JP2012080214A - Key management system, management device, key management method and computer program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To reduce throughput at the point of time of invalidating a key of a certain device.SOLUTION: In order to match a key generated from the update value Wof first division information in common to respective devices and second division information Vof a device A to be invalidated and a key generated from the initial value Wof the first division information corresponding to the initial value of the key of the respective devices and the second division information Vof the device A, the update value Wof the first division information is set. When a first authentication key generated from the update value Wof the first division information and the second division information of a certain device and a second authentication key generated from the initial value Wof the first division information and the second division information of the device match, the device is rejected. When they do not match, the device is accepted. Authentication key difference information is generated and transmitted to the accepted device, and the match of an authentication key generated from the update value of the first division information and the second division information of a certain device and the authentication key of the device is inspected.

Description

  The present invention relates to a key management system, a management device, a key management method, and a computer program.

  Conventionally, when a device (for example, a mobile communication terminal, a personal computer, etc.) uses a service via a communication network, the device authenticates with the management server using its own authentication key. The management server manages the authentication key for each device (see, for example, Patent Document 1).

FIG. 20 is a graph for explaining a conventional authentication key management method. In FIG. 20, the relationship between an authentication key and its division | segmentation information is shown using the two-dimensional graph on a real number axis. Here, it is assumed that the management server manages the authentication keys of the two devices A and B in common. First, the management server holds initial division information W _{S, 0} common to the devices A and B. The device A holds initial division information V _{A, 0} and an initial authentication key K _{A, 0} . The device B holds initial division information V _{B, 0} and an initial authentication key K _{B, 0} .

In FIG. 20, the division information V _{A, 0} exists on a straight line connecting the authentication key K _{A, 0} and the division information W _{S, 0} . Similarly, the division information V _{B, 0} exists on a straight line connecting the authentication key K _{B, 0} and the division information W _{S, 0} . Thereby, the management server can restore the authentication key K _{A, 0} from the division information W _{S, 0} and the division information V _{A, 0} by receiving the division information V _{A, 0} from the device A. Then, the management server, by restoring authentication key K _{A, 0} and device A collates the authentication key K _{A, 0} for holding to authenticate the device A. Similarly, the management server, by receiving the divided information V _{B, 0} from the device B, it is possible to recover the authentication key K _{B, 0} from the divided information W _{S, 0} and division information V _{B, 0} Prefecture. Then, the management server, by restored authentication key K _{B, 0} and device B collates the authentication key K _{B, 0} to hold, to authenticate the device B.

Here, it is assumed that the service use registration of the device A is canceled. Then, the management server performs processing for invalidating the authentication key K _{A, 0} of the device A. Hereinafter, the process of invalidating the authentication key of the device may be referred to as “device invalidation”. The management server updates the division information W _{S, 0} held by itself to the division information W _{S, 1} in order to invalidate the device A. The division information W _{S, 1} does not exist on the straight line connecting the authentication key K _{A, 0} and the division information W _{S, 0,} and is on the straight line connecting the authentication key K _{B, 0} and the division information W _{S, 0.} Does not exist. Next, the management server generates the update information ΔV _{B, 0} of the division information for the device B that does not invalidate the device, and sends the update information ΔV _{B, 0} to the device B. The division information update information ΔV _{B, 0} is difference information between the division information V _{B, 0} and the division information V _{B, 1} . The device B obtains the division information V _{B, 1} from the update information ΔV _{B, 0} and the division information V _{B, 0} . The division information V _{B, 1} exists on a straight line connecting the authentication key K _{B, 0} and the division information W _{S, 1} . As a result, the management server receives the division information V _{B, 1} from the device B _, so that the authentication key K _{B, 0} can be restored from the division information W _{S, 1} and the division information V _{B, 1} . Then, the management server, by restored authentication key K _{B, 0} and device B collates the authentication key K _{B, 0} to hold, to authenticate the device B. As a result, the authentication of the device B is successful.

On the other hand, for the device A for which the device is invalidated, the division information V _{A, 0} held by the device A remains as it is. Therefore, the authentication key that the management server receives the division information V _{A, 0} from the device A and restores from the division information W _{S, 0} becomes the authentication key K _{A, 1} , and the authentication key K _A, Different from ₀ . As a result, the authentication of device A fails.

JP 2008-219177 A

  However, in the conventional authentication key management method described above, when a certain device is revoked, the update information of each division information is quickly generated for all devices that are not revoked. Must be sent. This places a heavy burden on the management server.

  The present invention has been made in view of such circumstances, and provides a key management system, a management apparatus, a key management method, and a computer program that can reduce the amount of processing at the time of invalidating a key of a device. The issue is to provide.

In order to solve the above-described problem, the key management system according to the present invention manages a key of a device by dividing the key into first division information common to each device and second division information individual to the device. In the key management system to be executed, when the key of a certain device is revoked, the key generated from the updated value of the first division information and the second division information of the device, and the initial value of the key of each device A division information management unit that sets an update value of the first division information so that an initial value of the first division information corresponding to the key and a key generated from the second division information of the device match The division information history information storage unit that stores the initial value of the first division information and the update value of the first division information, and the update value of the first division information as a first stage when authenticating a certain device And the second division information of the device If the first key generated and the second key generated from the initial value of the first division information and the second division information of the device match, the device is rejected and does not match. A verification unit that passes the device in case, a difference information generation unit that generates and transmits difference information between the first key and the second key for the passed device, and a certain device. As a second stage when authenticating, it has a key generated from the updated value of the first division information and the second division information of the device, and an authentication processing unit for checking a match between the key of the device A management apparatus, a division information storage unit that stores second division information of the own device, a key storage unit that stores an initial value of a key of the own device, and a first step of the authentication request of the own device 2 division information is transmitted to the management device. Using the request unit, the key correction unit that corrects the initial value of the key of the own device using the key difference information received from the management device, and the corrected key as the second stage of the authentication request of the own device And a device having an authentication processing unit for performing authentication processing.
In the key management system according to the present invention, a key generated so that a key of a certain device, first division information common to each device, and individual second division information in the device exist on the same line. In the management system, when the division information management unit invalidates a key of a certain device, the division information management unit and the first division information on the straight line connecting the second division information of the device and the first division information An arbitrary point excluding the second division information of the device and the second division information of the device is used as an update value of the first division information.

