JP2010108054A - Authentication system, authentication method, authentication program, authentication apparatus, and request device - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To safely transmit an authentication result (without being altered) from an authentication apparatus 200 to a host device 100. <P>SOLUTION: Prescribed information (a counter value and secret information, etc.) is previously shared between the host device 100 and the authentication apparatus 200. When the authentication result is transmitted to the host device 100, the authentication apparatus 200 transmits a hash value of the information, where result information (an authentication success or an authentication failure) is combined with the sharing information, to the host device 100. When the hash value is received, the host device 100 calculates the hash value of information, where determination information (e.g., the authentication success) is combined with the sharing information, and compares the hash value with the received hash value, thereby determining whether or not the authentication is successfully performed. <P>COPYRIGHT: (C)2010,JPO&INPIT

Description

  The present invention relates to an authentication technique that prevents falsification of an authentication result, for example.

A device or microcontroller (authentication request device, hereinafter referred to as request device) that does not implement an algorithm such as authentication processing or encryption processing, and a device or microcontroller (authentication device) that implements an algorithm such as authentication processing or encryption processing There is an authentication system comprising In this authentication system, when the authentication result obtained by the processing of the authentication device is transmitted to the requesting device, communication data (authentication result) may be falsified between the requesting device and the authentication device. For example, there is a possibility of being tampered with authentication success despite authentication failure. In other words, even if a device that performs authentication implements an algorithm such as authentication processing or cryptographic processing, if a device that receives an authentication result is a device that does not implement an algorithm such as authentication processing or cryptographic processing, In this case, the communication data may be falsified and an authentication result different from the valid authentication result may be transmitted.
JP 2006-283507 A JP 2006-283383 A

In the above authentication system, it is necessary to take measures such as physical measures (to prevent physical access to the communication path) and encrypted communication in order to send and receive legitimate (not tampered) authentication results. There are problems such as high cost, slow processing speed, and increased communication volume.
An object of the present invention is, for example, to provide an authentication device that can transmit and receive a valid authentication result at high speed at a low cost and without greatly affecting the processing speed and communication speed.

The authentication system according to the present invention is, for example, an authentication system including a request device and an authentication device,
The authentication device
An authentication device communication unit that receives the authentication information via the communication device;
Based on the authentication information received by the authentication device communication unit, an authentication unit that determines the authentication success or the authentication failure by the processing device;
An authentication device storage unit for storing, in a storage device, shared information shared in advance with the requesting device;
The result information selected according to the authentication success or the authentication failure determined by the authentication unit from the success information indicating the authentication success and the failure information indicating the authentication failure, and the shared information stored in the authentication device storage unit by a predetermined method A response information generating unit that generates response information by the processing device;
The authentication device communication unit transmits the response information generated by the response information generation unit to the requesting device,
The requesting device is:
A request device communication unit that receives response information transmitted by the authentication device communication unit via a communication device;
A requesting device storage unit that stores, in a storage device, shared information shared in advance with the authentication device;
A verification information generating unit that generates verification information by a processing device using the predetermined method from determination information that is one of the success information and the failure information, and shared information stored in the requesting device storage unit; ,
A response determination unit that compares the response information received by the requesting device communication unit with the verification information generated by the verification information generation unit, and includes a result determination unit that determines whether the authentication has succeeded or failed by the processing device. .

  In the authentication system according to the present invention, the authentication result is not transmitted from the authentication device to the requesting device as it is, but the response information generated based on the shared information is transmitted from the authentication device to the requesting device. Tell whether or not authentication was successful. Therefore, it is possible to prevent communication data from being falsified between the authentication device and the requesting device, and successful authentication despite authentication failure.

First, an example of an authentication system described in the following embodiment will be described.
FIG. 1 is a diagram illustrating an entrance / exit management system which is an example of an authentication system.
In the entrance / exit management system shown in FIG. 1, a card held by a person entering or leaving the room is held over a card reader, and the card information is sent to a controller (an example of an authentication device) for authentication. As a result, when the authentication is successful, an unlock command is issued to the lock (an example of the requesting device) attached to the door, and the door opens.
In this entry / exit management system, even if the controller determines that the authentication has failed, an unlocking command can be transmitted to the lock by falsifying the signal sent to the lock. For this reason, even unauthorized persons can open the door.

FIG. 2 is a diagram illustrating an apparatus in which a microcontroller, which is an example of an authentication system, is built.
The apparatus shown in FIG. 2 has the same problem as the entrance / exit management system shown in FIG. In the apparatus shown in FIG. 2, the microcontroller A (an example of a requesting apparatus) transmits an authentication command to the microcontroller B (an example of an authentication apparatus) in order to obtain authentication for performing communication and control outside the apparatus. The microcontroller B performs authentication based on the authentication information, and transmits the result (authentication result) to the microcontroller A.
In this case, even if the microcontroller B determines that the authentication has failed, it is possible to transmit permission to the outside of the device and control to the microcontroller A by falsifying the signal sent to the microcontroller A. Therefore, unauthorized communication and control are possible.

  That is, the above-described entry / exit management system, a device incorporating a microcontroller, and the like are examples of the authentication system described in the following embodiments. In the authentication system described in the following embodiment, it is possible to prevent the above-described authentication result from being tampered with and transmit a valid authentication result.

Embodiment 1 FIG.
In this embodiment, an authentication system having a counter value as shared information will be described.

FIG. 3 is a functional block diagram showing functions of the authentication system according to this embodiment.
The authentication system according to this embodiment includes a host device 100, an authentication device 200, and an external connection device 300.
The external connection device 300 is an authentication target device connected to the host device 100. The host device 100 is a device that communicates with a legitimate external connection device and provides a service to the user and the external connection device. The authentication device 200 is a device that is connected to the host device 100, authenticates the external connection device using the received authentication information, and responds to the result to the host device.

The host device 100 (an example of a request device) includes a control unit 110, a counter unit 120 (an example of a request device change unit), a memory 130 (an example of a request device storage unit), a request device communication unit 140, and a hash calculation unit 150 (verification). An example of an information generation unit) and a result determination unit 160 are provided.
The control unit 110 controls the entire apparatus. That is, the control unit 110 controls other functions.
The counter unit 120 increments the counter value stored in the internal memory 130 by one. Here, the counter unit 120 increments the counter value by 1, but the value to be incremented is not limited to 1 and may be any value. That is, the counter unit 120 adds a predetermined value (may be a negative value) to the counter value.
The memory 130 stores a counter value (an example of shared information). Note that the memory 130 may be an external memory of the counter unit 120.
The request device communication unit 140 communicates with the authentication device 200 and the external connection device 300 via the communication device. The request device communication unit 140 may include a first communication unit that communicates with the authentication device 200 and a second communication unit that communicates with the external device 300.
The hash calculation unit 150 performs specific data conversion on the input data by the processing device. Here, it is assumed that the hash calculation unit 150 calculates a hash value for input data using a predetermined hash function. The hash calculator 150 may calculate a CRC, a message authenticator, a checksum, and the like.
The result determination unit 160 compares the two pieces of input information, and determines by the processing device whether it has been determined that authentication has succeeded or authentication has failed.

The authentication device 200 includes a control unit 210, a counter unit 220 (an example of an authentication device change unit), a memory 230 (an example of an authentication device storage unit), an authentication device communication unit 240, and a hash calculation unit 250 (an example of a response information generation unit). The authentication unit 260 is provided.
The control unit 210 controls the entire apparatus. That is, the control unit 210 controls other functions.
The counter unit 220 increments the counter value stored in the internal memory 230 by one. Here, the counter unit 220 increases the counter value by 1, but the value to be increased is not limited to 1 and may be any value. That is, the counter unit 220 adds a predetermined value to the counter value. However, the counter unit 220 adds the same value as the counter unit 120 to the counter value.
The memory 230 stores a counter value. Note that the memory 230 may be an external memory of the counter unit 220.
The authentication device communication unit 240 communicates with the host device 100 via the communication device.
The hash calculation unit 250 performs specific data conversion (the same data conversion as the hash calculation unit 150) on the input data by the processing device. Here, it is assumed that the hash calculation unit 250 calculates a hash value with respect to input data using the same hash function as the hash calculation unit 150. The hash calculator 250 may calculate a CRC, a message authenticator, a checksum, and the like.
The authentication unit 260 uses the authentication information received from the host device 100 to determine the authentication success or failure by the processing device.

FIG. 4 is a flowchart showing the operation of the authentication system according to this embodiment.
The external device 300 transmits the authentication information to the host device 100 via the communication device (S100: authentication information transmission step).
The request device communication unit 140 of the host device 100 receives the authentication information transmitted by the external device 300 via the communication device (S101: authentication information reception step). The request apparatus communication unit 140 transmits an authentication command including the received authentication information to the authentication apparatus 200 via the communication apparatus (S102: request step). At this time, instead of all the authentication information received from the external device 300, a part of the authentication information may be transmitted to the authentication device 200. That is, only information necessary for authentication by the authentication device 200 may be transmitted.
The authentication device communication unit 240 of the authentication device 200 receives the authentication command transmitted by the host device 100 via the communication device (S103: request reception step). Next, the authentication unit 260 performs authentication processing by the processing device based on the authentication information included in the received authentication command, and determines whether authentication is successful or unsuccessful (S104: authentication step). After authentication, the counter unit 220 increments the counter value stored in the memory 230 by 1 (S105: change step). Next, the hash calculator 250 generates a hash value (H) of information obtained by combining the authentication result information and the counter value as response information by the processing device (S106: response information generation step). Here, the result information is information selected according to authentication success or authentication failure determined by the authentication unit 260 from success information indicating authentication success and failure information indicating authentication failure. Then, the authentication device communication unit 240 transmits (responses) response information (hash value (H)) to the host device 100 via the communication device (S107: response information transmission step).
The request device communication unit 140 of the host device 100 receives the response information (hash value (H)) transmitted from the authentication device 200 via the communication device (S108: response information reception step). Next, the counter unit 120 increments the counter value stored in the memory 130 by 1 (S109: change step). Next, the hash calculator 150 generates a hash value (H ′) of the authentication success (an example of determination information) and the counter value as verification information by the processing device (S110: verification information generation step). Then, the result determination unit 160 compares the received response information (hash value (H)) with the generated verification information (hash value (H ′)) by the processing device (S111: result determination step). When the response information and the verification information match as a result of the comparison, the result determination unit 160 starts subsequent processing, for example, communication with the external device 300 as a successful authentication (S112: success processing step). On the other hand, if the response information and the verification information do not match as a result of the comparison, the result determination unit 160 processes as an authentication failure, and responds, for example, to the external device 300 with an authentication failure (S113: failure processing step).

