JP2012212405A - Application authentication system, application authentication method, and program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To enable an application of an open terminal to be securely utilized by using a user identification module card such as a UIM.SOLUTION: An application authentication system 1 comprises: a portable phone 10 having an application 100 performing authentication processing in cooperation with an authentication application 200; and a UIM card 20 having the authentication application 200. The application 100 performs authentication of the UIM card 20 by using prestored preprocessing information and an authentication key received from the authentication application 200. Also, the authentication application 200 determines whether the application 100 has been tampered with by comparing proper conversion information generated by a prestored proper application 100 which has not been tampered with and conversion information generated by the application 100 in the potable phone 10.

Description

  The present invention relates to an application authentication system, an application authentication method, and a program using a user identification module card such as UIM in an open terminal application.

  In recent years, in order to make common use of applications and know-how of PC (Personal Computer), it has shifted to an open platform such as Android (registered trademark). Information having highly confidential information such as personal information or information exchanged via a network even in a terminal equipped with an open platform such as Android (registered trademark), in other words, an open terminal such as a smartphone. However, since the content is highly confidential, strong security measures are required. Currently, most security measures for open terminals are to investigate and implement platform security measures when designing applications, and to implement additional security measures for each application.

http: // journal. mycom. co. jp / articles / 2010/06/02 / mcafee / index. html [searched on March 9, 2011]

  However, since open terminals have an open environment, many new vulnerabilities have been discovered, and each time they have to be used with some countermeasures. In addition, due to such problems, current security measures are not strong, and it is not desirable to use applications in fields requiring high security such as mobile banking on open terminals. It was.

  Accordingly, the present invention has been made in view of the above-described problems, and the present invention uses application authentication that enables an open terminal application to be securely used by using a user identification module card such as UIM. It is an object to provide a system, an application authentication method, and a program.

  The present invention proposes the following matters in order to solve the above problems. In addition, in order to make an understanding easy, although the code | symbol corresponding to embodiment of this invention is attached | subjected and demonstrated, it is not limited to this.

  (1) The present invention includes an application that performs authentication processing in cooperation with an authentication application, and includes an open terminal equipped with an open platform, and a user identification module that includes the authentication application and is inserted into and removed from the open terminal. A key information storage means for storing a first authentication key, a second authentication key, and normal conversion information (for example, the key information storage of FIG. 2). Unit 201) and a first transmission means (for example, the authentication key transmission unit 202 in FIG. 2) for transmitting the stored second authentication key to the application. Pre-processing information storage means for storing the pre-processing information generated from the authentication key and the second authentication key (for example, before the processing shown in FIG. Authentication for determining whether or not the user identification module card can be authenticated based on whether or not the first authentication key can be acquired from the stored pre-processing information by the received physical authentication storage unit 101) and the received second authentication key The application is converted by a one-way function when it is determined that authentication is possible because the first authentication key is obtained from the means (for example, the authentication unit 103 in FIG. 2) and the stored preprocessing information. Then, the conversion information generation unit (for example, the conversion information generation unit 104 in FIG. 2) that generates the conversion information and the generated conversion information are encrypted with the first authentication key acquired by the authentication unit, and encrypted. An authentication key encryption unit (for example, the authentication key encryption unit 105 in FIG. 2) that transmits the converted information to the authentication application, and the authentication application further receives the conversion information. Authentication key decryption means (for example, the authentication key decryption unit 203 in FIG. 2) for decrypting the encrypted conversion information with the first authentication key stored therein, decrypted conversion information, And the stored normal conversion information, and a falsification determination unit (for example, the falsification determination unit 204 in FIG. 2) that determines whether the application has been falsified, the decrypted conversion information, and the normal conversion information If the two match, and it is determined that they have not been tampered with, two random numbers are generated, and the two generated random numbers are stored in the key information storage unit as the first authentication key and the second authentication key, respectively. Authentication key generation means (for example, the authentication key generation unit 205 in FIG. 2), the generated first authentication key and the generated second authentication key from the generated second authentication key, and the generated preprocessing information as the application Send to An application authentication system comprising: a processing information generation unit (for example, the preprocessing information generation unit 206 in FIG. 2), wherein the application stores the received preprocessing information in the preprocessing information storage unit. is suggesting.

  According to this invention, the key information storage means stores the first authentication key, the second authentication key, and the normal conversion information. The first transmission unit transmits the second authentication key stored in the key information storage unit to the application. The preprocessing information storage unit stores preprocessing information generated from the first authentication key and the second authentication key. The authentication unit determines whether or not the user identification module card can be authenticated based on whether or not the first authentication key can be acquired from the stored pre-processing information using the received second authentication key. The conversion information generation unit converts the application with a one-way function and generates conversion information when determining that authentication is possible because the first authentication key has been acquired from the stored preprocessing information. The authentication key encryption unit encrypts the generated conversion information with the first authentication key acquired by the authentication unit, and transmits the encrypted conversion information to the authentication application. The authentication key decryption means decrypts the received encrypted conversion information with the stored first authentication key. The tampering determination means compares the decrypted conversion information and the stored normal conversion information to determine whether the application has been tampered with. The authentication key generation unit generates two random numbers when the decrypted conversion information matches the normal conversion information and determines that the information has not been tampered with, and each of the two generated random numbers is subjected to the first authentication. The key and the second authentication key are stored in the key information storage means. The preprocessing information generation unit generates preprocessing information from the generated first authentication key and second authentication key, and transmits the generated preprocessing information to the application. The application stores the received preprocessing information in the preprocessing information storage unit. Therefore, after authenticating the user identification module card using the preprocessing information stored in advance in the application of the open terminal, the regular application stored in advance in the authentication application of the user identification module card is expressed by a one-way function. The user identification module card is used by comparing the result of conversion (regular conversion information) with the result of conversion of the application with a one-way function (conversion information) to ensure that the application on the open terminal has not been tampered with. Thus, it is possible to use the open terminal application securely.