A key management system according to the present invention is a key management system in which a key of a certain device is divided and managed into first division information common to each device and individual second division information for the device. The key generated from the latest value of the first division information and the second division information of the device, the latest value of the first division information before the update, and the device The division information management unit that updates the latest value of the first division information so that the key generated from the two pieces of division information matches, and the first division information corresponding to the initial value of the key of each device. A division information history information storage unit that stores an initial value, an update value and update time information of the first division information, and an initial value and update of the first division information as a first stage when authenticating a certain device 2 continuous in time for the value For each set, the first key generated from one first division information and the second division information of the device, the other first division information, and the The second key generated from the second division information of the device is compared, and if at least one set matches, the device is rejected, and if all sets do not match, the device is determined to pass A verification unit, a key generated from the initial value of the first division information and the second division information of the device, the latest value of the first division information, and the second value of the device for the passed device As a second stage when authenticating a certain device, a difference information generating unit that generates and transmits difference information between the key generated from the divided information and the second value of the device and the second value of the device. Key generated from the partition information of the device and the device A management apparatus having an authentication processing unit that checks for a match with the device, a division information storage unit that stores the second division information of the own device, a key storage unit that stores an initial value of the key of the own device, The initial value of the key of the own device using the authorization request unit that transmits the second division information of the own device to the management apparatus as the first stage of the authentication request of the device and the difference information of the key received from the management apparatus And a device having an authentication processing unit that performs an authentication process with the management apparatus using the corrected key as a second stage of the authentication request of the device. And
In the key management system according to the present invention, a key generated so that a key of a certain device, first division information common to each device, and individual second division information in the device exist on the same line. In the management system, when the division information management unit invalidates a key of a certain device, the key of the device is on a straight line connecting the latest value of the first division information and the second division information of the device. And the latest value of the first division information and the second division information of the device are set as the latest value of the updated first division information.

  The management apparatus according to the present invention is a management apparatus in a key management system in which a key of a certain device is divided and managed into first division information common to each device and individual second division information for the device. When invalidating the key of a certain device, the key generated from the updated value of the first division information and the second division information of the device, and the first division corresponding to the initial value of the key of each device A division information management unit that sets an update value of the first division information so that an initial value of the information matches a key generated from the second division information of the device; A division information history information storage unit that stores an initial value and an update value of the first division information, and as a first stage when authenticating a certain device, an update value of the first division information and a second value of the device A first key generated from the division information; When the initial value of the division information of 1 and the second key generated from the second division information of the device match, the device is rejected, and when the device does not match, the device is passed. As a second stage when authenticating a certain device with a verification unit, a difference information generation unit that generates and transmits difference information between the first key and the second key for the passed device A key generated from the updated value of the first division information and the second division information of the device, and an authentication processing unit that checks a match between the key of the device.

  The management apparatus according to the present invention is a management apparatus in a key management system in which a key of a certain device is divided and managed into first division information common to each device and individual second division information for the device. When invalidating the key of a certain device, the key generated from the latest value of the first division information and the second division information of the device, the latest value of the first division information before the update, and the device A division information management unit that updates the latest value of the first division information so that a key generated from the second division information matches, and a first division corresponding to the initial value of the key of each device A division information history information storage unit that stores an initial value of information, an update value and update time information of the first division information, and an initial value of the first division information as a first step when authenticating a certain device And updated values in time A pair of two pieces of first division information that follow, a first key generated from one piece of first division information and second piece of division information of the device, and the other first division for each set The second key generated from the information and the second division information of the device is compared, and if at least one set matches, the device is rejected, and if all sets do not match, the device is A verification unit to be accepted, a key generated from the initial value of the first division information and the second division information of the device, the latest value of the first division information, and the device for the passed device A difference information generation unit that generates and transmits difference information between the key generated from the second division information and the latest value of the first division information and the device as a second stage when authenticating a certain device A key generated from the second division information of An authentication processing unit for checking the match between vice key, further comprising a characterized.

  The key management method according to the present invention is a key management method in a key management system in which a key of a certain device is divided and managed as first division information common to each device and individual second division information for the device. And when invalidating the key of a certain device, it corresponds to the key generated from the updated value of the first division information and the second division information of the device, and the initial value of the key of each device A step of setting an update value of the first division information so that a key generated from the initial value of the first division information matches the second division information of the device, and the first division information Recording the initial value of the first division information and the update value of the first division information, and, as a first step when authenticating a certain device, from the update value of the first division information and the second division information of the device The generated first key and the first division information The second key generated from the initial value and the second division information of the device matches the device, the device is rejected, and if the device does not match, the device is passed; And a step of generating and transmitting difference information between the first key and the second key to the device, and an updated value of the first division information as a second stage when authenticating a certain device. And a key generated from the second division information of the device and a step of checking a match between the key of the device and the device.

  The key management method according to the present invention is a key management method in a key management system in which a key of a certain device is divided and managed as first division information common to each device and individual second division information for the device. When the key of a certain device is invalidated, the key generated from the latest value of the first division information and the second division information of the device, and the latest of the first division information before the update Updating the latest value of the first division information so that the value and the key generated from the second division information of the device match, and the first value corresponding to the initial value of the key of each device The initial value of the division information, the update value of the first division information and the update time information are recorded, and the initial value and the update value of the first division information are used as a first stage when authenticating a certain device. 2nd consecutive in time For each set, the first key generated from one of the first division information and the second division information of the device, the other first division information and the first of the device. Comparing the second key generated from the division information of 2 and rejecting the device when at least one set matches, and passing the device when all sets do not match; and For the device that has passed, the key generated from the initial value of the first division information and the second division information of the device, the latest value of the first division information, and the second division information of the device Generated from the latest value of the first division information and the second division information of the device as the second stage when authenticating a device, and generating and transmitting difference information with the key generated from Key matches device key Characterized in that it comprises the steps of: examining.

The computer program according to the present invention performs key management processing in a key management system in which a key of a certain device is divided and managed as first division information common to each device and individual second division information for the device. And a key generated from the updated value of the first division information and the second division information of the device when the key of the device is revoked, and the key of each device Setting an update value of the first division information so that the key generated from the initial value of the first division information corresponding to the initial value matches the key generated from the second division information of the device; A step of recording an initial value of the first division information and an update value of the first division information, and as a first stage when authenticating a certain device, an update value of the first division information and a second value of the device Split If the first key generated from the information and the second key generated from the initial value of the first division information and the second division information of the device match, the device is rejected. A step of accepting the device in the case of a mismatch, a step of generating and transmitting difference information between the first key and the second key to the passed device; As a second stage when performing authentication, the computer executes a step of checking a match between the key generated from the updated value of the first division information and the second division information of the device and the key of the device It is a computer program for making it happen.
As a result, the above-described management apparatus can be realized using a computer.

The computer program according to the present invention performs key management processing in a key management system in which a key of a certain device is divided and managed as first division information common to each device and individual second division information for the device. A computer program for performing, when invalidating a key of a certain device, a key generated from the latest value of the first division information and the second division information of the device, and a first before update Updating the latest value of the first division information so that the key generated from the latest value of the division information and the second division information of the device matches the initial value of the key of each device. The step of recording the corresponding initial value of the first division information, the update value and the update time information of the first division information, and the initial stage of the first division information as a first stage when authenticating a certain device Value And first update information generated from the first division information of one device and the second division information of the device for each set. The key is compared with the second key generated from the other first division information and the second division information of the device, and if at least one set matches, the device is rejected and all sets A step in which the device is passed if the devices do not match, a key generated from the initial value of the first division information and the second division information of the device for the passed device, A step of generating and transmitting difference information between a key generated from the latest value of the division information of the device and the second division information of the device, and as a second stage when authenticating a certain device, the first division information Latest value and second split information of the device Characterized in that the key generated, a computer program for executing the steps of examining a match with the key of the device, to the computer and a.
As a result, the above-described management apparatus can be realized using a computer.