  Note that the counter value of the host device 100 and the counter value of the authentication device 200 are synchronized in principle. That is, the counter value used for generating the hash value (H) received by the host device 100 and the counter value used for generating the hash value (H ′) calculated by the host device 100 are the same value. This is because when the counter unit 220 of the authentication device 200 increases the counter value by 1, the counter unit 120 of the host device 100 also increases the counter value by 1.

As described above, in order to transmit the authentication result to the host device 100, the authentication device 200 uses the hash value of the information that combines the result information indicating the authentication result and the counter value that changes every time the data is transmitted. Transmit to device 100. Then, the host device 100 compares the internally calculated hash value with the received hash value to determine whether or not the authentication is successful. Therefore, it is possible to prevent tampering of the authentication result between the host device 100 and the authentication device 200 and reuse of the authentication result that was previously responded without using an encryption algorithm with high implementation cost. That is, the authentication result can be correctly transmitted from the authentication device 200 to the host device 100 at low cost without taking physical measures.
Further, since the host apparatus 100 calculates and compares only the received hash value (H) and the hash value (H ′) related to the authentication success, it can process at high speed.
Furthermore, since the data transmitted from the authentication device 200 to the host device 100 is a hash value, the amount of communication data does not increase.

  Even when the counter is incremented by one, the counter value of the host device 100 and the counter value of the authentication device 200 need only be synchronized when calculating the hash value. For example, the authentication device 200 may increase the hash value (H) by 1 after transmitting the hash value (H) to the host device 100 (after S107), and the host device 100 may increase the hash value by 1 after the hash value comparison (after S111).

  Further, when the hash value is calculated by the host device 100 and the authentication device 200, information that combines the result information and the counter value is generated. What is the method for combining the result information and the counter value? Also good.

Embodiment 2. FIG.
In the first embodiment, the host device 100 and the authentication device 200 share a synchronized counter value, and the hash value of the result information and the counter value is returned from the authentication device 200 to the host device 100. In this embodiment, an authentication system in which the host device 100 and the authentication device 200 share a plurality of secret information will be described.

FIG. 5 is a functional block diagram showing functions of the authentication system according to this embodiment.
Only the parts of the authentication system according to this embodiment that are different from the functions of the authentication system according to the first embodiment will be described.

The memory 130 of the host device 100 and the memory 230 of the authentication device 200 store a plurality of secret information with identification information attached as shared information. Since the host device 100 and the authentication device 200 do not include the counter unit 120, the memory 130 and the memory 230 are external memories of the counter unit 120.
The host device 100 includes a secret information determination unit 170 in addition to the functions of the host device 100 according to the first embodiment. The secret information determination unit 170 determines which secret information to use from among the plurality of secret information stored in the memory 130 by the processing device.

FIG. 6 is a diagram illustrating an example of secret information and identification information stored in the memory 130 and the memory 230.
As shown in FIG. 6, there are a plurality of pairs of identification information for uniquely identifying secret information and secret information corresponding to the identification information. For a plurality of secret information, it is desirable to use values that are not correlated with each other, for example, a plurality of generated random numbers.

FIG. 7 is a flowchart showing the operation of the authentication system according to this embodiment. FIG. 7 shows processing after the host device 100 receives the authentication information from the external device 300.
After receiving the authentication information from the external device 300, the secret information determination unit 170 of the host device 100 determines the secret information used for communication with the authentication device 200 (S201: secret information determination step). The determination method may be a method of determining secret information 1 and secret information 2 in order, or a method of determining based on the current time and date as long as the host device 100 can acquire the information. Then, the request device communication unit 140 transmits an authentication command including authentication information and identification information (an example of specific information) of secret information to be used to the authentication device 200 via the communication device (S202: request step). At this time, instead of all the authentication information received from the external device 300, a part of the authentication information may be transmitted to the authentication device 200. That is, only information necessary for authentication by the authentication device 200 may be transmitted.
The authentication device communication unit 240 of the authentication device 200 receives the authentication command transmitted by the host device 100 via the communication device (S203: request reception step). Next, the authentication unit 260 performs authentication by the processing device based on the authentication information included in the received authentication command, and determines success or failure of authentication (S204: authentication step). After the authentication, the hash calculator 250 reads the corresponding secret information from the received identification information of the secret information from the memory 230 (S205: secret information acquisition step). The hash calculator 250 generates a hash value (H) of information obtained by combining the result information and the read secret information as response information by the processing device (S206: response information generation step). Then, the authentication device communication unit 240 transmits (responses) response information (hash value (H)) to the host device 100 via the communication device (S207: response information transmission step).
The request device communication unit 140 of the host device 100 receives the response information (hash value (H)) transmitted by the authentication device 200 via the communication device (S208: response information reception step). Next, the hash calculator 150 reads out the secret information determined by the secret information determination unit 170 from the memory (S209: secret information acquisition step). That is, the hash calculator 150 reads the secret information specified from the identification information of the secret information included in the authentication command transmitted from the requesting device communication unit 140 to the authentication device 200. Then, the hash calculation unit 150 generates, as verification information, a hash value (H ′) of information obtained by combining authentication success (an example of determination information) and the read secret information (S210: verification information generation step). . The result determination unit 160 compares the received response information (hash value (H)) with the generated verification information (hash value (H ′)) (S211: result determination step). When the response information and the verification information match as a result of the comparison, the result determination unit 160 starts subsequent processing, for example, communication with the external device 300 as a successful authentication (S212: success processing step). On the other hand, if the response information and the verification information do not match as a result of the comparison, the result determination unit 160 processes the authentication as a failure and responds, for example, to the external device 300 with a failure of authentication (S213: failure processing step).

  As described above, in order to transmit the authentication result to the host apparatus 100, the authentication apparatus 200 transmits to the host apparatus 100 a hash value of information obtained by combining the authentication result and secret information that is different for each transmission. Then, the host device 100 determines whether or not the authentication has been successful by comparing the internally calculated hash value with the received hash value. Therefore, while obtaining the same effect as the authentication system according to the first embodiment, the analysis of communication data is more difficult than the authentication system according to the first embodiment using a predictable counter value, and the reliability in terms of security. Will improve.

Note that the timing at which the host device 100 reads the secret information (S209) may not be after receiving the response from the authentication device 200. For example, it may be after determining the secret information to be used (after S201) or after transmitting an authentication command to the authentication apparatus 200 (after S202).
Further, the timing at which the host device 100 transmits the identification information of the secret information to the authentication device 200 may not be simultaneous with the authentication command. For example, it may be transmitted before receiving the authentication information from the external connection device 300, or after receiving the authentication information from the external connection device 300, the identification information may be transmitted to the authentication device 200 separately from the authentication command. Good.

Embodiment 3 FIG.
In the second embodiment, the authentication apparatus 200 and the host apparatus 100 share a plurality of secret information, and the identification information of the secret information used by the host apparatus 100 is transmitted to the authentication apparatus 200. Next, an authentication system that determines secret information to be used based on a random number generated by the host device 100 and transmits the random number to the authentication device 200 will be described.

FIG. 8 is a functional block diagram showing functions of the authentication system according to this embodiment.
As for the function of the authentication system according to this embodiment, only the parts different from the function of the authentication system according to the second embodiment will be described.

In addition to the functions of the host device 100 according to the second embodiment, the host device 100 includes a random number generation unit 180 and a secret information identification unit 190 (an example of a request device calculation unit). The random number generation unit 180 generates a random number by the processing device. The secret information specifying unit 190 calculates the identification information of the secret information from the random number by the processing device.
In addition to the function of authentication device 200 according to Embodiment 2, authentication device 200 includes secret information specifying unit 270 (an example of an authentication device calculation unit). The secret information specifying unit 270 calculates the identification information of the secret information from the random number by the processing device.
If the secret information specifying unit 190 of the host device 100 and the secret information specifying unit 270 of the authentication device 200 have the same input data, they calculate identification information of the same secret information.
The host device 100 does not include the secret information determination unit 170.

FIG. 9 is a flowchart showing the operation of the authentication system according to this embodiment. FIG. 9 shows processing after the host device 100 receives the authentication information from the external device 300.
After receiving the authentication information from the external device 300, the random number generation unit 180 of the host device 100 generates a random number by the processing device (S301: random number generation step). And the request apparatus communication part 140 transmits the authentication command containing authentication information and a random number to the authentication apparatus 200 via a communication apparatus (S302: request step). At this time, instead of all the authentication information received from the external device 300, a part of the authentication information may be transmitted to the authentication device 200. That is, only information necessary for authentication by the authentication device 200 may be transmitted.
The authentication device communication unit 240 of the authentication device 200 receives the authentication command transmitted from the host device 100 via the communication device (S303: request reception step). Next, the authentication unit 260 performs authentication by the processing device based on the authentication information included in the received authentication command, and determines success or failure of authentication (S304: authentication step). After the authentication, the secret information specifying unit 270 specifies the secret information by calculating the identification information of the secret information from the random number included in the received authentication command by the processing device, and reads the specified secret information from the memory 230 (S305: Secret Information acquisition step). Here, as a method for calculating the identification information of the secret information, for example, when there are N pieces of secret information, the value of the modulo N of the generated random number (the remainder obtained by dividing the random number by N) is used as the identification information. Next, the hash calculation unit 250 generates, as response information, a hash value (H) of information obtained by combining the result information and the secret information read by the secret information specifying unit 270 (S306: response information generation step). . Then, the authentication device communication unit 240 transmits (responses) response information (hash value (H)) to the host device 100 via the communication device (S307: response information transmission step).
The request device communication unit 140 of the host device 100 receives the response information (hash value (H)) transmitted by the authentication device 200 via the communication device (S308: response information reception step). Next, the secret information specifying unit 190 specifies the secret information by calculating the identification information of the secret information from the random number generated by the random number generating unit 180, and reads the specified secret information from the memory 130 (S309: Secret Information acquisition step). Here, the secret information specifying unit 190 of the host device 100 and the secret information specifying unit 270 of the authentication device 200 have the same mechanism so that the identification information of the same secret information is calculated if the input data is the same. Yes. Here, since the input to the secret information specifying unit 190 of the host device 100 and the secret information specifying unit 270 of the authentication device 200 are the same value (the same random number), the same secret information is read out. Then, the hash calculator 150 generates a hash value (H ′) of information obtained by combining authentication success (an example of determination information) and the secret information read by the secret information identification unit 190 as verification information by the processing device (S310). : Verification information generation step). The result determination unit 160 compares the received response information (hash value (H)) with the generated verification information (hash value (H ′)) by the processing device (S311: result determination step). When the response information and the verification information match as a result of the comparison, the result determination unit 160 starts subsequent processing, for example, communication with the external device 300 as a successful authentication (S312: success processing step). On the other hand, when the response information and the verification information do not match as a result of the comparison, the result determination unit 160 processes the authentication as a failure, for example, returns a failure of authentication to the external device 300 (S313: failure processing step).