  (2) The present invention provides the application authentication system according to (1), wherein the stored preprocessing information includes the first authentication key and the second authentication key generated by the preprocessing information generation unit. Is generated by computing with a password, and the authentication means uses the received second authentication key and the password received from the user to store the first authentication key from the stored preprocessing information. Whether the user identification module card can be authenticated or not, and the authentication key encryption unit acquires the authentication information by combining the acquired conversion information and the password received from the user. The authentication key decrypting means encrypts the received conversion information combined with the password by using the first authentication key. The, and decoded by the first authentication key that is the storage, proposes an application authentication system characterized by extracting and said and said conversion information password.

  According to the present invention, the stored preprocessing information is generated by computing the first authentication key and the second authentication key generated by the preprocessing information generating means using the password. The authentication means determines whether or not the user identification module card can be authenticated based on whether or not the first authentication key can be acquired from the stored preprocessing information based on the received second authentication key and the password received from the user. The authentication key encryption means combines the acquired conversion information and the password received from the user, and encrypts the first authentication key acquired by the authentication means. The authentication key decryption means receives the received password Encryption of the conversion information combined with is decrypted with the stored first authentication key, and the conversion information and the password are extracted. Therefore, by using the password received from the user for generating the preprocessing information, it is possible to check whether the preprocessing user and the current processing user match and prevent the use of different users. It is possible to use these applications securely.

  (3) In the application authentication system according to (1) or (2), the key information storage unit further stores a secret key, a public key corresponding to the secret key, and a common key. The application includes a common key encryption unit (for example, the common key encryption unit 227 in FIG. 6) that encrypts the public key with the common key and transmits the encrypted public key. A common key recovery means (for example, the common key recovery unit 126 in FIG. 6) that recovers the common key by collecting a plurality of distributed and stored fragments of the common key, and the received encrypted public key And a common key decryption unit (for example, the common key decryption unit 127 in FIG. 6) for decrypting with the restored common key, and the first transmission unit stores the second authentication stored in the first authentication unit. Key Encrypted with a secret key and transmitted to the application, the authentication means decrypts the received encrypted second authentication key with the decrypted public key, and decrypted the second authentication key. An application authentication system is proposed in which whether or not the user identification module card can be authenticated is determined based on whether or not the first authentication key can be acquired from the stored preprocessing information using a key.

  According to this invention, the key information storage means further stores a secret key, a public key corresponding to the secret key, and a common key. The common key encryption means encrypts the public key with the common key and transmits the encrypted public key. The common key recovery means recovers the common key by collecting a plurality of common key fragments distributed and stored in the application. The first transmission means encrypts the stored second authentication key with a secret key and transmits it to the application. The authentication means decrypts the received encrypted second authentication key with the decrypted public key, and uses the decrypted second authentication key to perform the first authentication from the stored preprocessing information Whether or not the user identification module card can be authenticated is determined based on whether or not the key can be acquired. Therefore, by using the common key encryption method and the public key encryption method to transmit and receive the second authentication key between the user identification module card and the open terminal, and by distributing and storing the common key in the application Thus, it becomes possible to use the open terminal application more securely.

  (4) In the application authentication system according to (3), the authentication application includes a random number generation unit that generates a random number, and the common key encryption unit includes the encrypted public key and the generated public key A random number is transmitted to the application, and the common key recovery means recovers the plurality of pieces of the common key distributed and stored in the application according to the even / odd of the received random number, and recovers the common key. A feature application authentication system is proposed.

  According to the present invention, the random number generation means generates a random number. The common key encryption means transmits the encrypted public key and the generated random number to the application. The common key recovery means recovers the common key by collecting a plurality of pieces of the common key distributed and stored in the application according to the even or odd number of the received random number. Therefore, the application of the open terminal can be used more securely by restoring the common key using the random number generated by the authentication application.

  (5) In the application authentication system according to (1) or (2), when the application is started for the first time, the conversion information generation unit converts the application with a one-way function and converts the application. Information is generated, the generated conversion information is transmitted to the authentication application, and the tampering determination means compares the received conversion information and stored regular conversion information to determine whether the application has been tampered with, The authentication key generation means generates two random numbers when the received conversion information matches the regular conversion information and determines that the conversion information has not been tampered with, and each of the two generated random numbers is the first random number. An application authentication system is proposed in which the authentication information and the second authentication key are stored in the key information storage means. .

  According to this invention, when the application is started for the first time, the conversion information generation means converts the application with a one-way function, generates conversion information, and transmits the generated conversion information to the authentication application. When the application is started for the first time, the falsification determination unit compares the received conversion information and the stored normal conversion information to determine whether the application has been falsified. The authentication key generation means generates two random numbers when the application is started for the first time and when the received conversion information matches the normal conversion information and it is determined that the application has not been tampered with. Each random number is stored in the key information storage means as a first authentication key and a second authentication key. Therefore, when the application is started for the first time, the result of converting the normal application stored in the authentication application of the user identification module card with the one-way function (normal conversion information) and the result of converting the application with the one-way function (Conversion information) and verify that the application of the open terminal has not been tampered with, and the authentication key for authenticating the user identification module card with the application of the open terminal when the application is started next time By generating, it becomes possible to use the application of the open terminal securely using the user identification module card from the next time onward.

  (6) In the application authentication system according to (5), the key information storage unit stores a secret key, a public key corresponding to the secret key, and a common key, and the authentication application stores the public key. Is encrypted with the common key and the encrypted public key is transmitted (for example, the common key encryption unit 227 in FIG. 6), and is encrypted with the public key received from the application. Public key decryption means (for example, the public key decryption unit 228 in FIG. 6) for decrypting the conversion information with the stored secret key, and the application includes a plurality of distributed and stored in the application The common key recovery unit (for example, the common key recovery unit 126 in FIG. 6) that recovers the pieces of the common key and recovers the common key, and the encryption key received from the authentication application. A common key decryption unit (for example, the common key decryption unit 127 in FIG. 6) for decrypting the converted public key with the restored common key, and the generated conversion information by using the decrypted public key. It proposes an application authentication system comprising public key encryption means (for example, public key encryption unit 128 in FIG. 6) that encrypts and transmits to the authentication application.