  According to the present invention, it is possible to reduce the processing amount when invalidating a key of a certain device.

It is a graph for demonstrating the authentication key management method which concerns on 1st Embodiment of this invention. It is a block diagram which shows the structure of the management server 2 which concerns on 1st Embodiment of this invention. It is a block diagram which shows the structure of the device 20 which concerns on 1st Embodiment of this invention. It is a conceptual diagram which shows the initial state which concerns on 1st Embodiment of this invention. It is a conceptual diagram which shows the procedure of invalidation of the device which concerns on 1st Embodiment of this invention. It is a conceptual diagram which shows the procedure of the authorization process of the device which concerns on 1st Embodiment of this invention. It is a conceptual diagram which shows the procedure of the authorization process and authentication process of a device which concern on 1st Embodiment of this invention. It is a graph for demonstrating the authentication key management method which concerns on 2nd Embodiment of this invention. It is a conceptual diagram which shows the procedure of the invalidation of the device which concerns on 2nd Embodiment of this invention. It is a conceptual diagram for demonstrating the authorization process of the device which concerns on 2nd Embodiment of this invention. It is a conceptual diagram which shows the procedure of the authorization process of the device which concerns on 2nd Embodiment of this invention. It is a conceptual diagram which shows the procedure of the authorization process and authentication process of a device which concern on 2nd Embodiment of this invention. It is an Example of the key management system which concerns on this invention. 6 is a graph for explaining a method of generating division information V _Z of a device Z. FIG. It is a graph for demonstrating the method in which the management server 2 which concerns on this invention performs invalidation of the device 20Z. Management server 2 according to the present invention, an example embodiment of a method of acquiring division information V _Z of the device 20Z to be invalidated. It is a graph for demonstrating the method the management server 2 which concerns on this invention produces | generates an authentication key in the authorization process of the device 20Z. It is a graph for demonstrating the method the management server 2 which concerns on this invention produces | generates authentication key difference information (DELTA) KZ _{, M.} It is a conceptual diagram which shows the procedure in which the management server 2 which concerns on this invention conceals authentication key difference information, and transmits to a device. It is a graph for demonstrating the conventional authentication key management method.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings.

[First Embodiment]
FIG. 1 is a graph for explaining an authentication key management method according to the first embodiment of the present invention. In FIG. 1, the relationship between an authentication key and its division | segmentation information is shown using the two-dimensional graph on a real number axis. Here, it is assumed that the management server manages the authentication keys of the two devices A and B in common. First, the management server holds initial division information W _{S, 0} common to the devices A and B. The device A holds the division information V _A and the initial authentication key K _{A, 0} . The device B holds the division information V _B and the initial authentication key K _{B, 0} .

In FIG. 1, the division information V _A exists on a straight line connecting the authentication key K _{A, 0} and the division information W _{S, 0} . Similarly, the division information V _B exists on a straight line connecting the authentication key K _{B, 0} and the division information W _{S, 0} . Thus, the management server, by receiving the divided information V _A from the device A, it is possible to recover the authentication key K _{A, 0} and a divided information W _{S, 0} and division information V _A. Then, the management server, by restoring authentication key K _{A, 0} and device A collates the authentication key K _{A, 0} for holding to authenticate the device A. Similarly, the management server, by receiving the divided information V _B from the device B, it is possible to recover the authentication key K _{B, 0} and a divided information W _{S, 0} and division information V _B. Then, the management server, by restored authentication key K _{B, 0} and device B collates the authentication key K _{B, 0} to hold, to authenticate the device B.

Here, it is assumed that the service use registration of the device A is canceled. Then, the management server performs processing for invalidating the authentication key K _{A, 0} of the device A. Hereinafter, the process of invalidating the authentication key of the device may be referred to as “device invalidation”. The management server updates the division information W _{S, 0} held by itself to the division information W _{S, 1} in order to invalidate the device A. The split information W _{S, 1} exists on a straight line connecting the authentication key K _{A, 0} , the split information W _{S, 0} and the split information V _A , and the split key W _{A, 0} and the split information W _{S, 0} It is an arbitrary point excluding the division information V _A. Therefore, the first authentication key K _{A, 1} restored from the updated division information W _{S, 1} and the division information V _{A of the} device A by the management server, and the initial division information W _{S, 0 by the} management server and the second authentication key K _{a, 0} restored from the divided information V _a of the device a match. In the present embodiment, when the first authentication key and the second authentication key match, the device A is regarded as an authentication failure.

On the other hand, for the device B for which the device is not invalidated, the management server restores the first authentication key K _{B, 1} restored from the updated division information W _{S, 1} and the division information V _{B of the} device B; The management server does not match the second authentication key K _{B, 0} restored from the initial division information W _{S, 0} and the division information V _{B of the} device B. In this embodiment, when the first authentication key and the second authentication key do not match, the device B is passed in the first stage of the authentication process, and the authentication process is continued.

Then, the management server for the device B that pass in the first stage of the authentication process to generate an authentication key difference information [Delta] K _{B, 1,} sends an authentication key difference information [Delta] K _{B, 1} to the device B. The authentication key difference information ΔK _{B, 1} is difference information between the initial authentication key K _{B, 0} of the device B and the authentication key K _{B, 1} . Accordingly, the device B can generate the authentication key K _{B, 1} using the authentication key difference information ΔK _{B, 1} and the initial authentication key K _{B, 0} . The authentication key K _{B, 1} exists on a straight line connecting the updated division information W _{S, 1} and the division information V _{B of the} device B. Thus, the management server, in the second stage of the authentication process, by receiving the divided information V _B from the device B, and division information after updating W _{S, 1} authentication key from and the division information V _B K _{B, 1} Can be restored. Then, the management server, by collating the authentication key K _{B, 1} in which the recovered authentication key K _{B, 1} and the device B was generated to authenticate the device B. As a result, the authentication of the device B is successful.

In the above authentication key management method, the timing for sending the authentication key difference information ΔK _{B, 1} to the device B that does not invalidate the device does not have to be immediately after the device A has been invalidated. Up to the second stage or in the second stage of the authentication process. Thereby, the processing amount of the management server at the time of invalidating the key of a certain device can be reduced.

FIG. 2 is a block diagram showing the configuration of the management server 2 according to the first embodiment of the present invention. In FIG. 2, the management server 2 includes a division information management unit 4, a division information history information storage unit 6, an authorization request information verification unit 8, a difference information generation unit 10, and an authentication processing unit 12.
When the division information management unit 4 receives a request for invalidation of a certain device, the division information management unit 4 updates the division information common to each device. The division information history information storage unit 6 stores an initial value and an update value of division information common to each device. The initial value of the division information common to each device corresponds to the initial value of the key of each device.