  As described above, a random number is transmitted from the host device 100 to the authentication device 200 as information for specifying the secret information to be used instead of the identification information of the secret information. In the authentication system according to the second embodiment, when the same secret information is used, the same authentication command is transmitted from the host device 100 to the authentication device 200. However, in the authentication system according to the second embodiment, the same secret is used. Even when information is used, a different authentication command is transmitted from the host device 100 to the authentication device 200. This complicates the correspondence between authentication commands and response information. Therefore, while obtaining the same effect as that of the authentication system according to the second embodiment, analysis of communication data becomes more difficult than the authentication system according to the second embodiment, and the reliability in terms of security is further improved.

Note that the timing at which the host device 100 reads the secret information (S309) may not be after the response information is received from the authentication device 200. For example, it may be after generating a random number (after S301) or after transmitting an authentication command to the authentication apparatus 200 (after S310).
Further, the timing at which the host device 100 transmits a random number to the authentication device 200 may not be the same as the authentication command. For example, the generated random number may be transmitted before receiving the authentication information from the external connection device 300. After receiving the authentication information from the external connection device 300, the random number is sent to the authentication device 200 in distinction from the authentication command. You may send it.

Embodiment 4 FIG.
In the second and third embodiments, the response information from the authentication device 200 to the host device 100 is a hash value of information obtained by combining the result information and the secret information. Therefore, in the second and third embodiments, the number of response information patterns upon successful authentication is the number of secret information. In this embodiment, the response information from the authentication device 200 to the host device 100 is the hash value of the information obtained by combining the result information and the secret information and the random number, and the number of authentication response patterns. A description will be given of an authentication system that makes the number of secret information more than the number of secret information.

  The functional configuration of the authentication system according to this embodiment is the same as the functional configuration of the authentication system according to the third embodiment.

FIG. 10 is a flowchart showing the operation of the authentication system according to this embodiment. FIG. 10 shows processing after the host device 100 receives the authentication information from the external device 300. Here, the operation of the authentication system according to this embodiment will be described only with respect to differences from the operation of the authentication system according to the third embodiment.
(S401) to (S405) are the same as (S301) to (S305) of the third embodiment.
Next to (S405), the hash calculation unit 250 of the authentication device 200 has a hash value of information obtained by combining the result information, the secret information read by the secret information specifying unit 270, and the random number received by the authentication device communication unit 240. (H) is generated as response information by the processing device (S406: response information generation step).
(S407) to (S409) are the same as (S307) to (S309) of the third embodiment.
Next to (S409), the hash calculator 150 of the host device 100 combines the authentication success (an example of determination information), the secret information read by the secret information identification unit 190, and the random number generated by the random number generator 180. The hash value (H ′) of the received information is generated as verification information by the processing device (S410: verification information generation step).
(S411) to (S413) are the same as (S311) to (S313) of the third embodiment.

  As described above, the response information transmitted from the authentication device 200 to the host device 100 is a hash value of information obtained by combining the result information, the secret information, and the random number. Therefore, even when the same secret information is used, the response information is different. Therefore, while obtaining the same effect as the authentication system according to the third embodiment, analysis of communication data becomes more difficult than the authentication system according to the third embodiment, and the reliability in terms of security is further improved.

  In (S 406), when the authentication device 200 calculates a hash value, a hash value of information obtained by combining the result information, the secret information, and the random number received from the host device 100 is generated. However, the authentication device 200 may have a random number generation unit, and the random number generated by the authentication device 200 may be the target of the hash value. Then, the authentication device 200 transmits the generated random number and the hash value (H) to the host device 100, and the host device 100 uses the random number received from the authentication device 200 when calculating the hash value. H ′) may be calculated.

Embodiment 5 FIG.
In the fourth embodiment, a hash value of information obtained by combining result information, secret information, and random numbers is used as response information. In this embodiment, an authentication system is described in which response information is a hash value of information obtained by combining result information, secret information, and a counter value.

FIG. 11 is a functional block diagram showing functions of the authentication system according to this embodiment.
Only the parts of the authentication system according to this embodiment that are different from the functions of the authentication system according to the third embodiment will be described.
The host device 100 includes a counter unit 120 in addition to the functions of the host device 100 according to the third embodiment. The counter unit 120 is the same as the counter unit 120 according to the first embodiment.
The authentication device 200 includes a counter unit 220 in addition to the function of the authentication device 200 according to the third embodiment. The counter unit 220 is the same as the counter unit 220 according to the first embodiment.
The memory 130 of the host device 100 and the memory 230 of the authentication device 200 store a plurality of secret information with identification information and a counter value as shared information.

FIG. 12 is a flowchart showing the operation of the authentication system according to this embodiment. FIG. 12 shows processing after the host device 100 receives authentication information from the external device 300. Here, the operation of the authentication system according to this embodiment will be described only with respect to differences from the operation of the authentication system according to the third embodiment.
(S501) to (S505) are the same as (S301) to (S305) of the third embodiment.
Next to (S505), the counter unit 220 of the authentication device 200 increments the counter value stored in the memory 230 by 1 (S506: change step). Then, the hash calculator 250 generates, as response information, a hash value (H) of information obtained by combining the result information, the secret information read by the secret information identification unit 270, and the counter value stored in the memory 230 by the processing device. (S507: response information generation step).
(S508) to (S510) are the same as (S307) to (S309) of the third embodiment.
Next to (S510), the counter unit 120 of the host device 100 increments the counter value stored in the memory 130 by 1 (S511: change step). The hash calculation unit 150 verifies the hash value (H ′) of information obtained by combining authentication success (an example of determination information), the secret information read by the secret information specifying unit 190, and the counter value stored in the memory 130. Is generated by the processing device (S512: verification information generation step).
(S513) to (S515) are the same as (S311) to (S313) of the third embodiment.

  As described above, the response information transmitted from the authentication device 200 to the host device 100 is a hash value of information obtained by combining the result information, the secret information, and the counter value. Therefore, even when the same secret information is used, the response information is different. Therefore, similarly to the authentication system according to the fourth embodiment, while obtaining the same effect as the authentication system according to the third embodiment, the analysis of communication data becomes more difficult than the authentication system according to the third embodiment, and security is improved. The reliability in terms of this is further improved.

  In addition to the timing described above, the counter unit of the host device 100 and the counter unit of the authentication device 200 need only be synchronized with each other. For example, the authentication device 200 may increase the hash value (H) by 1 after transmitting it to the host device 100, and the host device 100 may increase the hash value (H) by 1 after the hash values are compared.

Further, in the above embodiment (Embodiment 1-5), it has been described that the host device 100 transmits authentication information to the authentication device 200. However, the authentication information may be transmitted from the external device 300 to the authentication device 200. That is, the authentication device 200 may perform authentication processing based on the authentication information received from the external device 300 and transmit the result to the host device 100. In this case, the authentication apparatus 200 and the external connection device 300 are connected via a communication line and can communicate with each other.
In this case, for example, identification information for identifying secret information is transmitted from the host device 100 to the authentication device 200 separately from the authentication information. For example, when receiving authentication information from the external device 300, the authentication device 200 may request specific information from the host device 100 and acquire the specific information from the host device 100.

  Similarly, in the above embodiment (Embodiment 1-5), the hash calculator 150 generates a hash value (H ′) of authentication success (an example of determination information) and a counter value as verification information. However, a hash value (H ′) of authentication failure (an example of determination information) and a counter value may be generated as verification information. In this case, the result determination unit 160 determines that the authentication is successful if the response information and the verification information do not match, and determines that the authentication fails if they match. The same applies to the following embodiments.

Embodiment 6 FIG.
In the first and fifth embodiments, the hash value of information obtained by adding a counter value to result information is used as response information. However, when a failure occurs in the communication path between the host device 100 and the authentication device 200 and the host device 100 cannot receive the response information, or when the attacker sends an unauthorized authentication command to the authentication device 200 for the purpose of analysis. Or the like, the counter value may be shifted between the host device 100 and the authentication device 200. In this embodiment, an authentication system that resynchronizes the counter value when the counter value is shifted between the host device 100 and the authentication device 200 will be described.

  The functional configuration of the authentication system according to this embodiment is the same as the functional configuration of the authentication system according to the first or fifth embodiment.

FIG. 13 is a flowchart showing the operation of the counter value resynchronization process of the authentication system according to this embodiment.
In the counter value resynchronization processing, the hash value (H) received by the host device 100 and the hash value (H ′) calculated by the host device 100 are compared, and the hash value (H) and the hash value (H ′) are obtained. It is executed when there is a mismatch. That is, the counter value resynchronization processing is necessary when the hash value (H) and the hash value (H ′) do not match, and the hash value (H) and the hash value (H ′) match. In this case, it is unnecessary because the counter values can be regarded as matching.
That is, (S601) in FIG. 13 is (S111) in FIG. 4 in the first embodiment, and (S513) in FIG. 12 in the fifth embodiment. That is, FIG. 13 replaces the processing after (S111) in FIG. 4 in the first embodiment, and replaces the processing after (S513) in FIG. 12 in the fifth embodiment. is there.
Here, a description will be given assuming that the processing after (S111) in FIG. 4 of the first embodiment is replaced. That is, the response information is a hash value of information obtained by combining the result information and the counter value as in the first embodiment. When replacing the processes after (S513) in FIG. 12, the response information generation process may be replaced with a process of calculating a hash value of information obtained by combining the result information, the secret information, and the counter value.

