 3 in accordance with the information that the license management unit of the user PC 2 is online.

  In the above example, the application program and the license management unit are described in both the IC card 1 and the user PC 2, but these may be provided in only one of them. Generally, it is only necessary to provide the user PC 2. However, in order to improve the security of the user PC 2 (terminal), the application program 21 and the license management unit 22 operating on the user PC 2 are stored in the IC card 1 and used. Each time it is read, it may be read from the IC card 1 to the user PC 2 and activated. In this case, the application program 11 and the license management unit 12 may be provided in the IC card 1, and the application program 21 and the license management unit 22 in the user PC 2 are unnecessary.

  The management-side server 3 includes an application program 31, a license management unit 32 that manages whether to start and operate the application program 31, an authority confirmation determination unit 33, user information 34, and authority confirmation determination. An authentication condition data 35 used for authentication determination in the unit 33, a member database 36 storing user information about all users, other black lists, and the like are provided. Note that the license management units 12, 22, and 32 manage the application program to be activated and operated when the usage authority is authenticated by the authority confirmation determination unit.

The operation of this system will be described below based on the flowchart of FIG.
First, as a premise, a user (a person who uses an application program on the user PC 2) becomes a member in order to use the application program (copyright protected software), and purchases the right to use the application program. It shall be. The user information is stored in the user information 34 and the member database 36 of the management server 3, and is also stored in the IC card 1 as user information 15.

In FIG. 2, when starting an application program, first, in step S1, user authentication is performed in the user PC2. This is to determine whether or not the person who uses the user PC 2 is a legitimate user, and it is common to input a personal identification number, but fingerprint authentication or the like may be used.
Next, in step S2, the state management unit 23 of the user PC 2 determines whether the state is “online” or “offline”.

  In the case of “online” in step S2, the management side server 3 confirms the right to use normal software at the time of online in step S7 and subsequent steps. That is, in step S7, the management server 3 is inquired to confirm the usage authority, and in step S8, the management server 3 makes an authentication determination. This is because the user input in step S1 is checked against the contents recorded in the user information 34 or the member database 36, and whether or not the user matches the authentication condition data 35, that is, the user is registered as a member (membership paid). And whether the right to use the software is within the expiration date is determined. Note that the above determination logic may change depending not only on the expiration date check but also on the number of times of use, day of the week, time, etc.

If it is OK in step S8, the number of offline authentications so far is reset in step S9. In other words, since online authentication has been received, the number of offline authentications up to that point is zero. At the same time, the certification date (online final certification date) is also updated.
In step S10, contents for authenticating use (confirming use authority) are transmitted to the user PC2. Accordingly, the license management unit 22 of the user PC 2 manages the application program so that it is activated and operated.
In step S 11, the contents of the authority confirmation determination program, offline authentication data 14, user information 15, and authentication condition data 16 used in the authority confirmation determination unit 13 stored in the IC card 1 are stored in the user information 34 in the management-side server 3. The authority confirmation determination program used in the authority confirmation determination unit 33 is synchronized with the offline authentication data and authentication condition data 35 for the user. That is, the contents of the authority confirmation determination unit (authority confirmation determination program), offline authentication data 14, user information 15, and authentication condition data 16 stored in the IC card 1 are updated to the latest data of the management server 3. As described above, by updating to the latest data of the management server 3 every online, the latest information can always be used as the user information and offline authentication data in the IC card 1, and the authority confirmation determination unit (authority By updating the contents of the authentication condition data used in the confirmation determination program), it is possible to flexibly change and update the service processing function change (for example, changing the offline authentication condition later) by the management-side server 3. Become. Note that not only the authentication condition data but also the content of the authority confirmation determination logic itself (authority confirmation determination program) can be updated.

  However, although the program and data placed in the management server 3 can be updated in real time, the program and data placed in the IC card 1 cannot be updated until online, so there is a certain amount of use in the offline state. Establish conditions. For example, invalidation of user data, change of service processing function, and the like are not updated until online, and therefore, the number of offline times and the period from the last online authentication date are limited.

  In the case of NG in step S8, that is, if the user input in step S1 is not registered as a member or if the right to use the software is out of the expiration date, a non-authentication is transmitted to the user PC 2 in step S12. . In the example of FIG. 2, in the case of non-authentication, step S <b> 11 for updating to the latest data in step S <b> 11 is not passed, but when going online from step S <b> 12 to step S <b> 11. Can be configured to always update to the latest data.