  According to this invention, the key information storage means stores a secret key, a public key corresponding to the secret key, and a common key. The common key encryption means encrypts the public key with the common key and transmits the encrypted public key. The public key decryption means decrypts the conversion information received from the application and encrypted with the public key, using the stored secret key. The common key recovery means recovers the common key by collecting a plurality of common key fragments distributed and stored in the application. The common key decryption unit decrypts the encrypted public key received from the authentication application with the restored common key. The public key encryption means encrypts the generated conversion information with the decrypted public key and transmits it to the authentication application. Therefore, by using a common key cryptosystem and a public key cryptosystem to send and receive conversion information between the user identification module card and the open terminal, and by sharing and storing the common key in the application, the first activation Even so, it is possible to use the open terminal application securely.

  (7) The present invention proposes an application authentication system according to (1) to (6), wherein the one-way function is a SHA-1 hash function.

  According to the invention, the one-way function is a SHA-1 hash function. Therefore, high-speed arithmetic processing can be realized.

  (8) In the application authentication system according to (2), the calculation process is an exclusive-OR calculation process of each of the first authentication key and the second authentication key and the extracted password. We propose an application authentication system that is characterized by a certain feature.

  According to the present invention, the calculation process is an exclusive OR calculation process of each of the first authentication key and the second authentication key and the extracted password. Therefore, by performing an OR operation on each of the first authentication key and the second authentication key and the password, an OR operation that is a simple encryption method is used to generate a result that is difficult to decipher. can do.

  (9) The present invention includes an application that performs authentication processing in cooperation with an authentication application, and includes an open terminal equipped with an open platform, and a user identification module that includes the authentication application and is inserted into and removed from the open terminal. An application authentication method using a card, wherein the authentication application includes a first authentication key, a second authentication key, and normal conversion information, and the application includes the first authentication key and the second authentication key. The pre-processing information generated from the authentication key is stored in advance, and the authentication application transmits the stored second authentication key to the application in the first step (for example, step S1 in FIG. 3). ) And the preprocessing information stored by the application using the received second authentication key. A second step (for example, steps S2 and S3 in FIG. 3) for determining whether or not the user identification module card can be authenticated based on whether or not the first authentication key can be obtained from the application, A third step of converting the application with an irreversible function and generating conversion information (eg, step S4 in FIG. 3) when it is determined that authentication is possible because the first authentication key has been acquired in the step; In the fourth step (for example, the application encrypts the generated conversion information with the first authentication key acquired in the second step, and transmits the encrypted conversion information to the authentication application (for example, Step S5) of FIG. 3 and the authentication application receives the received encrypted conversion information using the stored first authentication key. The authentication application compares the decrypted conversion information and the stored normal conversion information to determine whether or not the application has been tampered with, for example, a fifth step of encoding (for example, step S6 in FIG. 3). When the authentication application determines that the decrypted conversion information matches the regular conversion information and has not been tampered with (for example, steps S7 and S8 in FIG. 3) A seventh step (for example, step S9 in FIG. 3) for generating two random numbers and storing the two generated random numbers as the first authentication key and the second authentication key, respectively, Generating the preprocessing information from the generated first authentication key and second authentication key, and transmitting the generated preprocessing information to the application. An application authentication method comprising: a first step (for example, step S10 in FIG. 3) and a ninth step (for example, step S11 in FIG. 3) in which the application stores received preprocessing information. is suggesting.

  According to the present invention, the authentication application uses the first authentication key, the second authentication key, and the normal conversion information, and the application uses the pre-processing information generated from the first authentication key and the second authentication key. , Stored in advance. First, in the first step, the authentication application transmits the stored second authentication key to the application. Next, in the second step, the application determines whether or not the user identification module card can be authenticated based on whether or not the first authentication key can be acquired from the stored pre-processing information using the received second authentication key. To do. Next, in the third step, the application converts the application with an irreversible function and generates conversion information when determining that the authentication is possible because the first authentication key has been acquired in the second step. Next, in the fourth step, the application encrypts the generated conversion information with the first authentication key acquired in the second step, and transmits the encrypted conversion information to the authentication application. Next, in a fifth step, the authentication application decrypts the received encrypted conversion information with the stored first authentication key. Next, in a sixth step, the authentication application compares the decrypted conversion information and the stored normal conversion information to determine whether the application has been tampered with. Next, in the seventh step, when the authentication application determines that the decrypted conversion information and the normal conversion information match and has not been tampered with, the authentication application generates two random numbers. Each random number is stored as a first authentication key and a second authentication key. Next, in an eighth step, the authentication application generates preprocessing information from the generated first authentication key and second authentication key, and transmits the generated preprocessing information to the application. Next, in a ninth step, the application stores the received preprocessing information. Therefore, after authenticating the user identification module card using the preprocessing information stored in advance in the application of the open terminal, the regular application stored in advance in the authentication application of the user identification module card is expressed by a one-way function. The user identification module card is used by comparing the result of conversion (regular conversion information) with the result of conversion of the application with a one-way function (conversion information) to ensure that the application on the open terminal has not been tampered with. Thus, it is possible to use the open terminal application securely.

  (10) The present invention includes an application that performs authentication processing in cooperation with an authentication application, and includes an open terminal on which an open platform is mounted, and a user identification module that includes the authentication application and is inserted into and removed from the open terminal. A program for causing a computer to execute an application authentication method using a card, wherein the authentication application receives a first authentication key, a second authentication key, and normal conversion information, and the application A first step in which pre-processing information generated from one authentication key and the second authentication key is stored in advance, and the authentication application transmits the stored second authentication key to the application; (For example, step S1 in FIG. 3) and the application receives A second step of determining whether or not the user identification module card can be authenticated based on whether or not the first authentication key can be acquired from the stored pre-processing information using the second authentication key (for example, the step of FIG. 3) S2, S3), and when the application determines that authentication is possible because the first authentication key has been acquired in the second step, the application is converted with an irreversible function to generate conversion information. Third step (for example, step S4 in FIG. 3), and the application encrypts the generated conversion information with the first authentication key acquired in the second step, and the converted conversion information is encrypted. A fourth step (e.g., step S5 in FIG. 3) to send the authentication application to the authentication application, and the authentication application received the encrypted A fifth step of decrypting the conversion information with the stored first authentication key (for example, step S6 in FIG. 3), and the authentication application stores the decrypted conversion information and A sixth step (for example, steps S7 and S8 in FIG. 3) for comparing the normal conversion information and determining whether or not the application has been tampered with, and the authentication application includes the decrypted conversion information and the normal conversion information. Are determined, and two random numbers are generated, and the two generated random numbers are stored as the first authentication key and the second authentication key, respectively. (For example, step S9 in FIG. 3), the authentication application generates the preprocessing information from the generated first authentication key and second authentication key, and the generated preprocessing information. And an eighth step (for example, step S10 in FIG. 3) for transmitting the received information to the application, and a ninth step (for example, step S11 in FIG. 3) for storing the received preprocessing information by the application. Has proposed a program to be executed.