The result determination unit 160 of the host device 100 compares the received response information (hash value (H)) with the generated verification information (hash value (H ′)) by the processing device (S601: result determination step). As a result of the comparison, when the response information and the verification information match, the result determination unit 160 starts subsequent processing, for example, communication with the external device 300 as a successful authentication (S602: success processing step).
On the other hand, if the response information and the verification information do not match as a result of the comparison, the hash calculator 150 newly processes the hash value (H ″) of the authentication failure (an example of determination information) and the counter value as the verification information. It is generated by the apparatus (S603: verification information generation step). The result determination unit 160 compares the received response information (hash value (H)) with the newly generated verification information (hash value (H ″)) by the processing device (S604: result determination step). As a result of the comparison, when the response information and the verification information match, the result determination unit 160 returns an authentication failure to the subsequent processing, for example, the external device 300 as an authentication failure (S605: failure processing step).
On the other hand, if the response information and the verification information do not match as a result of the comparison, it is determined that the counter value is shifted, and the counter unit 120 increments the counter value stored in the memory 130 by 1 (S606: change) Step). Then, the hash calculation unit 150 newly generates a hash value (H ′ ″) of information obtained by combining the authentication success and the counter value as verification information by the processing device (S607: verification information generation step). The result determination unit 160 compares the received response information (hash value (H)) with the newly generated verification information (hash value (H ′ ″)) by the processing device (S608: result determination step). As a result of the comparison, when the response information and the verification information match, the result determination unit 160 starts subsequent processing, for example, communication with the external device 300 as a successful authentication (S602: success processing step). On the other hand, if the response information does not match the verification information as a result of the comparison, the hash calculator 150 newly sets the hash value (H ″ ″) between the authentication failure (an example of determination information) and the counter value as the verification information. Is generated by the processing device (S609: verification information generation step). The result determination unit 160 compares the received response information (hash value (H)) with the newly generated verification information (hash value (H ″ ″)) by the processing device (S610: result determination step). As a result of the comparison, when the response information and the verification information match, the result determination unit 160 returns an authentication failure to the subsequent processing, for example, the external device 300 as an authentication failure (S605: failure processing step). On the other hand, if the response information and the verification information do not match as a result of the comparison, the control unit 110 returns to (S606) and repeats the processing.

As described above, when the received hash value (H) and the generated hash value (H ′) do not match, the host device 100 newly generates an authentication failure and a hash value (H ″) of the counter value. The received hash value (H) is compared with the newly generated hash value (H ″). When the received hash value (H) and the newly generated hash value (H ″) do not match, the host device 100 determines that the counter value has shifted. Then, the host device 100 increments the counter value to newly generate a hash value, and repeats comparison with the received hash value (H). As a result, resynchronization is possible even when the counter values of the host device 100 and the authentication device 200 deviate. Therefore, the reliability of the authentication system according to Embodiments 1 and 5 can be further improved.
Further, since the comparison is performed without increasing the counter value, it is possible to counter an attack that reuses information that has been used once and alters the authentication result.

  Note that the number of repetitions of the processing from (S606) to (S610) may be limited to a predetermined number.

Embodiment 7 FIG.
In the sixth embodiment, when resynchronizing the counter value shifted between the host device 100 and the authentication device 200, the hash value including the counter value increased on the host device 100 side is calculated, and the received hash Comparison with values was performed. In this embodiment, an authentication system that resynchronizes the counter value by transmitting the current counter value from the host apparatus 100 to the authentication apparatus 200 will be described.

  The functional configuration of the authentication system according to this embodiment is the same as the functional configuration of the authentication system according to the first or fifth embodiment, similarly to the authentication system according to the sixth embodiment.

FIG. 14 is a flowchart showing the operation of the counter value resynchronization process of the authentication system according to this embodiment. Here, the operation of the counter value resynchronization process of the authentication system according to this embodiment will be described only with respect to the difference from the operation of the counter value resynchronization process of the authentication system according to the sixth embodiment.
The counter value resynchronization process is executed when the hash value (H) and the hash value (H ′) do not match, as in the sixth embodiment.
FIG. 14 (S701) is (S111) in FIG. 4 for the first embodiment, and (S513) in FIG. 12 for the fifth embodiment. That is, FIG. 13 replaces the processing after (S111) in FIG. 4 in the first embodiment, and replaces the processing after (S513) in FIG. 12 in the fifth embodiment. is there.
Here, a description will be given assuming that the processing after (S111) in FIG. 4 of the first embodiment is replaced. That is, the response information is a hash value of information obtained by combining the result information and the counter value as in the first embodiment. When replacing the processes after (S513) in FIG. 12, the response information generation process may be replaced with a process of calculating a hash value of information obtained by combining the result information, the secret information, and the counter value.

(S701) to (S705) are the same as (S601) to (S605) of the sixth embodiment.
If the response information and the verification information do not match as a result of the comparison in (S704: result determination step), the requesting device communication unit 140 of the host device 100 sends a re-authentication command including the authentication information and the current counter value to the authentication device. It transmits to 200 via a communication apparatus (S706: Re-request step).
The authentication device communication unit 240 of the authentication device 200 receives the re-authentication command transmitted by the host device 100 via the communication device (S707: re-request reception step). And the authentication part 260 performs an authentication process by a processing apparatus based on the authentication information contained in the received re-authentication command, and determines the authentication success or authentication failure (S708: authentication step). Next, the control unit 210 sets the received counter value in the memory 230 (S709: change step). Next, the hash calculation unit 250 newly generates a hash value (H) of information obtained by combining the result information and the counter value stored in the memory 230 as response information by the processing device (S710: response information generation step). Then, the authentication device communication unit 240 transmits (responses) response information (hash value (H)) to the host device 100 via the communication device (S711: response information transmission step).
The request device communication unit 140 of the host device 100 receives the response information (hash value (H)) transmitted by the authentication device 200 via the communication device (S712: response information reception step). Next, the hash calculator 150 generates, as verification information, a hash value (H ′) of information obtained by combining authentication success (an example of determination information) and a counter value stored in the memory 130 (S713: Verification). Information generation step). Then, the result determination unit 160 compares the received response information (hash value (H)) with the generated verification information (hash value (H ′)) by the processing device (S714: result determination step). If the response information and the verification information match as a result of the comparison, the result determination unit 160 starts subsequent processing, for example, communication with the external device 300 as a successful authentication (S715: success processing step). On the other hand, when the response information and the verification information do not match as a result of the comparison, the result determination unit 160 processes the authentication as a failure and responds, for example, to the external device 300 with a failure of authentication (S716: failure processing step).

  As described above, in the seventh embodiment, it is determined that the counter value is shifted by the same processing as in the sixth embodiment. When the host device 100 determines that the counter value is shifted, the host device 100 transmits a re-authentication command including the counter value to the authentication device 200. Upon receiving the re-authentication command, the authentication device 200 sets a counter value included in the re-authentication command in the memory 230, calculates a hash value again using the counter value, generates response information, and transmits the response information to the host device 100. To do. Thereby, even when the counter values of the host device 100 and the authentication device 200 are deviated, it is possible to perform resynchronization without fail. Therefore, the reliability of the authentication system according to Embodiments 1 and 5 can be further improved. Further, in the authentication system according to the sixth embodiment, the number of processes increases in proportion to the amount of deviation of the counter value. However, in the authentication system according to this embodiment, it is performed once regardless of the amount of deviation of the counter value. Can be resynchronized in the process.

  Note that the processing (S709) in which the authentication device 200 sets the counter value included in the re-authentication command may not be after authentication (after S708) as long as it is after receiving the re-authentication command from the host device 100. . Further, the authentication device 200 sets a value obtained by incrementing the counter value received by including it in the re-authentication command as a counter value and calculates a hash value (H). After the host device 100 receives the response information, The hash value (H ′) may be calculated by incrementing the counter value by one. That is, it is possible to prevent a decrease in security by using the counter value included in the re-authentication command as it is.

Also, in the above description, when the host device 100 compares the hash values and the authentication success and the authentication failure do not match (when it is determined that the counter values are deviated), the authentication device 200 includes the counter value including the counter value. An authentication command was sent. However, the counter value may be included in the normal authentication command and transmitted to the authentication device 200. That is, the authentication command may always include a counter value.
Further, at a predetermined timing before transmitting the authentication command, for example, immediately after the power is turned on, the counter value is transmitted from the host device 100 to the authentication device 200 to synchronize the counter value, and thereafter the authentication command not including the counter value is issued. You may make it transmit.

  Further, in the above description, after receiving the response information, the host device 100 retransmits a re-authentication command including the authentication information and the counter value to the authentication device 200. The authentication device 200 authenticates again with the authentication information included in the received re-authentication command. However, the host apparatus 100 transmits the re-authentication command including only the counter value (without including the authentication information), and the authentication apparatus 200 authenticates the result based on the previous authentication information and the received counter value. A hash value of information obtained by combining the two may be generated as response information.

Embodiment 8 FIG.
In the seventh embodiment, the counter values shifted by resending the current counter value from the host device 100 to the authentication device 200 are resynchronized. In this embodiment, an authentication system that resynchronizes the counter value by transmitting the current counter value from the authentication device 200 to the host device 100 will be described.

  The functional configuration of the authentication system according to this embodiment is the same as the functional configuration of the authentication system according to the first or fifth embodiment, similarly to the authentication system according to the sixth and seventh embodiments.