On the other hand, if “offline” is determined in step S 2, in step S 3 and subsequent steps, the authority confirmation determination unit 13 of the IC card 1 determines whether the offline authentication data 14 and the user information 15 match the authentication condition data 16. Authentication verification is performed. This authentication determination includes information on whether or not the membership fee is included in the user information 15 and whether it is within the expiration date, and the number of offline authentications included in the offline authentication data 14 (offline authentication is continuously received without receiving online authentication). Number) and the last date of online authentication (the most recent date that has received online authentication) is used to determine whether or not the authentication condition is met. For example, the following authentication condition 1 or 2 is satisfied It is determined that the right to use is authenticated.
Certification condition 1: If the membership fee has been paid and it is within the expiration date, it is OK. If the expiration date is exceeded, the authentication condition 2 is followed.
Authentication condition 2: If the offline authentication is within 5 consecutive times since the last online authentication and within 30 days after the last online authentication, it is OK.

  Note that which of the authentication conditions 1 and 2 has priority can be set according to the user's state. For example, if the membership fee has been paid in advance and there is no risk of damage, it can be used freely without receiving online approval during the validity period (example of authentication condition 1), but the member withdraws midway If there is a refund, the authentication condition 2 may be prioritized, and offline authentication may be set, for example, within 5 consecutive times and within 30 days from the online final confirmation date.

  If it is OK in step S3, the use of the software in the user PC 2 is authenticated (use authority is confirmed) in step S4. In step S5, the offline authentication count is incremented by 1 (incremented). Upon receiving the authentication, the license management unit 12 (or 22) manages the application program so that it starts and operates.

  In the case of NG in step S3, that is, when a predetermined condition is not satisfied, it is recommended to send an online request to the user PC 2 and receive online authentication in step S6. Specifically, for example, a text recommending online connection is displayed on the display screen of the user PC 2.

The program for operating the IC card 1 (tamper resistant device) as described above includes the steps of storing offline authentication data and user information in the IC card 1, and the IC card 1 via the network by the management side server. Storing the authentication conditions set in advance and when the authority confirmation determining means of the IC card 1 receives an instruction to perform user authentication from the user side terminal, the offline authentication data and the user information are set in advance. If the condition is satisfied, a program for causing the computer to execute the step of permitting the provision of the service is stored in a computer-readable data recording medium.
(Example 2)
Embodiment 2 describes a case where the present invention is applied to a debit card system as described in Patent Document 1.
Also in this case, as in the first embodiment, the number of offline authentications and the current information in the IC card (the amount of remaining balance that can be used in the IC card) and the user information such as the IC card balance upper limit value are included in the IC card. Offline authentication data including the date of online final authentication, authentication condition data, and an authority confirmation determination unit (authority confirmation determination program) for determining whether or not to authenticate offline trading transactions are provided. What is necessary is just to comprise so that authority confirmation determination part (judgment approval / disapproval determination of settlement approval) may be performed by an authority confirmation determination part using information, offline authentication data, and authentication condition data. Specifically, when an instruction to perform user authentication is received from the member store terminal, the number of offline authentications within the number of offline authentications within the offline authentication data, and the date of authentication is the date of online final authentication If it is within the authentication possible period, or if at least one of the authentication conditions when the balance in the IC card is equal to or greater than the purchase merchandise amount is satisfied, offline settlement is permitted.

  Further, when the financial institution side server receives an instruction to perform user authentication from the member store terminal, if the balance in the IC card is equal to or larger than the purchased product amount in the user information, the online settlement is permitted.

  Further, as in the first embodiment, the member store terminal automatically detects the online or offline state from the state of the network interface of the member store terminal and manages whether to make online payment or offline payment. In the online state, a state management unit (state management program) for synchronizing information between the IC card and the financial institution server may be provided.

  In addition, although the flowchart of Example 2 is not described, in FIG. 2, the user PC is changed to the member store terminal, the management side server is changed to the financial institution side server, and the user information and authority confirmation determination unit are used. If the contents of the authentication condition data are changed to those suitable for payment as described above, they can be used in the same manner.