  According to the present invention, the authentication application uses the first authentication key, the second authentication key, and the normal conversion information, and the application uses the pre-processing information generated from the first authentication key and the second authentication key. , Stored in advance. First, in the first step, the authentication application transmits the stored second authentication key to the application. Next, in the second step, the application determines whether or not the user identification module card can be authenticated based on whether or not the first authentication key can be acquired from the stored pre-processing information using the received second authentication key. To do. Next, in the third step, the application converts the application with an irreversible function and generates conversion information when determining that the authentication is possible because the first authentication key has been acquired in the second step. Next, in the fourth step, the application encrypts the generated conversion information with the first authentication key acquired in the second step, and transmits the encrypted conversion information to the authentication application. Next, in a fifth step, the authentication application decrypts the received encrypted conversion information with the stored first authentication key. Next, in a sixth step, the authentication application compares the decrypted conversion information and the stored normal conversion information to determine whether the application has been tampered with. Next, in the seventh step, when the authentication application determines that the decrypted conversion information and the normal conversion information match and has not been tampered with, the authentication application generates two random numbers. Each random number is stored as a first authentication key and a second authentication key. Next, in an eighth step, the authentication application generates preprocessing information from the generated first authentication key and second authentication key, and transmits the generated preprocessing information to the application. Next, in a ninth step, the application stores the received preprocessing information. Therefore, after authenticating the user identification module card using the preprocessing information stored in advance in the application of the open terminal, the regular application stored in advance in the authentication application of the user identification module card is expressed by a one-way function. The user identification module card is used by comparing the result of conversion (regular conversion information) with the result of conversion of the application with a one-way function (conversion information) to ensure that the application on the open terminal has not been tampered with. Thus, it is possible to use the open terminal application securely.

  According to the present invention, by using a user identification module card such as a UIM, it is possible to securely use an application of a terminal in an open environment.

1 is a system configuration diagram of a mobile banking system using an application authentication system according to a first embodiment of the present invention. It is a figure which shows the function structure of the application which the mobile telephone concerning the 1st Embodiment of this invention has, and the authentication application which a user identification module card has. It is a figure which shows the sequence of the authentication process in the application authentication system concerning the 1st Embodiment of this invention. It is a figure which shows the sequence of the first time authentication process in the application authentication system concerning the 1st Embodiment of this invention. It is a figure which shows the function structure of the application which the mobile telephone concerning the 2nd Embodiment of this invention has, and the authentication application which a user identification module card has. It is a figure which shows the function structure of the application which the mobile telephone concerning the 3rd Embodiment of this invention has, and the authentication application which a user identification module card has.

  Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings. Note that the components in the present embodiment can be appropriately replaced with existing components and the like, and various variations including combinations with other existing components are possible. Therefore, the description of the present embodiment does not limit the contents of the invention described in the claims.

<First Embodiment>
<System configuration of application authentication system>
FIG. 1 is a system configuration diagram of a mobile banking system using an application authentication system 1 according to the first embodiment of the present invention. An open terminal is a terminal equipped with an open platform, for example, Android (registered trademark), and is connected to a server via a network. Assuming a mobile banking system, the open terminal is, for example, the mobile phone 10, and the server is the bank server 30.

  In the present embodiment, the mobile phone 10 has a mobile banking system application (hereinafter referred to as an application) 100, and various transactions are executed when the application 100 and the bank server 30 exchange data. The The application is downloaded from the bank server 30 or an application server (not shown) that provides various applications. In addition, a user identification module card is inserted into the mobile phone 10.

  The user identification module card is, for example, a UIM (User Identity Module) card 20. The UIM card is an IC card that records contractor information (for example, a unique identifier) issued by a mobile phone carrier, and is used by being inserted into a mobile phone. In addition to the contractor information, the UIM card can also register private information such as an address book and personal identification information for credit settlement in an encrypted manner. The UIM card can be inserted into and removed from a different mobile phone. The user identification module card is not limited to a UIM card, and may be a SIM (Subscriber Identity Module Card) card, a USIM (Universal SIM) card, or an R-UIM (Removable UIM). Good.

  In the present embodiment, the UIM card 20 includes an authentication application (hereinafter simply referred to as an authentication application) 200 for authenticating the application 100.

<Functional configuration of application authentication system>
FIG. 2 is a diagram illustrating a functional configuration of the application 100 included in the mobile phone 10 and the authentication application 200 included in the UIM card 20 according to the first embodiment of the present invention. Note that the functional configuration for using the mobile banking system of the application 100 is omitted, and only the functional configuration used in the application authentication system is shown.

  As shown in FIG. 2, the application 100 and the authentication application 200 transmit and receive data via the communication unit 11 of the mobile phone 10 and the communication unit 21 of the UIM card 20. The application 100 includes a preprocessing information storage unit 101, an activation control unit 102, an authentication unit 103, a conversion information generation unit 104, and an authentication key encryption unit 105. on the other hand. The authentication application 200 includes a key information storage unit 201, an authentication key transmission unit 202, an authentication key decryption unit 203, a falsification determination unit 204, an authentication key generation unit 205, and a preprocessing information generation unit 206.