FIG. 15 is a flowchart showing the operation of the counter value resynchronization process of the authentication system according to this embodiment. Here, the operation of the counter value resynchronization process of the authentication system according to this embodiment will be described only with respect to the difference from the operation of the counter value resynchronization process of the authentication system according to the sixth embodiment.
The counter value resynchronization process is executed when the hash value (H) and the hash value (H ′) do not match, as in the sixth embodiment.
(S801) in FIG. 15 is (S111) in FIG. 4 for the first embodiment, and (S513) in FIG. 12 for the fifth embodiment. That is, FIG. 13 replaces the processing after (S111) in FIG. 4 in the first embodiment, and replaces the processing after (S513) in FIG. 12 in the fifth embodiment. is there.
Here, a description will be given assuming that the processing after (S111) in FIG. 4 of the first embodiment is replaced. That is, the response information is a hash value of information obtained by combining the result information and the counter value as in the first embodiment. When replacing the processes after (S513) in FIG. 12, the response information generation process may be replaced with a process of calculating a hash value of information obtained by combining the result information, the secret information, and the counter value.

(S801) to (S805) are the same as (S601) to (S605) of the sixth embodiment.
If the response information and the verification information do not match as a result of the comparison in (S804: result determination step), the request device communication unit 140 of the host device 100 transmits a counter value request command to the authentication device 200 via the communication device. (S806: Counter value request step).
The authentication device communication unit 240 of the authentication device 200 receives the counter value request command transmitted from the host device 100 via the communication device (S807: counter value request reception step). Next, the hash calculator 250 generates the hash value (h) of the counter value when the response information was transmitted last time by the processing device (S808: counter information generation step). The authentication device communication unit 240 transmits (responses) the hash value (h) of the counter value to the host device 100 via the communication device (S809: counter information transmission step).
The request device communication unit 140 of the host device 100 receives the hash value (h) transmitted by the authentication device 200 via the communication device (S810: counter information reception step). Next, the counter unit 120 increments the counter value stored in the memory 130 by 1 (S811: changing step). Next, the hash calculator 150 calculates the hash value (h ′) of the counter value stored in the memory 130 by the processing device (S812: counter verification information generation step). Then, the result determination unit 160 compares the received hash value (h) with the calculated hash value (h ′) by the processing device (S813: counter value verification step). As a result of the comparison, if the hash value (h) and the hash value (h ′) match, the hash value (H ′) of information obtained by combining the authentication success and the counter value stored in the memory 130 is newly set as verification information. It is generated by the processing device (S814: verification information generation step). On the other hand, if the hash value (h) and the hash value (h ′) do not match as a result of the comparison, the process returns to (S811) and is repeated. That is, the processing from (S811) to (S813) is repeated until the hash values match in (S813).
Subsequent to (S814), the result determination unit 160 compares the received response information (hash value (H)) with the newly generated verification information (hash value (H ′)) by the processing device (S815: result determination). Step). When the response information and the verification information match as a result of the comparison, the result determination unit 160 starts subsequent processing, for example, communication with the external device 300 as a successful authentication (S816: success processing step). On the other hand, if the response information and the verification information do not match as a result of the comparison, the result determination unit 160 processes the authentication failure, for example, responds an authentication failure to the external device 300 (S817: failure processing step).

  As described above, in the eighth embodiment, it is determined that the counter value is shifted by the same processing as in the sixth embodiment. If it is determined that the counter value is shifted, the host device 100 transmits a counter value request command to the authentication device 200. Then, the authentication device 200 calculates a hash value of the counter value and transmits it to the host device 100. The host device 100 changes the counter value stored in the memory 130 based on the received hash value of the counter value. Thereby, even when the counter values of the host device 100 and the authentication device 200 are deviated, it is possible to perform resynchronization without fail. Therefore, the reliability of the authentication system according to Embodiments 1 and 5 can be further improved. In addition, since the counter value, which is the original information for generating the response information, does not flow directly through the communication path between the host device 100 and the authentication device 200, it is difficult to analyze the communication data and the reliability is improved in terms of security. .

In the above description, if the host device 100 does not match the authentication success and the authentication failure as a result of the hash value comparison (when it is determined that the counter value is shifted), the counter value request command is sent to the authentication device 200. sent. However, if the normal response information is transmitted to the host device 100 including the hash value (H) of information obtained by combining the result information and the counter value and the hash value (h) of only the counter value, the host device 100 When the response information (hash value (H ′)) and the verification information (hash value (H)) do not match, the processing after (S811) may be performed.
Further, at a predetermined timing before transmitting the authentication command, for example, immediately after the power is turned on, the processing from (S806) to (S813) is executed to synchronize the counter value, and thereafter the normal authentication command is transmitted. It may be.

Embodiment 9 FIG.
The above embodiment relates to transmission of response information indicating successful authentication or failed authentication. In this embodiment, when an error occurs in the authentication apparatus 200 (different from the authentication failure, such as an abnormal format of the authentication command or an abnormal data length), the authentication apparatus 200 receives an error code indicating the error that has occurred. An authentication system to be transmitted to 100 will be described.

  The functional configuration of the authentication system according to this embodiment is the same as the functional configuration of the authentication system according to each embodiment. Here, the functional configuration of the authentication system according to Embodiment 1 will be described as an example.

FIG. 16 is a flowchart showing the operation of error generation processing of the authentication system according to this embodiment.
The error occurrence process is executed when an error occurs in the process of the authentication apparatus 200. That is, (S901) in FIG. 16 is executed when an error occurs between (S103) and (S107) in FIG. 4 in the first embodiment. In the second embodiment, the process is executed when an error occurs between (S203) and (S207) in FIG. In the third embodiment, the process is executed when an error occurs between (S303) and (S307) in FIG. In the fourth embodiment, the process is executed when an error occurs between (S403) and (S407) in FIG. In the fifth embodiment, the process is executed when an error occurs between (S503) and (S508) in FIG.

When the control unit 210 of the authentication apparatus 200 detects an error, the hash calculation unit 250 processes, as response information, a hash value (H) of information obtained by combining the error code indicating the error and the counter value stored in the memory 230. It is generated by the device (S901: response information generation step). And the authentication apparatus communication part 240 transmits response information to the host apparatus 100 via a communication apparatus (S902: response information transmission step).
The request device communication unit 140 of the host device 100 receives the response information (hash value (H)) via the communication device (S903: response information reception step). Then, as a normal process, the hash calculator 150 first generates a hash value between the authentication success and the counter value as verification information by the processing device (S904: verification information generation step). At this time, the counter values of the host apparatus 100 and the authentication apparatus 200 are the same value (if they are different, it is necessary to synchronize by the method described in the sixth, seventh, and eighth embodiments). Then, the result determination unit 160 compares the response information (hash value (H)) with the verification information (hash value (H ′)) by the processing device (S905: result determination step). As a result of the comparison, when the response information and the verification information match, the result determination unit 160 starts subsequent processing, for example, communication with the external device 300 as a successful authentication (S906: success processing step).
On the other hand, if the response information and the verification information do not match as a result of the comparison, the hash calculator 150 newly generates a hash value (H ″) between the authentication failure (an example of determination information) and the counter value as the verification information. (S907: Verification information generation step). The result determination unit 160 compares the received response information (hash value (H)) with the newly generated verification information (hash value (H ″)) (S908: result determination step). As a result of the comparison, when the response information and the verification information match, the result determination unit 160 returns an authentication failure to the subsequent processing, for example, the external device 300 as an authentication failure (S909: failure processing step).
On the other hand, if the response information and the verification information do not match as a result of the comparison, the hash calculator 150 newly generates a hash value (H ″ ′) between the error code and the counter value as verification information by the processing device ( S910: Verification information generation step). Then, the result determination unit 160 compares the response information (hash value (H)) with the newly generated verification information (hash value (H ′ ″)) by the processing device (S911: result determination step). If the response information matches the verification information as a result of the comparison, it is determined that an error has occurred in the error code used to generate the verification information, for example, the authentication information is retransmitted to the authentication device 200 (S912: error processing step). . On the other hand, if the comparison result shows that the response information and the verification information do not match, the process returns to (S910) and repeats the process. That is, the process is repeated until an error code is specified or until all error codes are compared.

  As described above, an error code representing an error that has occurred in the authentication apparatus 200 is returned in the same format as in the case of authentication success and authentication failure. Therefore, when responding by distinguishing between authentication success and authentication failure and an error code, that is, when authentication succeeds and authentication fails, the response is based on a hash value, and the error code remains as it is (without the error code itself). It becomes difficult to identify error cases from the data. Therefore, it becomes more difficult to analyze communication data between the host device 100 and the authentication device 200, and the reliability in terms of security is improved.

Embodiment 10 FIG.
In the embodiment 2-5, the host device 100 and the authentication device 200 transmit and receive response information using secret information shared in advance. The secret information is information that should not be known to anyone other than the manufacturer and the related parties of the host device 100 and the authentication device 200. If the secret information is leaked to a third party or can be easily read from the host device 100 or the authentication device 200, the authentication result may be falsified. On the other hand, the manufacturer or maintainer of the host device 100 or the authentication device 200 may have to read or write secret information from the memory. In this embodiment, a description will be given of an authentication system including user authentication that allows only a person who has a valid secret information to access.

FIG. 17 is a functional block diagram showing functions of the authentication system according to this embodiment.
In FIG. 17, the target device (host device 100 or authentication device 200) is a device to which secret information is written and read. In FIG. 17, only the functional configuration related to this embodiment is described. That is, the host device 100 and the authentication device 200 according to the above-described embodiment can be realized by adding the hash calculation unit 150, the result determination unit 160, the hash calculation unit 250, the authentication unit 260, and the like to the functional configuration illustrated in FIG. . The secret information writing / reading device 400 is a device that writes / reads secret information to / from a connected target device.

The target device includes a control unit 510, a communication unit 520, a memory 530, and an access control unit 540.
A control unit 510 controls the entire apparatus. The control unit 510 is the control unit 110 if the host device 100 is used, and the control unit 210 if the authentication device 200 is used.
The communication unit 520 communicates with the secret information writing / reading device 400 via the communication device. The communication unit 520 may be the request device communication unit 140 if the host device 100, and the authentication device communication unit 240 if the authentication device 200, or provided separately from the request device communication unit 140 and the authentication device communication unit 240. May be.
The memory 530 stores a plurality of secret information and its identification information. The secret information and the identification information stored in the memory 530 of the target device have the same configuration as in FIG.
The access control unit 540 authenticates the secret information writing / reading device 400 and controls access to the memory 530 by the processing device.