As described above, in the second embodiment, the embodiment in which the present invention is applied to a settlement processing service for settlement of purchased goods between a member store terminal and a financial institution server is described. When the tamper-resistant device is installed, it is determined whether the server is online or offline with the financial institution side server. If it is online, the financial institution server is instructed to perform user authentication, and when it is offline. If it is, it has state management means for instructing the tamper resistant device to perform user authentication,
The tamper resistant device includes an authentication information storage means for storing offline authentication data including the number of times of offline authentication and online final authentication date, user information including a balance within the tamper resistant device, and a financial institution side server in advance via a network When the authentication condition storage means for storing the authentication condition including the set number of offline authentication possible times, the authentication possible period from the online final authentication date and the user information, and an instruction to perform user authentication from the member store terminal are received. Of the offline authentication data, if the number of offline authentications is within the number of offline authentications possible and the date of authentication is within the authentication period from the online final authentication date, or the tamper resistant device balance is purchased in the user information If you satisfy at least one of the certification conditions for the product amount or more, Has a privilege confirmation decision means to allow the line settlement, the,
When the financial institution server receives an instruction from the member store terminal to perform user authentication, if the tamper resistant device balance in the user information is equal to or greater than the purchased product amount, an authority confirmation determination unit that permits online payment is provided. It is configured to have.

(Other forms of usage)
The present invention can be applied to the following system in addition to the authority confirmation service such as the license described in the first embodiment and the debit card settlement described in the second embodiment.
(A) Dictionary search service: When a dictionary database is provided in the IC card and the latest terms such as modern terms are added, information can be periodically updated from the management server to the IC card. .
(B) A system that counts the number of times of offline use in the IC card and uploads it to the server at regular intervals in the case of charging for the number of usages as well as information updating from the management server to the IC card It is also applicable to.
(C) In the case of a network that is not connected to the Internet, such as a bank billing system, online authority confirmation cannot be used. By using a portable device such as an IC card, it is possible to use it offline. Permission confirmation can be used.

  As described above, in the embodiment of the present invention, a tamper resistant device having a characteristic that is difficult to be analyzed by a third party such as an IC card is used, and not only data but also authority confirmation determination is performed on each user's tamper resistant device. It also has a built-in calculation function (authority confirmation judgment program), and it is configured so that use authorization confirmation (authentication judgment) can be performed using the authority confirmation judgment unit in the tamper-resistant device. It is possible to prevent unauthorized use due to unauthorized analysis or alteration of the file.

  In addition, since it is not necessary to store data and programs for offline use in the member store terminal, it is not necessary to prepare a dedicated terminal in the member store terminal, and information is stored in the tamper resistant device of each user. Since it is stored, it is easy to take over to another member store terminal, and the terminal that can be used is not limited.

  Also, a program (for example, copyright-protected software and its management program) that runs on the user side terminal is stored in the tamper resistant device, and is read from the tamper resistant device to the user side terminal and used during processing. As a result, security can be improved.

  Also, in the online state, as in the past, the management server that is connected via the network and can be accessed is checked for authority, and information managed on the management server is prepared for offline use. The information stored in the tamper resistant device can be synchronized (updated). For this reason, the determination logic for offline use is also updated every time it is online, so that it can always match the latest contents stored in the management server.

  Further, by separating the authority confirmation function as a function and synchronizing with the management server, the determination logic of the management server can be used even in an offline state. For example, the determination logic not only determines whether it is within the expiration date, but also allows flexible operation such as making it available on Saturday and Sunday, or being available from 21:00 pm to 8:00 am early in the morning at night, It can also be used offline.

In addition, since the authority check determination can be performed when the tamper resistant device is offline, it is possible to improve service continuity when a failure occurs on the management server.
In addition, by actively using offline usage, there is also an effect of distributing the load concentration on the management server.

  In addition, the offline authentication program and data are stored in the tamper-resistant device and can be carried, so it is not connected to the Internet, which handles bank accounts and corporate personnel information. Even in an independent network, many effects can be expected, such as being able to be used by using offline usage rules (offline authentication count and online final authentication date) as described in Condition 2 above.

FIG. 4 is a block diagram showing an embodiment of the present invention, which is applied to a service using copyright-protected software. The flowchart which shows the arithmetic processing process in the Example of FIG.