  FIG. 3 is a diagram showing a sequence of authentication processing in the application authentication system 1 according to the first embodiment of the present invention. Each part of the application 100 and the authentication application 200 will be described using the authentication processing sequence of FIG.

  First, information stored in the key information storage unit 201 and the preprocessing information storage unit 101 when the authentication process starts will be described.

  The key information storage unit 201 stores in advance a first authentication key, a second authentication key, and normal conversion information. Here, the normal conversion information is a result of converting the normal application 100 held by the bank server 30 or the application server with a one-way function, and checks whether the application 100 of the mobile phone 10 has been tampered with. Used for. The normal conversion information is stored in the authentication application 200 from the beginning. The first authentication key and the second authentication key will be described later.

  The preprocessing information storage unit 101 stores preprocessing information generated in the previous authentication process in advance. The preprocessing information includes a first authentication key and a second authentication key, and details will be described later.

  First, in step S <b> 0, the activation control unit 102 transmits an authentication key request to the authentication application 200 when the application 100 is activated by the user of the mobile phone 10. Thereby, the authentication process starts.

  Next, in step S <b> 1, upon receiving an authentication key request from the application 100, the authentication key transmission unit 202 acquires a second authentication key from the key information storage unit 201 and transmits it to the application 100.

  Next, in step S <b> 2, upon receiving the second authentication key from the authentication application 200, the authentication unit 103 acquires preprocessing information from the preprocessing information storage unit 101, and acquires it using the received second authentication key. It is determined whether or not the first authentication key can be acquired from the preprocessing information.

  Next, in Step S3, when the first authentication key can be acquired by the authentication unit 103 (Step S2) (YES), the authentication unit 103 authenticates the UIM card 20 and advances the process to Step S4. On the other hand, when the first authentication key cannot be acquired by the authentication unit 103 (step S2) (NO), the authentication unit 103 does not authenticate the UIM card 20 and ends the process.

  Next, in step S4, the conversion information generation unit 104 converts the application 100 with a one-way function to generate conversion information. Here, for example, the SHA-1 hash function is used as the one-way function. When the conversion information is generated by the conversion information generation unit 104 using the SHA-1 hash function, the above-described normal conversion information is naturally generated using the SHA-1 hash function.

  Next, in step S5, the authentication key encryption unit 105 encrypts the conversion information generated by the conversion information generation unit 104 (step S3) using the first authentication key acquired by the authentication unit 103 (step S2). The encrypted conversion information is transmitted to the authentication application 200.

  Next, in step S6, when receiving the conversion information encrypted from the application 100, the authentication key decryption unit 203 acquires the first authentication key from the key information storage unit 201, and receives it with the acquired authentication key. The encrypted conversion information is decrypted.

  Next, in step S7, the tampering determination unit 204 compares the conversion information decrypted by the authentication key decryption unit 203 (step S6) with the normal conversion information stored in the key information storage unit 201, and It is determined whether 100 has been tampered with.

  Next, in step S8, when the decrypted conversion information matches the regular conversion information (YES), the falsification determination unit 204 determines that the application 100 has not been falsified, and mobile banking of the application 100 The function related to the system is enabled, and the process proceeds to step S9. On the other hand, if the decrypted conversion information and the regular conversion information do not match (NO), the falsification determination unit 204 determines that the application 100 has been falsified, and proceeds to step S12.

  Next, in step S9, the authentication key generation unit 205 generates two random numbers, and stores the generated random numbers in the key information storage unit 201 as the first authentication key and the second authentication key, respectively. Specifically, the authentication key generation unit 205 uses the first authentication key and the second authentication key that are newly generated as the first authentication key and the second authentication key stored in the key information storage unit 201. Replace with. Note that the first authentication key and the second authentication key are keys of the AES encryption method, and the key length is 128 bits.

  Next, in step S10, the preprocessing information generation unit 206 generates and generates preprocessing information including the first authentication key and the second authentication key generated by the authentication key generation unit 205 (step S9). Pre-treatment information is transmitted to the application 100.

  Next, in step S <b> 11, when the preprocessing information storage unit 101 receives preprocessing information from the authentication application 200, the preprocessing information storage unit 101 stores the received preprocessing information. Here, the preprocessing information stored in the preprocessing information storage unit 101 is used for authentication when the application 100 is activated next time.

  Next, in step S12, the falsification determination unit 204 transmits error information indicating that the decrypted conversion information does not match the normal conversion information to the application 100, and ends the process. The application 100 that has received the error information displays the received error information on the UI unit 12 of the mobile phone 10.

  The case where the preprocessing information is stored in the preprocessing information storage unit 101 of the application 100 has been described above, that is, the case where the activation of the application 100 is the second or subsequent activation. Next, a case where the application 100 is activated for the first time, that is, a case where the preprocessing information is not stored in the preprocessing information storage unit 101 of the application 100 will be described with reference to FIG.

  FIG. 4 is a diagram showing a sequence of initial authentication processing in the application authentication system 1 according to the first embodiment of the present invention. Note that the steps denoted by the same reference numerals as those in FIG. 3 are the same processes by the same function units, and thus detailed description thereof is omitted.

  First, in step S <b> 21, when the application 100 is activated by the user of the mobile phone 10, the activation control unit 102 determines whether it is the first activation. If it is determined that the activation is the first time, the process proceeds to step S22. On the other hand, if it is determined that it is the second or subsequent activation, the process proceeds to step S0 in FIG.

  Next, in step S22, the conversion information generation unit 104 converts the application with a one-way function, generates conversion information, and transmits the generated conversion information to the authentication application.

  Next, in step S <b> 23, the tampering determination unit 204 compares the conversion information received from the application 100 and the normal conversion information stored in the key information storage unit 201, and determines whether the application 100 has been tampered with. To do.

  Next, in step S24, the tampering determination unit 204 determines that the application 100 has not been tampered with when the received conversion information matches the normal conversion information (YES), and the step The process proceeds to S9. On the other hand, if the decrypted conversion information and the regular conversion information do not match (NO), the falsification determination unit 204 determines that the application 100 has been falsified, and proceeds to step S12.