  The secret information writing / reading device 400 is a device that can be handled only by a manufacturer or a maintenance person of the host device 100 or the authentication device 200. The secret information writing / reading apparatus 400 may be provided with a user authentication function so that only a legitimate manufacturer or a maintenance person can handle it.

FIG. 18 is a flowchart showing the operations of the secret information write / read device 400 and the target device. In FIG. 18, the secret information writing / reading apparatus 400 writes the secret information to the target apparatus, and then reads the secret information from the target apparatus.
As a premise, it is assumed that the target device is in a state in which a command from the secret information writing / reading device 400 can be received. The state in which the command from the secret information writing / reading device 400 can be received may be a normal use state in the above-described embodiment, or a switch provided in the target device is operated or a terminal is set. It may be a special state that is not the normal use state set in.

The secret information writing / reading device 400 transmits a device authentication command including device authentication information for authenticating that the device is a legitimate device to the target device via the communication device (S1001: device authentication command transmission step).
The communication unit 520 of the target device receives the device authentication command via the communication device (S1002: device authentication command receiving step). The access control unit 540 authenticates the secret information writing / reading device 400 by the processing device based on the received device authentication information (S1003: authentication step). Then, the communication unit 520 transmits the authentication result to the secret information writing / reading device 400 via the communication device (S1004: authentication result transmitting step).
The secret information writing / reading apparatus 400 receives the authentication result transmitted by the target apparatus (S1005: authentication result receiving step).

Next, the secret information writing / reading device 400 that has received the authentication result indicating that it has been authenticated transmits a secret information writing command including secret information to be stored in the memory 530 of the target device to the target device via the communication device ( S1006: Write command transmission step). Here, when there are a plurality of secret information to be stored, the plurality of secret information is included in the secret information write command.
The communication unit 520 of the target device receives the secret information write command via the communication device (S1007: write command receiving step). When the above-described device authentication is successful, that is, when the secret information write / read device 400 is authenticated as a valid device, the control unit 510 executes the secret information write command, and the secret included in the secret information write command Information is stored in the memory 530 (S1008: writing step). Note that when the secret information write command includes a plurality of secret information, all the secret information is stored. Then, the communication unit 520 transmits response information indicating that the secret information write command has been executed to the secret information write / read device 400 via the communication device (S1009: result transmission step). On the other hand, if the device authentication has failed, the control unit 510 does not store the secret information in the memory 530, and the communication unit 520 transmits (responses) the error to the secret information writing / reading device 400 via the communication device.
The secret information writing / reading apparatus 400 receives the response transmitted by the target apparatus via the communication apparatus (S1010: result receiving step).

Next, the secret information write / read device 400 transmits a secret information read command for reading the secret information stored in the memory 530 of the target device to the target device via the communication device (S1011: read command transmission step).
The communication unit 520 of the target device receives the secret information read command via the communication device (S1012: read command receiving step). When the above-described device authentication is successful, that is, when the secret information write / read device 400 is authenticated as a valid device, the control unit 510 executes a secret information read command and reads the secret information from the memory 530 ( S1013: Read step). Then, the communication unit 520 transmits the read secret information to the secret information writing / reading device 400 via the communication device (S1014: result transmission step). On the other hand, if the device authentication has failed, the control unit 510 does not read the secret information from the memory 530 and transmits (responses) the error to the secret information writing / reading device 400 via the communication device.
The secret information writing / reading apparatus 400 receives the response transmitted by the target apparatus via the communication apparatus (S1015: result receiving step).

After performing writing and reading, the secret information writing / reading apparatus 400 transmits a device authentication cancellation command for canceling device authentication to the target device via the communication device (S1016: authentication cancellation command transmission step).
The communication unit 520 of the target device receives a device authentication cancellation command via the communication device (S1017: authentication cancellation command reception step). Then, the access control unit 540 cancels the authentication success and transmits the result to the secret information writing / reading apparatus 400 to the communication apparatus (S1018: authentication cancellation step).
The secret information writing / reading apparatus 400 receives the result transmitted by the target apparatus via the communication apparatus (S1019: result receiving step).

  As described above, the target device authenticates the secret information writing / reading device 400 that can be handled only by the manufacturer of the host device 100 or the authentication device 200 or the maintainer, and writing or reading the secret information only when the authentication is successful. to approve. Therefore, only a legitimate secret information writing / reading apparatus 400, that is, a legitimate host apparatus 100 or a manufacturer or maintainer of the authentication apparatus 200 can write / read secret information to / from the target apparatus. Secret information cannot be tampered with or read from the device 100 or the authentication device 200. Therefore, reliability in terms of security is improved, and convenience in terms of manufacturing and maintenance is improved.

  Note that, in the above description, the operation of performing the reading after the writing of the secret information is shown. However, when only reading is performed, after the device authentication is successful (after S1005), (S1011) and subsequent steps are executed, and when only writing is performed, the device authentication is canceled (S1016) after (S1010). That's fine.

  Further, the secret information may be written in a plurality of forms as described above or may be divided into several parts. The secret information may be read by reading the identification information and then reading the corresponding secret information by designating each identification information. In either case, it can be performed only when the device authentication is successful.

  Furthermore, in the above description, successful authentication is canceled by transmitting an authentication cancellation command to the target device after the process of writing or reading secret information is completed. However, the authentication may be canceled when the power is turned off or a predetermined time has elapsed.

  Furthermore, in the above description, when the device authentication fails, only the authentication failure result is returned. However, the number of continuous authentication failures may be stored in the memory 530, and the apparatus authentication command may be invalidated for a predetermined time or forever when the predetermined number is reached. With such a configuration, an attack for analyzing device authentication can be invalidated, and the reliability in terms of security can be improved.

Furthermore, it is good also as a structure which has a device authentication command and device authentication information (an example of access authority information) in two types. That is, the device authentication command A that handles the device authentication information A is a command and authentication information that can execute writing and reading of secret information. The device authentication command B that handles the other device authentication information B is a command and authentication information that can only be read out of secret information. In such a configuration, the access control unit 540 of the target device that has received the device authentication command A performs device authentication using the device authentication information A, and permits writing and reading of secret information when the authentication is successful. To do. On the other hand, the access control unit 540 of the target device that has received the device authentication command B performs device authentication using the device authentication information B. If the authentication is successful, only the reading of the secret information is permitted and the writing is not permitted. .
In such a configuration, authority concerning writing and reading of secret information can be refined, and only necessary minimum authority can be given to maintenance personnel and other manufacturers, which can improve reliability in terms of security. it can.

In addition, the above embodiment has shown the general application example. Another product or system that controls the device or system by transmitting the authentication result obtained by the authentication device 200 to another device, for example, the above-described exit management system, a device incorporating a microcontroller, an electronic key, It can also be applied to digital home appliances and device authentication.
For example, in the case of an entrance / exit management device, the external connection device 300 is a device to which authentication information used for controlling entrance / exit such as an IC card or a fingerprint from a person entering or leaving the room is input. And an input device such as a fingerprint reader. The authentication device 200 corresponds to an authentication device that is connected to a card reader or a fingerprint reader and authenticates a person entering or leaving the room using authentication information such as card information or fingerprint information. The host device 100 corresponds to an electric lock that opens and closes a door according to a command from the authentication device 200. With such a configuration, the authentication device performs authentication based on the authentication information received from the input device, and when the authentication is successful, transmits an unlock signal to the electric lock.
Also, in the case of an electronic key that is mounted on a vehicle and that unlocks the vehicle door with a card key held by the driver, the external connection device 300 receives the signal from the card key, and the authentication device 200 receives the signal from the card key and is valid. The host device 100 corresponds to a door control device that unlocks the door of the vehicle. With such a configuration, the authentication device 200 performs authentication based on the information received from the card key, and transmits an unlocking signal to the door opening / closing device according to the result. That is, the authentication system according to the above embodiment can prevent the unlocking signal from being altered or reused.

Embodiment 11 FIG.
In the above-described embodiment, prevention of falsification of response information has been described. In this embodiment, a method of applying the authentication system according to the above-described embodiment to device authentication for authenticating that the device is a legitimate device using the device-specific identification information will be described.

  Although the authentication system according to any of the embodiments described above can be applied to device authentication, an example in which the authentication system according to Embodiment 1 is applied to device authentication will be described here.

FIG. 19 is a functional block diagram showing functions of the authentication system according to this embodiment. Only the parts of the authentication system according to this embodiment that are different from the functions of the authentication system according to the first embodiment will be described.
The host device 100 does not include the result determination unit 160.

FIG. 20 is a flowchart showing the operation of the authentication system according to this embodiment. The processing after the host device 100 receives the device-specific identification information from the external device 300 is shown.
The counter unit 120 of the host device 100 increments the counter value stored in the memory 130 by 1 (S1101: changing step). The hash calculator 150 generates, as authentication information, a hash value (H) of information obtained by combining identification information unique to the device (external connection device 300) and a counter value as authentication information (S1102: authentication information generation step). Then, the request device communication unit 140 transmits an authentication command including the authentication information generated by the hash calculation unit 150 to the authentication device 200 via the communication device (S1103: request step).
The authentication device communication unit 240 of the authentication device 200 receives the authentication command transmitted from the host device 100 via the communication device (S1104: request reception step). Next, the counter unit 220 increments the counter value stored in the memory 230 by 1 (S1105: change step). The hash calculation unit 250 generates, as verification information, a hash value (H ′) of information obtained by combining identification information unique to a device to be authenticated (external connection device 300) and a counter value stored in the memory 230, as verification information. (S1106: Verification information generation step). It is assumed that the authentication device 200 has acquired device-specific identification information in advance. Then, the authentication unit 260 compares the received authentication information (hash value (H)) with the generated verification information (hash value (H ′)) by the processing device (S1107: authentication step). If the authentication information and the verification information match as a result of the comparison, the authentication unit 260 determines that the authentication is successful (S1108: success processing step). On the other hand, if the authentication information does not match the verification information as a result of the comparison, the authentication unit 260 determines that the authentication has failed (S1109: failure processing step).