Explanation of symbols

1 ... IC card 2 ... User PC
DESCRIPTION OF SYMBOLS 3 ... Management side server 4 ... Network 11 ... Application program 12 ... License management part 13 ... Authority confirmation determination part 14 ... Offline authentication data 15 ... User information 16 ... Authentication condition data 21 ... Application program 22 ... License management part 23 ... State management unit 31 ... application program 32 ... license management unit 33 ... authority confirmation determination unit 34 ... user information 35 ... authentication condition data 36 ... member database

Claims (10)

In a service execution system including a management-side server, a user-side terminal connected to the management-side server via a network, and a tamper-resistant device used by being mounted on the user terminal,
The user terminal is
When the tamper resistant device is mounted, it is determined whether it is online or offline with the management server, and if it is online, the management server is instructed to perform user authentication, and when it is offline The tamper resistant device has state management means for instructing to perform user authentication,
The tamper resistant device is
Authentication information storage means for storing offline authentication data and user information;
Authentication condition storage means for storing authentication conditions preset by the management server via a network;
When receiving an instruction from the user terminal to perform user authentication, if the offline authentication data and the user information satisfy the preset authentication condition, authority confirmation determination means for permitting provision of a service And having
The management server is
When receiving an instruction to perform user authentication from the user-side terminal, the user-side terminal has authority confirmation determining means for permitting the provision of a service when the user information satisfies an authentication condition preset in the management-side server. ,
A service execution system using a tamper resistant device. The tamper resistant device is
Authentication information storage means for storing offline authentication data and user information including at least the number of times of offline authentication and online last authentication date;
Authentication condition storage means for storing authentication conditions including user authentication information and the number of times of offline authentication that can be set in advance by the management-side server, the number of times that offline authentication can be performed, and the authentication period that can be authenticated from the last date of online authentication;
When receiving an instruction to perform re-user authentication from the user-side terminal, the number of offline authentications within the offline authentication data is within the number of offline authentications possible and the date on which the authentication is received is from the online final authentication date. Authority confirmation determination means for permitting provision of a service when the user information that is within the authenticable period and the user information subjected to user authentication matches the user information included in the authentication condition,
The service execution system using the tamper resistant device according to claim 1. The management server is
If the user authentication is successful, the offline authentication data stored in the tamper resistant device is set to 0 as the number of offline authentications, the last date of online authentication is the date when the authentication was performed, and the user information and The service execution system using a tamper resistant device according to claim 2, wherein at least one of the authentication conditions is updated to user information and authentication conditions stored in the management server. A tamper-resistant device in a service execution system including a management-side server, a user-side terminal connected to the management-side server via a network, and a tamper-resistant device used by being mounted on the user terminal,
Authentication information storage means for storing offline authentication data and user information;
Authentication condition storage means for storing authentication conditions preset by the management server via a network;
When receiving an instruction from the user terminal to perform user authentication, if the offline authentication data and the user information satisfy the preset authentication condition, authority confirmation determination means for permitting provision of a service And having
A tamper resistant device characterized by that. About the tamper resistant device according to claim 4,
Storing the offline authentication data and the user information in the authentication information storage means of the tamper resistant device;
Storing authentication conditions preset via the network by the management server in the authentication condition storage means of the tamper resistant device;
When the authority confirmation determination unit of the tamper resistant device receives an instruction to perform user authentication from the user side terminal, the offline authentication data and the user information satisfy the preset authentication condition. Permitting the provision of services; and
A computer-readable data recording medium recorded as a program for causing a computer to execute. A service that enables copyright-protected software to be used on a user PC, including a management server, a user PC connected to the management server via a network, and a tamper-resistant device that is attached to the user PC and used. In a system that executes
The user PC is
When the tamper resistant device is mounted, it is determined whether it is online or offline with the management server, and if it is online, the management server is instructed to perform user authentication, and when it is offline The tamper resistant device has state management means for instructing to perform user authentication,
The tamper resistant device is
An authentication information storage means for storing offline authentication data including the number of offline authentications and online final authentication date, user information including the presence / absence of membership fee delivery and an expiration date;
Authentication condition storage means for storing authentication conditions including user authentication information and the number of times of offline authentication that can be set in advance by the management-side server, the number of times that offline authentication can be performed, and the authentication period that can be authenticated from the last date of online authentication;
When receiving an instruction to perform re-user authentication from the user PC, the number of offline authentications in the offline authentication data is within the number of possible offline authentications, and the date of authentication is If it is within the authenticable period, or if the membership information has been paid in the user information and at least one of the authentication conditions is satisfied, the copyright-protected software of the user PC is An authority confirmation judging means for permitting use,
The management server is
When receiving an instruction to perform user authentication from the user PC, the membership fee has been paid in the user information, and if it is within the expiration date, use of the copyright-protected software is permitted on the user PC. Having authority confirmation judgment means to