  As described above, according to the present embodiment, by using the UIM card 20, it is possible to securely use an application included in the mobile phone 10 that is one of the open terminals.

<Second Embodiment>
A second embodiment of the present invention will be described with reference to FIG. Note that the application authentication system 2 in the present embodiment uses a password input to the application 110 of the mobile phone 10 for user authentication. Note that the system configuration of the application authentication system according to the present embodiment is the same as that of the first embodiment, and is omitted.

<Functional configuration of application authentication system>
FIG. 5 is a diagram illustrating a functional configuration of the application 110 included in the mobile phone 10 and the authentication application 210 included in the UIM card 20 according to the second embodiment of the present invention. As shown in FIG. 5, the application 110 and the authentication application 210 perform data transmission / reception via the communication unit 11 of the mobile phone 10 and the communication unit 21 of the UIM card 20. The application 110 includes a preprocessing information storage unit 101, an activation control unit 112, an authentication unit 113, a conversion information generation unit 104, and an authentication key encryption unit 115. on the other hand. The authentication application 210 includes a key information storage unit 201, an authentication key transmission unit 202, an authentication key decryption unit 213, a falsification determination unit 204, an authentication key generation unit 205, and a preprocessing information generation unit 216. In addition, about the component which attaches | subjects the same code | symbol as 1st Embodiment, since it has the same function, the detailed description is abbreviate | omitted.

  The activation control unit 112 requests the user to input a password via the UI unit 12 when the application 110 is activated. Then, the activation control unit 112 receives a password input by the user via the UI unit 12.

  The preprocessing information generation unit 216 calculates the first authentication key and the second authentication key generated by the authentication key generation unit 205 using the password acquired by the authentication key decryption unit 213 described later. Processing information is generated, and the generated preprocessing information is transmitted to the application 110. Specifically, the preprocessing information generation unit 216 generates preprocessing information by performing exclusive OR operation processing of each of the first authentication key and the second authentication key and the password.

  Upon receiving the second authentication key from the authentication application 210, the authentication unit 113 acquires the preprocessing information from the preprocessing information storage unit 101, and uses the received second authentication key and the password received by the activation control unit 112, It is determined whether or not the first authentication key can be acquired from the acquired preprocessing information. If the first authentication key can be acquired, the authentication unit 113 authenticates the UIM card 20. On the other hand, when the first authentication key cannot be acquired, the authentication unit 113 does not authenticate the UIM card 20.

  The authentication key encryption unit 115 combines the conversion information generated by the conversion information generation unit 104 and the password received by the activation control unit 112, and encrypts the encrypted information using the first authentication key acquired by the authentication unit 113. The conversion information combined with the converted password is transmitted to the authentication application 210. Note that the authentication key encryption unit 115 combines the conversion information and the password by concatenating the password and the conversion information, for example.

  Upon receiving the conversion information in which the encrypted password is combined from the application 110, the authentication key decryption unit 213 acquires the first authentication key from the key information storage unit 201, decrypts it with the acquired authentication key, and converts it. Extract information and passwords.

  As described above, according to the present embodiment, by using the password received from the user for generating the preprocessing information, it is checked whether the preprocessing user and the current processing user match, and different users. Therefore, it is possible to use an open terminal application securely.

<Third Embodiment>
A third embodiment of the present invention will be described with reference to FIG. Note that the application authentication system 3 in this embodiment uses public key cryptography and common key cryptography. Note that the system configuration of the application authentication system according to the present embodiment is the same as that of the first embodiment, and is omitted.

<Functional configuration of application authentication system>
FIG. 6 is a diagram illustrating a functional configuration of the application 120 included in the mobile phone 10 and the authentication application 220 included in the UIM card 20 according to the third embodiment of the present invention. As shown in FIG. 6, the application 120 and the authentication application 220 transmit and receive data via the communication unit 11 of the mobile phone 10 and the communication unit 21 of the UIM card. In FIG. 6, the communication unit 11 and the communication unit 21 are not illustrated, but are provided in the mobile phone 10 and the UIM card 20 as in FIG. 2.

  The application 120 includes a preprocessing information storage unit 101, an activation control unit 122, a common key restoration unit 126, a common key decryption unit 127, an authentication unit 123, a conversion information generation unit 104, an authentication key encryption unit 105, and a public key encryption The configuration unit 128 is configured. on the other hand. The authentication application 200 includes a key information storage unit 221, a common key encryption unit 227, an authentication key transmission unit 222, an authentication key decryption unit 203, a public key decryption unit 228, a falsification determination unit 204, an authentication key generation unit 205, and The preprocessing information generation unit 206 is configured. In addition, about the component which attaches | subjects the same code | symbol as 1st Embodiment, since it has the same function, the detailed description is abbreviate | omitted.

  The key information storage unit 221 stores a secret key, a public key corresponding to the secret key, and a common key together with the first authentication key, the second authentication key, and the regular conversion information. The private key and public key are RSA private keys and public keys, and the common key is a common key of AES encryption. Note that the secret key, the public key, and the common key are stored in the authentication application 220 from the beginning.

  When the application 120 is activated by the user of the mobile phone 10, the activation control unit 122 transmits an activation notification to the authentication application 220. In addition, when the application 120 is activated, the activation control unit 122 determines whether it is the first activation. When it is determined that the activation is the first time, when the public key is acquired by the common key decryption unit 127 described later, the process proceeds to the above-described process of step S21 in FIG. On the other hand, if it is determined that the activation is the second or subsequent activation, when the public key is acquired by the common key decryption unit 127 described later, the process proceeds to the above-described processing of step S0 in FIG.

  When the common key encryption unit 227 receives the activation notification from the application 120, the common key encryption unit 227 encrypts the public key stored in the key information storage unit 221 with the common key stored in the key information storage unit 221 and encrypts the public key. The public key is transmitted to the application 120.

  When the common key restoration unit 126 receives the encrypted public key from the authentication application 220, the common key restoration unit 126 collects a plurality of pieces of the common key distributed and stored in the application 120 and restores the common key.