  The authorization request information verification unit 8 performs the first stage of the authentication process for the device. The difference information generation unit 10 generates and transmits authentication key difference information to a device that has passed in the first stage of the authentication process. The authentication processing unit 12 performs a first stage of authentication processing for the device.

FIG. 3 is a block diagram showing a configuration of the device 20 according to the first embodiment of the present invention. In FIG. 3, the device 20 includes an authorization request unit 22, a division information storage unit 24, an authentication key correction unit 26, an authentication key storage unit 28, and an authentication processing unit 30.
The authorization request unit 22 transmits the division information of the own device to the management server 2 to make an authorization request (a request corresponding to the first stage of the authentication process). The division information storage unit 24 stores the division information of the own device. The authentication key correction unit 26 corrects the initial authentication key of the own device using the authentication key difference information received from the management server 2. The authentication key storage unit 28 stores the initial authentication key of the device itself and the corrected authentication key. The authentication processing unit 30 makes an authentication request (a request corresponding to the second stage of the authentication process) to the management server 2 and performs authentication with the management server 2 using the corrected authentication key.

  Next, operations of the management server 2 and the device 20 according to the first embodiment will be sequentially described. In addition, the management server 2 and each device 20 shall transmit / receive data by communication. For example, data is transmitted and received via a communication network such as the Internet.

[initial state]
FIG. 4 is a conceptual diagram showing an initial state according to the first embodiment of the present invention. In FIG. 4, the management server 2 holds initial division information W _{S, 0} common to the devices 20A and 20B. In the management server 2, the division information history information storage unit 6 stores initial division information W _{S, 0} as the division information history information W _{S, R.} The device 20A holds the division information V _A and the initial authentication key K _{A, 0} . The device 20B holds the division information V _B and the initial authentication key K _{B, 0} .

Disable device
FIG. 5 is a conceptual diagram showing a device invalidation procedure according to the first embodiment of the present invention. Here, it is assumed that the device 20A is invalidated in the initial state shown in FIG.
Step S11: The device 20A transmits its division information V _A to the management server 2 and requests invalidation of its own device.

Step S12: In the management server 2, the division information management unit 4 uses the initial value (division information W _{S, 0} ) in the division information history information W _{S, R} and the division information V _{A of the} device 20A to determine the division information. An update value (division information W _{S, 1} ) is generated. As shown in FIG. 1 _{, the} division information W _{S, 1} exists on a straight line connecting the division information W _{S, 0} and the division information V _A , and the authentication key K _{A, 0} and the division information W _{S. , 0} and the division information V _A are arbitrary points.

Step S13: In the management server 2, the division information history information storage unit 6 stores the initial division information W _{S, 0} and the update value division information W _{S, 1} as the division information history information W _{S, R.} Thereby, in the division information history information W _{S, R} , the division information W _{S, 0} is an initial value, and the division information W _{S, 1} is an updated value.

[Device authorization process (first stage of authentication process)]
FIG. 6 is a conceptual diagram showing a procedure of device authorization processing according to the first embodiment of the present invention. Here, it is assumed that the authorization process for the device 20A is performed in a state where the device 20A shown in FIG. 5 is invalidated.
Step S21: The device 20A transmits its division information V _A to the management server 2 and requests authorization of the device.

Step S22: In the management server 2, the authorization request information verification unit 8 uses the update value (divided information W _{S, 1} ) in the divided information history information W _{S, R} and the divided information V _{A of the} device 20A to use the authentication key. # 1 (K _{A, 1} ) is generated. Further, the authorization request information verification unit 8 uses the initial value (division information W _{S, 0} ) in the division information history information W _{S, R} and the division information V _{A of the} device 20A to use the authentication key # 2 (K _{A , 0} ). Next, the authorization request information verification unit 8 compares the authentication key # 1 (K _{A, 1} ) with the authentication key # 2 (K _{A, 0} ). Here, since the device 20A has been invalidated, as shown in FIG. 1, “K _{A, 1} = K _{A, 0} ” and the authentication key # 1 (K _{A, 1} ) and authentication are performed. It matches the key # 2 (K _{A, 0} ).

Step S23: Since the authorization key # 1 (K _{A, 1} ) and the authentication key # 2 (K _{A, 0} ) match _{, the} authorization request information verification unit 8 rejects the device 20A from continuing the authentication process. Send notifications to As a result, the authentication of the device 20A fails.

[Device authorization process (first stage of authentication process) and authentication process (second stage of authentication process)]
FIG. 7 is a conceptual diagram showing the procedure of device authorization processing and authentication processing according to the first embodiment of the present invention. Here, it is assumed that the authorization process and the authentication process are performed for the device 20B in which the device is not invalidated in a state where the device 20A is invalidated as illustrated in FIG.
Step S31: The device 20B transmits its division information V _B to the management server 2 and requests authorization of its own device.

Step S32: In the management server 2, the authorization request information verification unit 8 uses the update value (divided information W _{S, 1} ) in the divided information history information W _{S, R} and the divided information V _{B of the} device 20B to use the authentication key. # 1 (K _{B, 1} ) is generated. In addition, the authorization request information verification unit 8 uses the initial value (division information W _{S, 0} ) in the division information history information W _{S, R} and the division information V _{B of the} device 20B to use the authentication key # 2 (K _{B , 0} ). Next, the authorization request information verification unit 8 compares the authentication key # 1 (K _{B, 1} ) with the authentication key # 2 (K _{B, 0} ). Here, since the device 20B has not been revoked, the authentication key # 1 (K _{B, 1} ) and the authentication key # 2 (K _{B, 0} ) do not match as shown in FIG. Become.

Step S33: the authorization request information verifying section 8, since the authentication key # ₁ (K _B, 1) and the authentication key # 2 (K _{B, 0)} becomes mismatched, the authentication key # 1 (K _B, 1) And authentication key # 2 (K _{B, 0} ) is calculated to generate authentication key difference information ΔK _{B, 1} .
Step S34: The authorization request information verification unit 8 transmits the authentication key difference information ΔKB _{, 1} to the device 20B.

Step S35: the device 20B corrects the authentication key difference information [Delta] K _{B, 1} authentication key K _{B, 0} their initial is used to obtain the authentication key K _{B, 1} corrected.
Step S36: The device 20B performs authentication with the management server 2 using the corrected authentication key KB _{, 1} . At this time, the management server 2 checks whether the authentication key # 1 (K _{B, 1} ) matches the authentication key K _{B, 1} of the device 20B. Thereby, the authentication of the device 20B is successful.

[Second Embodiment]
The second embodiment of the present invention is an extension of the above-described first embodiment so as to invalidate a plurality of devices. FIG. 8 is a graph for explaining an authentication key management method according to the second embodiment of the present invention. In FIG. 8, as in FIG. 1, the relationship between the authentication key and its division information is shown using a two-dimensional graph on the real axis. Here, it is assumed that the management server manages the authentication keys of the two devices A and B in common. Then, the management server sequentially invalidates the devices A and B.