  As described above, when the device-specific identification information is applied to the authentication result of the authentication system according to the embodiment described above, the device-specific identification information can be safely transmitted to the other device.

The above is summarized as follows.
In the authentication method and the authentication device according to the above embodiments, the authentication device transmits the authentication result and the converted value of the counter value as an authentication response, and the authentication result receiving device receives the authentication success, the converted value of the counter value, and the received converted value. The authentication result is received by comparing.

  In the authentication method and the authentication apparatus according to the above embodiments, the authentication apparatus transmits the secret information indicated by the secret information identification information received from the authentication result receiving apparatus and the conversion value of the authentication result as an authentication response, and receives the authentication result. The apparatus receives the authentication result by comparing the authentication success and the conversion value of the secret information with the received conversion value.

  Further, in the authentication method and the authentication device according to the above embodiment, the authentication device transmits the secret information specified from the random number received from the authentication result receiving device and the converted value of the authentication result as an authentication response. The authentication result is received by comparing the authentication success value with the conversion value of the secret information specified from the random number and the received conversion value.

  Furthermore, in the authentication method and the authentication device according to the above embodiment, the authentication device uses the secret information identified from the random number received from the authentication result receiving device, the authentication result, and the converted value of the received random number as an authentication response. The authentication result receiving device receives the authentication result by comparing the authentication success, the secret information identified from the random number, the converted value of the random number, and the received converted value.

  Further, in the authentication method and the authentication device according to the above embodiment, the authentication device transmits the secret information identified from the random number received from the authentication result receiving device, the authentication result, and the converted value of the counter value as an authentication response, The authentication result receiving device receives the authentication result by comparing the authentication success, the secret information specified from the random number, the converted value of the counter value, and the received converted value.

  Further, in the authentication method and the authentication device according to the above embodiment, the authentication result receiving device compares the authentication success and the converted value of the counter value with the received converted value, and if they do not match, the authentication failure and the counter value The conversion value is compared with the received conversion value, and if they do not match, the counter value is changed and the same processing is performed.

  Furthermore, in the authentication method and authentication apparatus according to the above embodiments, the authentication result receiving apparatus transmits the current counter value to the authentication apparatus, and the authentication apparatus stores the received counter value internally and authenticates. It is characterized by responding with the success and the converted value of the counter value.

  Further, in the authentication method and the authentication apparatus according to the above embodiments, in the authentication method, the authentication apparatus transmits a converted value of the current counter value to the authentication result receiving apparatus, and the authentication result receiving apparatus receives the received counter. The counter value is specified based on the converted value.

  Furthermore, the authentication method and the authentication apparatus according to the above embodiments are characterized in that the converted value is transmitted even when an error code is transmitted.

  Furthermore, the authentication method and the authentication device according to the above-described embodiments are characterized in that the authentication result receiving device compares only the converted values obtained from the authentication success and regards it as an authentication failure if they do not match.

  In addition, the authentication method and the authentication device according to the above embodiments allow the authentication result receiving device and / or the authentication device to write secret information to the memory and / or read the secret information from the memory only when the authentication is successful. It is characterized by doing.

  Further, the authentication method and the authentication device according to the above embodiment are the authentication result receiving device and / or the authentication device only have the authority to write the secret information to the memory and read the secret information from the memory, and to read the secret information from the memory. The authority to perform is divided and allowed.

  In addition, the authentication method and the authentication device according to the above embodiments are devices that transmit between devices in device authentication for authenticating that the device is a legitimate device using the assigned device-specific identification information. It is characterized by applying unique identification information to the authentication result.

Next, the hardware configuration of the host device 100, the authentication device 200, and the external connection device 300 in the embodiment will be described.
FIG. 21 is a diagram illustrating an example of a hardware configuration of the host device 100, the authentication device 200, and the external connection device 300.
As shown in FIG. 21, the host device 100, the authentication device 200, and the external connection device 300 include a CPU 911 (Central Processing Unit, central processing unit, processing unit, arithmetic unit, microprocessor, microcomputer, processor that executes a program. (Also called). The CPU 911 is connected to the ROM 913, the RAM 914, the LCD 901 (Liquid Crystal Display), the keyboard 902 (K / B), the communication board 915, and the magnetic disk device 920 via the bus 912, and controls these hardware devices. Instead of the magnetic disk device 920, a storage device such as an optical disk device or a memory card read / write device may be used.

  The ROM 913 and the magnetic disk device 920 are examples of a nonvolatile memory. The RAM 914 is an example of a volatile memory. The ROM 913, the RAM 914, and the magnetic disk device 920 are examples of a storage device (memory). The keyboard 902 and the communication board 915 are examples of input devices. The communication board 915 is an example of a communication device. Furthermore, the LCD 901 is an example of a display device.

  An operating system 921 (OS), a window system 922, a program group 923, and a file group 924 are stored in the magnetic disk device 920 or the ROM 913. The programs in the program group 923 are executed by the CPU 911, the operating system 921, and the window system 922.

The program group 923 includes “control unit 110”, “counter unit 120”, “request device communication unit 140”, “hash calculation unit 150”, “result determination unit 160”, and “secret information determination unit 170” in the above description. ”,“ Random number generation unit 180 ”,“ secret information identification unit 190 ”,“ control unit 210 ”,“ counter unit 220 ”,“ authentication device communication unit 240 ”,“ hash calculation unit 250 ”,“ authentication unit 260 ”, Stored are software, programs, and other programs that execute the functions described as “secret information identification unit 270”, “control unit 510”, “communication unit 520”, “access control unit 540”, and the like. The program is read and executed by the CPU 911.
In the file group 924, information such as “authentication information”, “response information”, “result information”, “determination information”, data, signal values, variable values, and parameters in the above description are stored in “files” and “databases”. Is stored as each item. The “file” and “database” are stored in a recording medium such as a disk or a memory. Information, data, signal values, variable values, and parameters stored in a storage medium such as a disk or memory are read out to the main memory or cache memory by the CPU 911 via a read / write circuit, and extracted, searched, referenced, compared, and calculated. Used for the operation of the CPU 911 such as calculation / processing / output / printing / display. Information, data, signal values, variable values, and parameters are temporarily stored in the main memory, cache memory, and buffer memory during the operation of the CPU 911 for extraction, search, reference, comparison, calculation, calculation, processing, output, printing, and display. Is remembered.

In the above description, the arrows in the flowchart mainly indicate input / output of data and signals, and the data and signal values are recorded in a memory of the RAM 914, other recording media such as an optical disk, and an IC chip. Data and signals are transmitted online by a bus 912, signal lines, cables, other transmission media, and radio waves.
In addition, what is described as “to part” in the above description may be “to circuit”, “to device”, “to device”, “to means”, and “to function”. It may be “step”, “˜procedure”, “˜processing”. In addition, what is described as “˜device” may be “˜circuit”, “˜device”, “˜equipment”, “˜means”, “˜function”, and “˜step”, “ ~ Procedure "," ~ process ". Furthermore, what is described as “to process” may be “to step”. That is, what is described as “˜unit” may be realized by firmware stored in the ROM 913. Alternatively, it may be implemented only by software, or only by hardware such as elements, devices, substrates, and wirings, by a combination of software and hardware, or by a combination of firmware. Firmware and software are stored in a recording medium such as ROM 913 as a program. The program is read by the CPU 911 and executed by the CPU 911. That is, the program causes a computer or the like to function as the “˜unit” described above. Alternatively, the computer or the like is caused to execute the procedures and methods of “to part” described above.

The figure which shows the entrance / exit management system which is an example of an authentication system. The figure which shows the apparatus with which the microcontroller which is an example of an authentication system was incorporated. FIG. 3 is a functional block diagram showing functions of the authentication system according to the first embodiment. 4 is a flowchart showing the operation of the authentication system according to the first embodiment. FIG. 4 is a functional block diagram illustrating functions of an authentication system according to a second embodiment. The figure which shows an example of the confidential information which the memory 130 and the memory 230 memorize | store, and its identification information. 10 is a flowchart showing the operation of the authentication system according to the second embodiment. FIG. 9 is a functional block diagram illustrating functions of an authentication system according to a third embodiment. 10 is a flowchart showing the operation of the authentication system according to the third embodiment. 10 is a flowchart showing the operation of the authentication system according to the fourth embodiment. FIG. 6 is a functional block diagram showing functions of an authentication system according to a fifth embodiment. 10 is a flowchart showing the operation of the authentication system according to the fifth embodiment. 18 is a flowchart showing an operation of counter value resynchronization processing of the authentication system according to the sixth embodiment. 18 is a flowchart showing an operation of counter value resynchronization processing of the authentication system according to the seventh embodiment. 19 is a flowchart showing an operation of counter value resynchronization processing of the authentication system according to the eighth embodiment. 15 is a flowchart showing an operation of error generation processing of the authentication system according to the ninth embodiment. FIG. 22 is a functional block diagram illustrating functions of an authentication system according to a tenth embodiment. The flowchart which shows operation | movement with the confidential information writing / reading apparatus 400 and an object apparatus. FIG. 22 is a functional block diagram showing functions of an authentication system according to an eleventh embodiment. 18 is a flowchart showing the operation of the authentication system according to the eleventh embodiment. 2 is a diagram illustrating an example of a hardware configuration of a host device 100, an authentication device 200, and an external connection device 300. FIG.

Explanation of symbols

  100 host device, 110 control unit, 120 counter unit, 130 memory, 140 requesting device communication unit, 150 hash operation unit, 160 result determination unit, 170 secret information determination unit, 180 random number generation unit, 190 secret information identification unit, 200 authentication Device, 210 control unit, 220 counter unit, 230 memory, 240 authentication device communication unit, 250 hash operation unit, 260 authentication unit, 270 secret information identification unit, 300 externally connected device, 400 secret information write / read device, 510 control unit, 520 communication unit, 530 memory, 540 access control unit.