  When the common key is restored by the common key restoration unit 126, the common key decryption unit 127 decrypts the public key encrypted from the authentication application 220 with the common key restored by the common key restoration unit 126.

  Upon receiving the authentication key request, the authentication key transmitting unit 222 acquires the second authentication key and the secret key from the key information storage unit 221, encrypts the acquired second authentication key with the acquired secret key, The encrypted second authentication key is transmitted.

  Upon receiving the second authentication key encrypted from the authentication application 220, the authentication unit 123 decrypts the public key decrypted by the common key decryption unit 127, and stores the preprocessing information from the preprocessing information storage unit 101. get. Then, the authentication unit 123 determines whether or not the first authentication key can be acquired from the acquired preprocessing information with the decrypted second authentication key. If the first authentication key can be acquired, the authentication unit 123 authenticates the UIM card 20, while if the first authentication key cannot be acquired, the authentication unit 123 does not authenticate the UIM card 20. .

  When the application 120 is activated for the first time, the public key encryption unit 128 encrypts the conversion information generated by the conversion information generation unit 104 with the public key decrypted by the common key decryption unit 127 and performs authentication. Send to app.

  When the application 120 is activated for the first time, the public key decryption unit 228 decrypts the conversion information encrypted with the public key received from the application 120 with the private key stored in the key information storage unit 221. To do.

  As described above, according to the present embodiment, public key encryption is used for transmission / reception between the application 120 of the mobile phone 10 and the authentication application 220 of the UIM 20 of the second authentication key used for authenticating the UIM card 20. By using the method and the common key encryption method, and by storing the common key in a distributed manner, it becomes possible to use the application of the open terminal more securely.

  Note that the application authentication system of the present invention is recorded by recording the processing of the application authentication system on a computer-readable recording medium, causing each device constituting the application authentication system to read and execute the program recorded on the recording medium. Can be realized. The computer system here includes an OS and hardware such as peripheral devices.

  Further, the “computer system” includes a homepage providing environment (or display environment) if a WWW (World Wide Web) system is used. The program may be transmitted from a computer system storing the program in a storage device or the like to another computer system via a transmission medium or by a transmission wave in the transmission medium. Here, the “transmission medium” for transmitting the program refers to a medium having a function of transmitting information, such as a network (communication network) such as the Internet or a communication line (communication line) such as a telephone line.

  The program may be for realizing a part of the functions described above. Furthermore, what can implement | achieve the function mentioned above in combination with the program already recorded on the computer system, and what is called a difference file (difference program) may be sufficient.

  The embodiments of the present invention have been described in detail with reference to the drawings. However, the specific configuration is not limited to the embodiments, and includes designs and the like that do not depart from the gist of the present invention.

(Modification 1)
In the third embodiment, the key seed for restoring the common key in advance is distributed differently depending on the random number even and odd numbers generated by the authentication application 220, and different processing is performed according to the random number even and odd numbers. The common key may be restored. For example, when the random number is an even number, a plurality of common key fragments distributed and stored in the application 120 are collected, and the common key is restored using the two key types K and Ce. Specifically, first, as a first step, a plurality of common key fragments distributed and stored in the application 100 are collected to restore the key seeds K and Ce. Next, as a second step, a value L obtained by encrypting the restored key seed K with the key seed K twice is obtained. Next, as a third step, the common key is restored by decrypting the key seed Ce with the value L obtained in the second step. On the other hand, when the random number is an odd number, a plurality of common key fragments distributed and stored in the application 120 are collected, and the common key is restored using two key types K and Co. Specifically, first, as a first step, a plurality of common key fragments distributed and stored in the application 100 are collected, and key types K and Co are restored. Next, as a second step, a value M obtained by encrypting the restored key seed K with the key seed K three times is obtained. Next, as a third step, the common key is restored by decrypting the key seed Co with the value M obtained in the second step. In this case, the authentication application 220 includes a random number generation unit that generates a random number, and the common key encryption unit 227 transmits the encrypted public key and the random number generated by the random number generation unit to the application 120.

  Each embodiment and modification may be used in appropriate combination, but detailed description is omitted.

DESCRIPTION OF SYMBOLS 1 Application authentication system 10 Mobile telephone 11 Communication part 12 UI part 100 Application 101 Pre-processing information storage part 102 Activation control part 103 Authentication part 104 Conversion information generation part 105 Authentication key encryption part 20 UIM card 21 Communication part 200 Authentication application 201 Key Information storage unit 202 Authentication key transmission unit 203 Authentication key decryption unit 204 Tampering determination unit 205 Authentication key generation unit 206 Preprocessing information generation unit

Claims (10)