First, the management server holds initial division information W _{S, 0} common to the devices A and B. The device A holds the division information V _A and the initial authentication key K _{A, 0} . The device B holds the division information V _B and the initial authentication key K _{B, 0} . The relationship between the division information V _A , the authentication key K _{A, 0} and the division information W _{S, 0} is the same as that in FIG. 1 and exists on the same straight line. Further, the relationship between the division information V _B , the authentication key K _{B, 0} and the division information W _{S, 0} is the same as that in FIG. 1 and exists on the same straight line.

In FIG. 8, the management server first updates the division information W _{S, 0} held by itself to the division information W _{S, 1} in order to invalidate the device A (update 1). The split information W _{S, 1} exists on a straight line connecting the authentication key K _{A, 0} , the split information W _{S, 0} and the split information V _A , and the split key W _{A, 0} and the split information W _{S, 0} It is an arbitrary point excluding the division information V _A. The relationship between the division information V _B , the authentication key K _{B, 1} and the division information W _{S, 1} is the same as that in FIG. 1 and exists on the same straight line.

Next, the management server 2 updates the division information W _{S, 1} to the division information W _{S, 2} in order to invalidate the device B (update 2). The division information W _{S, 2} exists on a straight line connecting the authentication key K _{B, 1} , the division information W _{S, 1} and the division information V _B , and the authentication key K _{B, 1} and the division information W _{S, 1} It is an arbitrary point excluding the division information V _B. Therefore, as shown in FIG. 8, the first authentication key K _{B, 2} restored from the updated division information W _{S, 2} and the division information V _{B of the} device B by the management server _, and the management server Therefore, the second authentication key K _{B, 1} restored from the division information W _{S, 1 of the} previous update value and the division information V _{B of the} device B coincides with each other. As a result, as in the first embodiment, the device B is regarded as an authentication failure.

On the other hand, as shown in FIG. 8, for the device A that has been previously invalidated, the management server restores the updated division information W _{S, 2} and the division information V _{A of the} device A. The first authentication key K _{A, 1} , the second authentication key K _{A, 1} restored by the management server from the divided information W _{S, 1} of the update value immediately before in time and the divided information V _{A of the} device A Is inconsistent. However, the first authentication key K _{A, 1} restored from the division information W _{S, 1} and the division information V _{A of the} device A by the management server and the division of the initial division information W _{S, 0} and the device A by the management server The second authentication key K _{A, 0} restored from the information V _A matches. Therefore, in the second embodiment, when at least one pair of the first authentication key and the second authentication key matches, the device is regarded as an authentication failure, and when all the sets do not match, The device is accepted in the first stage of the authentication process and the authentication process is continued.

  As described above, in the second embodiment, a set of two pieces of first division information that are temporally continuous with respect to an initial value and an update value of division information common to each device (first division information), For each set, the first authentication key generated from one first division information and the division information (second division information) of the device, the other first division information and the division information of the device ( The second key generated from the second division information), and if at least one set matches, the device is determined to be unsuccessful, and if all sets do not match, the device is subjected to authentication processing. The authentication process is continued in one stage and the authentication process is continued.

  Next, operations of the management server 2 and the device 20 according to the second embodiment will be sequentially described. The configurations of the management server 2 and the device 20 are the same as those in FIGS. In addition, the management server 2 and each device 20 shall transmit / receive data by communication.

Disable device
FIG. 9 is a conceptual diagram showing a device invalidation procedure according to the second embodiment of the present invention. Here, it is assumed that the device 20B is further invalidated in a state where the device 20A shown in FIG. 5 is invalidated.
Step S41: The device 20B transmits its division information V _B to the management server 2 and requests invalidation of its own device.

Step S42: In the management server 2, the division information management unit 4 divides the latest value in the division information history information W _{S, R} (here, the division information W _{S, 1} which is the only update value) and the division of the device 20B. Using the information V _B , the latest value of the division information (division information W _{S, 2} ) is generated. As shown in FIG. 8 _{, the} division information W _{S, 2} exists on a straight line connecting the division information W _{S, 1} and the division information V _B , and the authentication key K _{B, 1} and the division information W _{S. , 1} and the division information V _B are arbitrary points.

Step S43: In the management server 2, the division information history information storage unit 6 uses the initial division information W _{S, 0} and the update value division information W _{S, 1} , W _{S, 2} as the division information history information W _{S, R.} And update time information indicating the temporal order in which the update values are generated. Thereby, in the division information history information W _{S, R} , the division information W _{S, 0} is an initial value, the division information W _{S, 1} , W _{S, 2} is an update value, and the division information W _{S, 2} is the latest. Value. In addition, in the division information history information W _{S, R} , it can be seen which division information and which division information are temporally continuous.

[Device authorization process (first stage of authentication process)]
FIG. 10 is a conceptual diagram for explaining device authorization processing according to the second embodiment of the present invention. In FIG. 10, the division information history information storage unit 6 of the management server 2 includes initial division information W _{S, 0} and M update value division information W _{S, 1} , as division information history information W _{S, R.} ..., W _{S, M} and update time information indicating the temporal order in which the update values are generated are stored. M is the number of devices that have been invalidated.

As shown in FIG. 10, when invalidating a certain device Z, two pieces of temporally continuous division information in the division information history information W _{S, R} are set as a set, and one piece of division information and comparing the first authentication key generated from the division information V _Z of the device Z, a second key generated from the division information V _Z of the other division information and the device Z, at least one pair matches In this case, the device Z is determined to be an authentication failure, and if all the sets do not match, the device Z is determined to pass in the first stage of the authentication processing, and the authentication processing is continued.

FIG. 11 is a conceptual diagram showing a procedure of device authorization processing according to the second embodiment of the present invention. Here, it is assumed that the authorization process of the device 20A is performed in a state where the devices 20A and 20B shown in FIG. 9 are invalidated.
Step S51: The device 20A transmits its division information V _A to the management server 2 and requests authorization of the own device.

Step S52: In the management server 2, the authorization request information verification unit 8 performs the division information V _{S, 0} , W _{S, 1} , W _{S, 2} and the division information V of the device 20A in the division information history information W _{S, R. Using A} , three authentication keys K _{A, 0} , K _{A, 1} and K _{A, 2} are generated. Next, the authorization request information verification unit 8 sets two pieces of divided information that are temporally continuous as divided information W _{S, 0} , W _{S, 1} , W _{S, 2} , and compares the authentication keys for each set. As a result, the authentication key # 1 (K _{A, 2} ) generated from the divided information W _{S, 2} and the divided information V _A and the authentication key generated from the divided information W _{S, 1} and the divided information V _A ( As a result of comparison with K _{A, 1} ), there is a discrepancy. Further, the partition information W _{S, 1} and split information V _A generated from the authentication key (K _{A, 1),} the partition information W _{S, 0} and division information V _A authentication key is generated from the # 2 (K _{A, 0} ) is compared, and the result is a match.