Claims (17)

An authentication system comprising a request device and an authentication device,
The authentication device
An authentication device communication unit that receives the authentication information via the communication device;
Based on the authentication information received by the authentication device communication unit, an authentication unit that determines the authentication success or the authentication failure by the processing device;
An authentication device storage unit for storing, in a storage device, shared information shared in advance with the requesting device;
The result information selected according to the authentication success or the authentication failure determined by the authentication unit from the success information indicating the authentication success and the failure information indicating the authentication failure, and the shared information stored in the authentication device storage unit by a predetermined method A response information generating unit that generates response information by the processing device;
The authentication device communication unit transmits the response information generated by the response information generation unit to the requesting device,
The requesting device is:
A request device communication unit that receives response information transmitted by the authentication device communication unit via a communication device;
A requesting device storage unit that stores, in a storage device, shared information shared in advance with the authentication device;
A verification information generating unit that generates verification information by a processing device using the predetermined method from determination information that is one of the success information and the failure information, and shared information stored in the requesting device storage unit; ,
A response determination unit that compares the response information received by the requesting device communication unit with the verification information generated by the verification information generation unit, and includes a result determination unit that determines whether the authentication has succeeded or failed by the processing device. Authentication system. The authentication device further includes:
An authentication device changing unit that changes the shared information stored in the authentication device storage unit at a predetermined timing by a processing device;
The response information generating unit generates response information from the result information and the shared information changed by the authentication device changing unit,
The requesting device further includes:
A request device changing unit that changes the shared information stored in the request device storage unit at a predetermined timing by a processing device;
The authentication system according to claim 1, wherein the verification information generation unit generates verification information from the determination information and the shared information changed by the requesting device changing unit. The authentication device storage unit and the request device storage unit store a counter value as shared information,
When the authentication device communication unit receives the authentication information, the authentication device changing unit changes the counter value by adding a predetermined value to the counter value stored by the authentication device storage unit,
The response information generation unit generates response information from the result information and the changed counter value,
When the request device communication unit receives the response information, the request device change unit changes the counter value by adding the predetermined value to the counter value stored by the request device storage unit,
The authentication system according to claim 2, wherein the verification information generation unit generates verification information from the determination information and the changed counter value. The authentication device storage unit and the request device storage unit store a plurality of secret information as shared information,
The request device communication unit transmits specific information for specifying secret information,
The authentication device communication unit receives the specific information transmitted by the request device communication unit,
The response information generation unit generates response information from the result information and secret information specified by the specific information received by the authentication device communication unit among the plurality of secret information,
The verification information generation unit generates verification information from the determination information and secret information identified from specific information transmitted by the requesting device communication unit among the plurality of secret information. The authentication system described in. The authentication device storage unit and the request device storage unit store a plurality of secret information with identification information as shared information,
The request device communication unit transmits a random number,
The authentication device communication unit receives the random number transmitted by the request device communication unit,
The authentication device further includes:
An authentication device calculation unit that calculates identification information from a random number received by the authentication device communication unit by a processing device,
The response information generation unit generates response information from the result information and the secret information specified by the identification information calculated by the authentication device calculation unit among the plurality of secret information,
The requesting device further includes:
A request device calculation unit that calculates identification information from a random number transmitted by the request device communication unit by a processing device,
5. The verification information generation unit generates verification information from the determination information and secret information specified by the identification information calculated by the requesting device calculation unit among the plurality of secret information. The authentication system described in. The response information generation unit generates response information from the result information, the secret information, and the random number received by the authentication device communication unit,
The authentication system according to claim 5, wherein the verification information generation unit generates verification information from the determination information, the secret information, and a random number transmitted by the requesting device communication unit. The authentication device storage unit and the request device storage unit store a counter value and a plurality of secret information as shared information,
The request device communication unit transmits specific information for specifying the secret information,
The authentication device communication unit receives the specific information transmitted by the request device communication unit,
The authentication device further includes:
An authentication device changing unit for changing the counter value by adding a predetermined value to the counter value stored in the authentication device storage unit at a predetermined timing by the processing device;
The response information generation unit responds from the result information, the secret information specified by the specific information received by the authentication device communication unit among the plurality of secret information, and the counter value changed by the authentication device change unit. Generate information,
The requesting device further includes:
A request device changing unit for changing a counter value by adding a predetermined value to the counter value stored in the request device storage unit at a predetermined timing by a processing device;
The verification information generation unit verifies from the determination information, the secret information specified by the specific information transmitted by the requesting device communication unit among the plurality of secret information, and the counter value changed by the requesting device change unit The authentication system according to claim 1, wherein information is generated. If the response information does not match the verification information as a result of the result determination unit comparing the response information with the verification information, the verification information generation unit uses the determination information used to generate the verification information. If it is success information, it is changed to failure information, and if it is failure information, the determination information is changed to success information, and verification information is newly generated,
The result determination unit compares the response information with newly generated verification information,
When the result determination unit compares the response information with newly generated verification information and the response information does not match the new verification information, the requesting device changing unit may add the predetermined value to the counter value. 8. The authentication system according to claim 3, wherein the counter value is changed by adding a value. If the response information does not match the verification information as a result of the result determination unit comparing the response information with the verification information, the verification information generation unit uses the determination information used to generate the verification information. If it is success information, it is changed to failure information, and if it is failure information, the determination information is changed to success information, and verification information is newly generated,
The result determination unit compares the response information with newly generated verification information,
The request device communication unit stores the request device storage unit when the response information does not match the new verification information as a result of the result determination unit comparing the response information with the newly generated verification information. Sent the counter value to the authentication device,
The authentication device communication unit receives the counter value transmitted by the request device communication unit,
The authentication system according to claim 3 or 7, wherein the authentication device storage unit stores a counter value received by the authentication device communication unit. If the response information does not match the verification information as a result of the result determination unit comparing the response information with the verification information, the verification information generation unit uses the determination information used to generate the verification information. If it is success information, it is changed to failure information, and if it is failure information, the determination information is changed to success information, and verification information is newly generated,
The result determination unit compares the response information with newly generated verification information,
The request device communication unit, when the result determination unit compares the response information with the newly generated verification information, if the response information does not match the new verification information, the request device communication unit receives the counter value request command To the device,
The authentication device communication unit receives a counter value request command,
8. The authentication device communication unit, when the authentication device communication unit receives a counter value request command, transmits the counter value stored in the authentication device storage unit to the requesting device. The described authentication system. When an error occurs in the authentication device, the response information generation unit generates response information using error information indicating the error as result information,
The verification information generation unit generates verification information using error information as determination information,
The authentication system according to claim 1, wherein the result determination unit determines whether an error has occurred by comparing the response information with the verification information. 12. At least one of the authentication device and the request device includes an access control unit that restricts access to shared information based on predetermined access authority information. The described authentication system. An authentication method between the requesting device and the authentication device,
A request receiving step in which the authentication device receives authentication information; and
An authentication step in which the authentication device determines authentication success or authentication failure based on the authentication information received in the request reception step;
The authentication device shared in advance between the requesting device and the result information selected according to the authentication success or the authentication failure determined in the authentication step from the success information indicating the authentication success and the failure information indicating the authentication failure. A response information generating step for generating response information from the information;
A response information transmitting step in which the authentication device transmits the response information generated in the response information generating step to the requesting device;
A response information receiving step in which the requesting device receives the response information transmitted by the authentication device in the response information transmitting step;
Verification information generation in which the requesting device generates verification information from the determination information, which is one of the success information and the failure information, and the shared information shared in advance with the authentication device. Steps,
The request device includes a result determination step of comparing the response information received in the response information reception step with the verification information generated in the verification information generation step to determine authentication success or authentication failure. Authentication method. An authentication program comprising a request program for a request device and an authentication program for an authentication device,
The authentication program is:
A request reception process for receiving authentication information;
An authentication process for determining authentication success or authentication failure based on the authentication information received in the request reception process;
Result information selected according to authentication success or authentication failure determined in the authentication process from success information indicating authentication success and failure information indicating authentication failure, and shared information shared in advance by the authentication device with the requesting device Response information generation processing for generating response information from
Causing the computer to execute response information transmission processing for transmitting the response information generated in the response information generation processing to the requesting device;
The requesting device is:
A response information receiving process for receiving the response information transmitted in the response information transmitting process;
Verification information generation processing for generating verification information from determination information that is any one of the success information and the failure information, and shared information that the requesting device shares in advance with the authentication device;
Comparing the response information received in the response information reception process with the verification information generated in the verification information generation process, and causing the computer to execute a result determination process for determining success or failure in authentication. Authentication program. An authentication device communication unit that receives the authentication information via the communication device;
Based on the authentication information received by the authentication device communication unit, an authentication unit that determines the authentication success or the authentication failure by the processing device;
An authentication device storage unit for storing, in a storage device, shared information shared in advance with the requesting device;
Response information is processed from the result information selected according to the authentication success or the authentication failure determined by the authentication unit from the success information indicating the authentication success and the failure information indicating the authentication failure, and the shared information stored in the authentication device storage unit A response information generator generated by the device,
The authentication device communication unit transmits the response information generated by the response information generation unit to the requesting device via a communication device. A request device communication unit for receiving response information including result information indicating a result of the authentication device executing the authentication process from the authentication device;
A requesting device storage unit that stores, in a storage device, shared information shared in advance with the authentication device;
A verification information generating unit that generates verification information from the determination information, which is one of the success information and the failure information, and the shared information stored in the requesting device storage unit;
A response determination unit that compares the response information received by the requesting device communication unit with the verification information generated by the verification information generation unit, and includes a result determination unit that determines whether the authentication has succeeded or failed by the processing device. Request device. An authentication system comprising a request device and an authentication device, wherein the authentication device authenticates by receiving predetermined information from the request device,
The requesting device is:
A requesting device storage unit that stores, in a storage device, shared information shared in advance with the authentication device;
A request information generating unit that generates request information from the predetermined information and the shared information stored in the requesting device storage unit;
A request device communication unit that transmits the request information generated by the request information generation unit to the authentication device via a communication device;
The authentication device
An authentication device communication unit that receives the request information transmitted by the request device communication unit via the communication device;
An authentication device storage unit for storing, in a storage device, shared information shared in advance with the requesting device;
A verification information generation unit that generates verification information from the predetermined information and the shared information stored in the authentication device storage unit by a processing device;
An authentication unit comprising: an authentication unit that compares the request information received by the authentication device communication unit with the verification information generated by the verification information generation unit and determines whether authentication is successful or failed by a processing device. system.

Images