An application using an open terminal equipped with an open platform having an application that performs authentication processing in cooperation with an authentication application, and a user identification module card that has the authentication application and is inserted into and removed from the open terminal An authentication system,
The authentication application is
Key information storage means for storing a first authentication key, a second authentication key, and normal conversion information;
First transmitting means for transmitting a stored second authentication key to the application;
With
The application is
Preprocessing information storage means for storing preprocessing information generated from the first authentication key and the second authentication key;
Authentication means for determining whether or not the user identification module card can be authenticated based on whether or not the first authentication key can be acquired from the stored preprocessing information by the received second authentication key;
Conversion information generating means for converting the application with a one-way function and generating conversion information when determining that authentication is possible because the first authentication key has been acquired from the stored preprocessing information;
Authentication key encryption means for encrypting the generated conversion information with the first authentication key acquired by the authentication means and transmitting the encrypted conversion information to the authentication application;
With
The authentication application is
further,
Authentication key decryption means for decrypting the received encrypted conversion information with the stored first authentication key;
Tampering determination means that compares the decrypted conversion information and stored regular conversion information and determines whether the application has been tampered with;
When it is determined that the decrypted conversion information and the regular conversion information match and are not falsified, two random numbers are generated, and each of the two generated random numbers is set to the first authentication key and the Authentication key generation means for storing the second authentication key in the key information storage means;
Pre-processing information generating means for generating the pre-processing information from the generated first authentication key and second authentication key, and transmitting the generated pre-processing information to the application;
And the application stores the received preprocessing information in the preprocessing information storage means. The stored preprocessing information is generated by computing the generated first authentication key and the second authentication key with a password by the preprocessing information generation means,
The authentication means determines whether or not the first authentication key can be obtained from the stored preprocessing information by the received second authentication key and the password received from the user. To determine whether or not
The authentication key encryption means combines the acquired conversion information and the password received from the user, and encrypts with the first authentication key acquired by the authentication means,
The authentication key decryption means decrypts the received conversion information combined with the password with the stored first authentication key, and extracts the conversion information and the password. The application authentication system according to claim 1, wherein: The key information storage means further stores a secret key, a public key corresponding to the secret key, and a common key,
The authentication application is
A common key encryption means for encrypting the public key with the common key and transmitting the encrypted public key;
The application is
A common key recovery means for recovering the common key by collecting a plurality of pieces of the common key distributed and stored in the application;
A common key decryption means for decrypting the received encrypted public key with the restored common key,
The first transmission means encrypts the stored second authentication key with the secret key and transmits the encrypted second authentication key to the application,
The authentication means decrypts the received encrypted second authentication key with a decrypted public key, and uses the decrypted second authentication key from the stored preprocessing information to 3. The application authentication system according to claim 1, wherein whether or not the user identification module card can be authenticated is determined based on whether or not the first authentication key can be acquired. The authentication application is
A random number generating means for generating a random number;
The common key encryption means transmits the encrypted public key and the generated random number to the application,
The said common key restoration | recovery means collect | recovers the fragment | piece of the said some common key distributedly preserve | saved in the said application according to the even / odd of the received random number, The said common key is restored | restored, Application authentication system. When the application is first launched,
The conversion information generation means converts the application with a one-way function, generates conversion information, transmits the generated conversion information to the authentication application,
The falsification determination means compares the received conversion information and stored regular conversion information, determines whether the application has been falsified,
The authentication key generation means generates two random numbers when the received conversion information matches the regular conversion information and determines that the conversion information has not been tampered with, and each of the two generated random numbers is the first random number. 3. The application authentication system according to claim 1, wherein the authentication information and the second authentication key are stored in the key information storage unit. The key information storage means stores a secret key, a public key corresponding to the secret key, and a common key;
The authentication application is
A common key encryption means for encrypting the public key with the common key and transmitting the encrypted public key;
Public key decryption means for decrypting conversion information received from the application and encrypted with the public key with a stored secret key;
With
The application is
A plurality of common key fragments distributed and stored in the application, and a common key restoring means for restoring the common key;
Common key decryption means for decrypting the encrypted public key received from the authentication application with the restored common key;
Public key encryption means for encrypting the generated conversion information with the decrypted public key and transmitting it to the authentication application;
The application authentication system according to claim 5, further comprising:   The application authentication system according to claim 1, wherein the one-way function is a SHA-1 hash function.   3. The application authentication system according to claim 2, wherein the calculation process is an exclusive OR calculation process of each of the first authentication key and the second authentication key and the extracted password. An application using an open terminal equipped with an open platform having an application that performs authentication processing in cooperation with an authentication application, and a user identification module card that has the authentication application and is inserted into and removed from the open terminal An authentication method,
The authentication application preliminarily generates a first authentication key, a second authentication key, and normal conversion information, and the application preprocesses information generated from the first authentication key and the second authentication key. Remember,
A first step in which the authentication application sends a stored second authentication key to the application;
A second step in which the application determines whether or not the user identification module card can be authenticated based on whether or not the first authentication key can be acquired from the stored pre-processing information with the received second authentication key; ,
A third step of converting the application with an irreversible function and generating conversion information when the application determines that authentication is possible because the first authentication key has been acquired in the second step;
A fourth step in which the application encrypts the generated conversion information with the first authentication key acquired in the second step, and transmits the encrypted conversion information to the authentication application;
A fifth step in which the authentication application decrypts the received encrypted conversion information with a stored first authentication key;
A sixth step in which the authentication application compares the decrypted conversion information and the stored normal conversion information to determine whether the application has been tampered with;
When the authentication application determines that the decrypted conversion information and the normal conversion information match and has not been tampered with, two random numbers are generated, and each of the two generated random numbers is converted into the first random number. A seventh step of storing the authentication key and the second authentication key;
An eighth step in which the authentication application generates the preprocessing information from the generated first authentication key and second authentication key, and transmits the generated preprocessing information to the application;
A ninth step in which the application stores the received preprocessing information;
An application authentication method characterized by comprising: An application using an open terminal equipped with an open platform having an application that performs authentication processing in cooperation with an authentication application, and a user identification module card that has the authentication application and is inserted into and removed from the open terminal A program for causing a computer to execute an authentication method,
The authentication application preliminarily generates a first authentication key, a second authentication key, and normal conversion information, and the application preprocesses information generated from the first authentication key and the second authentication key. Remember,
A first step in which the authentication application sends a stored second authentication key to the application;
A second step in which the application determines whether or not the user identification module card can be authenticated based on whether or not the first authentication key can be acquired from the stored pre-processing information with the received second authentication key; ,
A third step of converting the application with an irreversible function and generating conversion information when the application determines that authentication is possible because the first authentication key has been acquired in the second step;
A fourth step in which the application encrypts the generated conversion information with the first authentication key acquired in the second step, and transmits the encrypted conversion information to the authentication application;
A fifth step in which the authentication application decrypts the received encrypted conversion information with a stored first authentication key;
A sixth step in which the authentication application compares the decrypted conversion information and the stored normal conversion information to determine whether the application has been tampered with;
When the authentication application determines that the decrypted conversion information and the normal conversion information match and has not been tampered with, two random numbers are generated, and each of the two generated random numbers is converted into the first random number. A seventh step of storing the authentication key and the second authentication key;
An eighth step in which the authentication application generates the preprocessing information from the generated first authentication key and second authentication key, and transmits the generated preprocessing information to the application;
A ninth step in which the application stores the received preprocessing information;
A program that causes a computer to execute.

Images