Step S53: Since the authentication key (K _{A, 1} ) and the authentication key # 2 (K _{A, 0} ) match _{, the} authorization request information verification unit 8 notifies the device 20A of refusing to continue the authentication process. Send. As a result, the authentication of the device 20A fails.

[Device authorization process (first stage of authentication process) and authentication process (second stage of authentication process)]
FIG. 12 is a conceptual diagram showing the procedure of device authorization processing and authentication processing according to the second embodiment of the present invention. Here, in the state where the devices 20A and 20B shown in FIG. 9 are invalidated, the authorization process and the authentication process of the device 20C that is not invalidated are performed.
Step S61: The device 20C transmits its division information V _C to the management server 2 and requests authorization of its own device.

Step S62: In the management server 2, the authorization request information verification unit 8 makes all the pieces of division information W _{S, 0} , W _{S, 1} , W _{S, 2} in the division information history information W _{S, R} and the division information V of the device 20C. _{Using C} , three authentication keys K _{C, 0} , K _{C, 1} and K _{C, 2} are generated. Next, the authorization request information verification unit 8 sets two pieces of divided information that are temporally continuous as divided information W _{S, 0} , W _{S, 1} , W _{S, 2} , and compares the authentication keys for each set. As a result, the authentication key # 1 (K _{C, 2} ) generated from the divided information W _{S, 2} and the divided information V _C and the authentication key generated from the divided information W _{S, 1} and the divided information V _C ( As a result of comparison with K _{C, 1} ), there is a mismatch. Further, the partition information W _{S, 1} and split information V _C generated from the authentication key (K _{C, 1),} the partition information W _{S, 0} and division information V _C authentication key is generated from the # 2 (K As a result of comparison with ( _{C, 0} ), there is a mismatch.

Step S63: The authorization request information verification unit 8 does not match the comparison result of the authentication keys in all the pairs, so the authentication key # 1 (K _{C, 2} ) corresponding to the latest update value division information W _{S, 2} And authentication key difference information ΔK _{C, 2} is generated by calculating the difference between the authentication key # 2 (K _{C, 0} ) corresponding to the initial division information W _{S, 0} .
Step S64: The authorization request information verification unit 8 transmits the authentication key difference information ΔK _{C, 2} to the device 20C.

Step S65: the device 20C using the authentication key difference information [Delta] K _{C, 2} to correct their initial authentication key K _{C, 0,} obtain the authentication key K _{C, 2} corrected.
Step S66: The device 20C performs authentication with the management server 2 using the corrected authentication key K _{C, 2} . At this time, the management server 2 checks whether the authentication key # 1 (K _{C, 2} ) matches the authentication key K _{C, 2} of the device 20C. Thereby, the authentication of the device 20C is successful.

  Next, an embodiment of the key management system according to the present invention will be described.

  FIG. 13 shows an embodiment of a key management system according to the present invention. In FIG. 13, the management server 2 is connected to a mobile phone network and the Internet. The device 20Z is connected to the Internet. The device 20Z transmits / receives data to / from the mobile phone 50 using the short-range wireless system. The management server 2 transmits / receives data to / from the mobile phone 50 via the mobile phone network. The mobile communication network is a secure communication network provided by a communication carrier. As the short-range wireless system, for example, a non-contact IC card technology is used.

Step S101: The mobile phone 50 accesses the management server 2 via the mobile communication network.
Step S102: The mobile phone 50 acquires the division information and the initial authentication key of the device 20Z from the management server 2.
Step S103: The mobile phone 50 transmits the division information of the device 20Z and the initial authentication key to the device 20Z using the short-range wireless communication system.

  The device division information and the initial authentication key may be performed by an apparatus other than the management server 2.

FIG. 14 is a graph for explaining a method of generating the division information V _Z of the device Z. In the two-dimensional graph of the real axis shown in FIG. 14, the division information V _{Z of the} device 20Z is used by using the division information W _{S, 0} held by the management server 2 and the initial authentication key K _{Z, 0} of the device 20Z. Is generated. Hereinafter, it is assumed that b is “b = 2 ^L −1”. L is the number of bits of the authentication key.

In FIG. 14, first, a linear expression f _{Z, 0} on a finite field F _b passing through two points “(0, K _{Z, 0} ), W _{S, 0} = (w _{x, 0} , w _{y, 0} )”. (X) is derived. Next, a point (v _{z, x} , v _{z, y} ) on f _{Z, 0} (x) that satisfies “v _{z, y} = f _{Z, 0} (v _{z, x} )” is set as division information V _Z.

FIG. 15 is a graph for explaining a method in which the management server 2 invalidates the device 20Z. In the two-dimensional graph of the real axis shown in FIG. 15, first, two points “V _Z = (v _{z, x} , v _{z, y} ), W _{S, 0} = (w _{x, 0} , w _{y, 0} )” A linear expression f _{Z, 0} (x) on the finite field F _b passing through is derived. Next, on f _{Z, 0} (x), two points “V _Z = (v _{z, x} , v _{z, y} ), W _{S, 0} = (w _{x, 0} , w _{y, 0} )” and the authentication key Arbitrary points excluding K _{Z, 0} are set as division information “W _{S, 1} = (w _{x, 1} , w _{y, 1} )”. Next, initial division information W _{S, 0} and update value division information W _{S, 1} are stored as division information history information W _{S, R.}

In addition, there are the following embodiments (1), (2), and (3) as a method for the management server 2 to acquire the division information V _Z of the device 20Z to be invalidated.
(1) Obtained from the device 20Z to be invalidated. For example, in the example of FIG. 5, the device 20A to be invalidated transmits the division information V _A to the management server 2 itself.
(2) Obtained from the device that generated and distributed the initial authentication key and the division information of the device 20Z. In the example of FIG. 16, the mobile phone 50 transmits the division information V _Z of the device 20Z to be invalidated to the management server 2 (S201), and the management server 2 invalidates the device 20Z (S202).
(3) The management server 2 separately generates division information V _Z of the device 20Z to be invalidated. For example, the division information V _Z of the device 20Z is set in advance as a value that can be generated from the identifier ID _{Z of the} device 20Z. When the management server 2 invalidates the device, the management server 2 generates the division information V _Z of the device 20Z from the identifier ID _Z of the device 20Z. As a specific example,
V _Z = (v _{z, x} , v _{z, y} ) = (ID _Z , h (MK _S || ID _Z ))
However, MK _S is the master key of the management server 2, h () is a one-way function.

FIG. 17 is a graph for explaining a method in which the management server 2 generates an authentication key in the authorization process of the device 20Z. In the two-dimensional graph of the real axis shown in FIG. 17, first, two points “V _Z = (v _{z, x} , v _{z, y} ), W _{S, 1} = (w _{x, 1} , w _{y, 1} )” A linear expression f _{Z, 1} (x) on the finite field F _b passing through is derived. Then, the K _{Z, 1} becomes _{"K Z, 1 = f Z,} 1 (0) " and the authentication key.