A service execution system using a tamper resistant device. Purchased products between a member store terminal and a financial institution side server, including a financial institution side server, a member store terminal connected to the financial institution side server via a network, and a tamper-resistant device used by being attached to the member store terminal In the system that executes the payment processing service that performs the payment of
The member store terminal is
When the tamper resistant device is mounted, it is determined whether the financial institution server is online or offline, and if it is online, the financial institution server is instructed to perform user authentication, If it is offline, it has state management means for instructing the tamper resistant device to perform user authentication,
The tamper resistant device is
Authentication information storage means for storing offline authentication data including the number of offline authentications and online final authentication date, and user information including a balance in the tamper resistant device;
Authentication condition storage means for storing authentication conditions including user authentication information and the number of times of offline authentication that can be set in advance by the financial institution side server in advance and the authentication possible period from the date of online final authentication;
When receiving an instruction from the member store terminal to perform user authentication, among the offline authentication data, the number of offline authentications is within the number of offline authentications possible, and the date of authentication is from the date of the online final authentication. If it is within the authenticable period or if the user information satisfies at least one of the authentication conditions when the balance in the tamper-resistant device is equal to or greater than the purchased product amount, an authority confirmation determination unit that permits offline settlement, Have
The financial institution server is
When receiving an instruction to perform user authentication from the member store terminal, if the balance in the tamper-resistant device is equal to or greater than the purchase merchandise amount in the user information, it has authority confirmation determination means that permits online payment.
A service execution system using a tamper resistant device. In a service execution method in a system comprising a management side server, a user side terminal connected to the management side server via a network, and a tamper resistant device used by being mounted on the user terminal,
When the tamper resistant device is mounted, the user side terminal determines whether the management side server is online or offline, and if it is online, performs user authentication to the management side server If instructed and offline, the tamper resistant device is instructed to perform user authentication,
The tamper resistant device stores offline authentication data, user information, and authentication conditions preset by the management server via a network, and receives an instruction to perform user authentication from the user terminal. , If the offline authentication data and the user information satisfy the preset authentication conditions, permit service provision;
When the management server receives an instruction to perform user authentication from the user side terminal, if the user information satisfies an authentication condition preset in the management server, the management server permits service provision. To
A service execution method characterized by the above. Use copyright-protected software in a system comprising a management server, a user PC connected to the management server via a network, and a tamper-resistant device used by being mounted on the user PC. In the service execution method that enables,
When the tamper resistant device is mounted, the user PC determines whether the management server is online or offline, and if it is online, instructs the management server to perform user authentication. If it is offline, issue instructions to the tamper resistant device to perform user authentication,
The tamper-resistant device includes offline authentication data including offline authentication count and online final authentication date, user information including whether or not a membership fee has been delivered, and an expiration date, and the number of offline authentication possible times set in advance by the management server via the network. And the authentication conditions including the authentication period and user information from the last online authentication date,
When receiving an instruction to perform re-user authentication from the user PC, the number of offline authentications in the offline authentication data is within the number of possible offline authentications, and the date of authentication is If it is within the authenticable period, or if the membership information has been paid in the user information and at least one of the authentication conditions is satisfied, the copyright-protected software of the user PC is Allow use,
When the management server receives an instruction to perform user authentication from the user PC, the membership fee has been paid in the user information, and if it is within the expiration date, the copyright protection is performed by the user PC. Allow the use of software,
A service execution method characterized by the above. Service execution method for settlement of purchased products in a system comprising a financial institution side server, a member store terminal connected to the financial institution side server via a network, and a tamper-resistant device used by being attached to the member store terminal In
When the tamper resistant device is attached, the member store terminal determines whether it is online or offline with the financial institution side server, and if it is online, performs user authentication to the financial institution side server. If it is offline, the tamper resistant device is instructed to perform user authentication,
The tamper resistant device includes offline authentication data including offline authentication count and online final authentication date, user information including balance within the tamper resistant device, and the number of offline authentication possible times set in advance by the financial institution side server via the network. And the authentication conditions including the authentication period and user information from the last online authentication date,
When receiving an instruction from the member store terminal to perform user authentication, among the offline authentication data, the number of offline authentications is within the number of offline authentications possible, and the date of authentication is from the date of the online final authentication. If it is within the authenticable period, or if the user information satisfies at least one of the authentication conditions when the balance in the tamper-resistant device is equal to or greater than the purchased product amount, offline payment is permitted,
When the financial institution server receives an instruction to perform user authentication from the member store terminal, if the balance in the tamper-resistant device is equal to or greater than the purchased product amount in the user information, online settlement is permitted.
A service execution method characterized by the above.

Images