FIG. 18 is a graph for explaining a method in which the management server 2 generates the authentication key difference information ΔK _{Z, M.} In the two-dimensional graph of the real axis shown in FIG. 18, first, two points “V _Z = (v _{z, x} , v _{z, y} ), W _{S, 0} = (w _{x, 0} , w _{y, 0} )” A linear expression f _{Z, 0} (x) on the finite field F _b passing through is derived. Next, an authentication key “K _{Z, 0} = f _{Z, 0} (0) mod b” is calculated. Next, a linear expression f _Z on the finite field F _b passing through two points “V _Z = (v _{z, x} , v _{z, y} ), W _{S, M} = (w _{x, M} , w _{y, M} )”. _{, M} (x). Next, an authentication key “K _{Z, M} = f _{Z, M} (0) mod b” is calculated. Next, authentication key difference information “ΔK _{Z, M} = K _{Z, M} −K _{Z, 0} mod b” is calculated.

As a method for the device 20Z to correct the authentication key K _{Z, 0} using the authentication key difference information ΔK _{Z, M} , the corrected authentication key “K _{Z, M} = authentication key K _{Z, 0} + ΔK _{Z , M} mod b ".

FIG. 19 is a conceptual diagram illustrating a procedure in which the management server 2 conceals authentication key difference information and transmits it to the device.
Step S301: The device 20Z transmits the division information V _Z to the management server 2 and requests authorization.
Step S302: The management server 2 has passed the authorization process _, and generates authentication key difference information ΔK _{Z, M.}
Step S303: The management server 2 uses the authentication key # 2 (K _{Z, 0} ) restored from the initial division information W _{S, 0} and the division information V _Z in the division information history information as an encryption key for authentication. The key difference information ΔK _{Z, M} is encrypted.
Step S304: The management server 2, the authentication key difference information [Delta] K _{Z, M} is encrypted encrypted division information C _Z, sends the _M to the device 20Z.
Step S305: The device 20Z decrypts the encrypted division information C _{Z, M} with the authentication key K _{Z, 0} .
Step S306: The device 20Z corrects the authentication key K _{Z, 0} using the authentication key difference information ΔK _{Z, M} decrypted from the encrypted division information C _{Z, M ,} and uses the corrected authentication key K _{Z, M.} obtain.

  By concealing the authentication key difference information, (1) to prevent other devices from intercepting the authentication key difference information, and (2) the invalidated device transmitting division information different from its own division information. Thus, it is possible to obtain an effect such as preventing unauthorized acquisition of authentication key difference information.

Further, a program for realizing each step performed by the management server 2 according to the first embodiment or the second embodiment described above is recorded on a computer-readable recording medium, and the program recorded on the recording medium is recorded on the computer. Key management processing may be performed by causing the system to read and execute. Here, the “computer system” may include an OS and hardware such as peripheral devices.
“Computer-readable recording medium” refers to a flexible disk, a magneto-optical disk, a ROM, a writable nonvolatile memory such as a flash memory, a portable medium such as a DVD (Digital Versatile Disk), and a built-in computer system. A storage device such as a hard disk.

Further, the “computer-readable recording medium” means a volatile memory (for example, DRAM (Dynamic DRAM) in a computer system that becomes a server or a client when a program is transmitted through a network such as the Internet or a communication line such as a telephone line. Random Access Memory)), etc., which hold programs for a certain period of time.
The program may be transmitted from a computer system storing the program in a storage device or the like to another computer system via a transmission medium or by a transmission wave in the transmission medium. Here, the “transmission medium” for transmitting the program refers to a medium having a function of transmitting information, such as a network (communication network) such as the Internet or a communication line (communication line) such as a telephone line.
The program may be for realizing a part of the functions described above. Furthermore, what can implement | achieve the function mentioned above in combination with the program already recorded on the computer system, and what is called a difference file (difference program) may be sufficient.

  As mentioned above, although embodiment of this invention was explained in full detail with reference to drawings, the specific structure is not restricted to this embodiment, The design change etc. of the range which does not deviate from the summary of this invention are included.

DESCRIPTION OF SYMBOLS 2 ... Management server, 4 ... Division information management part, 6 ... Division information history information storage part, 8 ... Authorization request information verification part, 10 ... Difference information generation part, 12 ... Authentication processing part, 20 ... Device, 22 ... Authorization request , 24 ... division information storage unit, 26 ... authentication key correction unit, 28 ... authentication key storage unit, 30 ... authentication processing unit

Claims (10)

In a key management system in which a key of a device is divided and managed into first division information common to each device and individual second division information for the device,
When invalidating the key of a certain device, the key generated from the updated value of the first division information and the second division information of the device, and the first division corresponding to the initial value of the key of each device A division information management unit that sets an update value of the first division information so that an initial value of the information matches a key generated from the second division information of the device;
A division information history information storage unit that stores an initial value of the first division information and an updated value of the first division information;
As a first stage when authenticating a certain device, the first key generated from the updated value of the first division information and the second division information of the device, the initial value of the first division information, and the device A verification unit that rejects the device when the second key generated from the second division information matches, and rejects the device when mismatched,
A difference information generation unit that generates and transmits difference information between the first key and the second key for the device that has passed.
As a second stage when authenticating a certain device, an authentication processing unit that checks a match between the key generated from the updated value of the first division information and the second division information of the device, and the key of the device; A management device having
A division information storage unit that stores second division information of the device itself;
A key storage unit for storing an initial value of the key of the own device;
An authorization request unit that transmits the second division information of the own device to the management apparatus as a first stage of the authentication request of the own device;
Using the key difference information received from the management device, the key correction unit for correcting the initial value of the key of the own device;
A device having an authentication processing unit that performs authentication processing with the management device using the corrected key as a second stage of the authentication request of the own device;
A key management system characterized by comprising: A key management system generated so that a key of a certain device, first division information common to each device, and individual second division information of the device exist on the same line,
When the division information management unit invalidates a key of a certain device, the division information management unit, on the line connecting the first division information and the second division information of the device, the key of the device, the first division information, and the An arbitrary point excluding the second division information of the device is set as an update value of the first division information.
The key management system according to claim 1. In a key management system in which a key of a device is divided and managed into first division information common to each device and individual second division information for the device,
When invalidating the key of a certain device, the key generated from the latest value of the first division information and the second division information of the device, the latest value of the first division information before the update, and the device A division information management unit that updates the latest value of the first division information so that a key generated from the second division information matches,
A division information history information storage unit that stores an initial value of the first division information corresponding to the initial value of the key of each device, and an update value and update time information of the first division information;
As a first step when authenticating a certain device, two first pieces of divided information that are temporally continuous with respect to the initial value and the updated value of the first piece of divided information are used as a set, and for each set, one first A first key generated from one division information and the second division information of the device, and a second key generated from the other first division information and the second division information of the device. In comparison, if at least one set matches, the verification unit rejects the device, and if all sets do not match, the verification unit to pass the device,
For the device that has passed, the key generated from the initial value of the first division information and the second division information of the device, the latest value of the first division information, and the second division information of the device A difference information generation unit that generates and transmits difference information with the key generated from
As a second stage when authenticating a certain device, an authentication processing unit that checks a match between the key generated from the latest value of the first division information and the second division information of the device and the key of the device; A management device having
A division information storage unit that stores second division information of the device itself;
A key storage unit for storing an initial value of the key of the own device;
An authorization request unit that transmits the second division information of the own device to the management apparatus as a first stage of the authentication request of the own device;
Using the key difference information received from the management device, the key correction unit for correcting the initial value of the key of the own device;
A device having an authentication processing unit that performs authentication processing with the management device using the corrected key as a second stage of the authentication request of the own device;
A key management system characterized by comprising: A key management system generated so that a key of a certain device, first division information common to each device, and individual second division information of the device exist on the same line,
When the division information management unit invalidates a key of a certain device, the division information management unit and the first division of the key of the device on a straight line connecting the latest value of the first division information and the second division information of the device An arbitrary point excluding the latest value of information and the second division information of the device is set to the latest value of the first division information after update.
The key management system according to claim 3. In a management device in a key management system in which a key of a device is divided and managed into first division information common to each device and individual second division information for the device,
When invalidating the key of a certain device, the key generated from the updated value of the first division information and the second division information of the device, and the first division corresponding to the initial value of the key of each device A division information management unit that sets an update value of the first division information so that an initial value of the information matches a key generated from the second division information of the device;
A division information history information storage unit that stores an initial value of the first division information and an updated value of the first division information;
As a first stage when authenticating a certain device, the first key generated from the updated value of the first division information and the second division information of the device, the initial value of the first division information, and the device A verification unit that rejects the device when the second key generated from the second division information matches, and rejects the device when mismatched,
A difference information generation unit that generates and transmits difference information between the first key and the second key for the device that has passed.
As a second stage when authenticating a certain device, an authentication processing unit that checks a match between the key generated from the updated value of the first division information and the second division information of the device, and the key of the device; ,
A management apparatus comprising: In a management device in a key management system in which a key of a device is divided and managed into first division information common to each device and individual second division information for the device,
When invalidating the key of a certain device, the key generated from the latest value of the first division information and the second division information of the device, the latest value of the first division information before the update, and the device A division information management unit that updates the latest value of the first division information so that a key generated from the second division information matches,
A division information history information storage unit that stores an initial value of the first division information corresponding to the initial value of the key of each device, and an update value and update time information of the first division information;
As a first step when authenticating a certain device, two first pieces of divided information that are temporally continuous with respect to the initial value and the updated value of the first piece of divided information are used as a set, and for each set, one first A first key generated from one division information and the second division information of the device, and a second key generated from the other first division information and the second division information of the device. In comparison, if at least one set matches, the verification unit rejects the device, and if all sets do not match, the verification unit to pass the device,
For the device that has passed, the key generated from the initial value of the first division information and the second division information of the device, the latest value of the first division information, and the second division information of the device A difference information generation unit that generates and transmits difference information with the key generated from
As a second stage when authenticating a certain device, an authentication processing unit that checks a match between the key generated from the latest value of the first division information and the second division information of the device and the key of the device; ,
A management apparatus comprising: A key management method in a key management system in which a key of a certain device is divided and managed into first division information common to each device and second division information individual to the device,
When invalidating the key of a certain device, the key generated from the updated value of the first division information and the second division information of the device, and the first division corresponding to the initial value of the key of each device Setting an update value of the first division information so that an initial value of the information matches a key generated from the second division information of the device;
Recording an initial value of the first division information and an updated value of the first division information;
As a first stage when authenticating a certain device, the first key generated from the updated value of the first division information and the second division information of the device, the initial value of the first division information, and the device When the second key generated from the second division information matches, the device is rejected, and when the second key is not matched, the device is passed.
Generating and transmitting difference information between the first key and the second key to the passed device;
As a second step when authenticating a certain device, a step of checking a match between the key generated from the updated value of the first division information and the second division information of the device and the key of the device;
A key management method comprising: A key management method in a key management system in which a key of a certain device is divided and managed into first division information common to each device and second division information individual to the device,
When invalidating the key of a certain device, the key generated from the latest value of the first division information and the second division information of the device, the latest value of the first division information before the update, and the device Updating the latest value of the first division information so that the key generated from the second division information matches,
Recording the initial value of the first division information corresponding to the initial value of the key of each device, the update value and the update time information of the first division information;
As a first step when authenticating a certain device, two first pieces of divided information that are temporally continuous with respect to the initial value and the updated value of the first piece of divided information are used as a set, and for each set, one first A first key generated from one division information and the second division information of the device, and a second key generated from the other first division information and the second division information of the device. Comparing, rejecting the device if at least one set matches, and passing the device if all sets do not match;
For the device that has passed, the key generated from the initial value of the first division information and the second division information of the device, the latest value of the first division information, and the second division information of the device Generating and transmitting difference information with the key generated from
As a second stage when authenticating a certain device, a step of checking a match between the key generated from the latest value of the first division information and the second division information of the device and the key of the device;
A key management method comprising: A computer program for performing key management processing in a key management system in which a key of a device is divided and managed into first division information common to each device and individual second division information for the device. ,
When invalidating the key of a certain device, the key generated from the updated value of the first division information and the second division information of the device, and the first division corresponding to the initial value of the key of each device Setting an update value of the first division information so that an initial value of the information matches a key generated from the second division information of the device;
Recording an initial value of the first division information and an updated value of the first division information;
As a first stage when authenticating a certain device, the first key generated from the updated value of the first division information and the second division information of the device, the initial value of the first division information, and the device When the second key generated from the second division information matches, the device is rejected, and when the second key is not matched, the device is passed.
Generating and transmitting difference information between the first key and the second key to the passed device;
As a second step when authenticating a certain device, a step of checking a match between the key generated from the updated value of the first division information and the second division information of the device and the key of the device;
A computer program for causing a computer to execute. A computer program for performing key management processing in a key management system in which a key of a device is divided and managed into first division information common to each device and individual second division information for the device. ,
When invalidating the key of a certain device, the key generated from the latest value of the first division information and the second division information of the device, the latest value of the first division information before the update, and the device Updating the latest value of the first division information so that the key generated from the second division information matches,
Recording the initial value of the first division information corresponding to the initial value of the key of each device, the update value and the update time information of the first division information;
As a first step when authenticating a certain device, two first pieces of divided information that are temporally continuous with respect to the initial value and the updated value of the first piece of divided information are used as a set, and for each set, one first A first key generated from one division information and the second division information of the device, and a second key generated from the other first division information and the second division information of the device. Comparing, rejecting the device if at least one set matches, and passing the device if all sets do not match;
For the device that has passed, the key generated from the initial value of the first division information and the second division information of the device, the latest value of the first division information, and the second division information of the device Generating and transmitting difference information with the key generated from
As a second stage when authenticating a certain device, a step of checking a match between the key generated from the latest value of the first division information and the second division information of the device and the key of the device;
A computer program for causing a computer to execute.

Images