JP2016133975A - Communication system, communication method, terminal device, and terminal program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To prevent leakage of information.SOLUTION: A terminal device 200 transmits terminal authentication information 211 to a server device 300. The server device 300 receives the terminal authentication information 211, to authenticate the terminal device 200 by use of the terminal authentication information 211. The server device 300 transmits server authentication information 311 to the terminal device 200. The terminal device 200 receives the server authentication information 311, to authenticate the server device 300 by use of the server authentication information 311. When both the terminal device 200 and server device 300 are successfully authenticated, the terminal device 200 and the server device 300 start communicating with each other. When one of the terminal device 200 and the server device 300 cannot be authenticated, the terminal device 200 executes erasure processing of erasing the terminal authentication information 211 from a storage section.SELECTED DRAWING: Figure 1

Description

  The present invention relates to a communication system, a communication method, a terminal device, and a terminal program.

  In order to protect the information stored in the information terminal, it is necessary to permit use of the information terminal only to the correct user.

  Conventionally, in a system that determines whether or not to log on to an information terminal is permitted or not based on a password and a user ID (identifier), if the user ID and password match, the logon is permitted and information is displayed when a certain number of logon failures occur. (For example, see Patent Document 1).

JP 2004-295386 A

  In the conventional system, it is possible to try to input the user ID and password up to the prescribed number of logon failures, which gives an opportunity to estimate the user ID and password. Further, since server authentication is not performed when information is transmitted from the information terminal to the server, server impersonation cannot be prevented. Therefore, information stored in the information terminal may be leaked.

  An object of the present invention is to prevent information leakage.

A communication system according to one aspect of the present invention includes:
It includes a terminal device and a server device that perform mutual authentication and communicate when authentication is successful,
The terminal device includes a storage unit that stores terminal authentication information for authentication by the server device, and transmits the terminal authentication information to the server device.
The server device receives the terminal authentication information, authenticates the terminal device using the terminal authentication information, transmits server authentication information for authentication by the terminal device to the terminal device,
The terminal device receives the server authentication information, authenticates the server device using the server authentication information, and deletes the terminal authentication information from the storage unit when the server device authentication fails Execute the process.

  In the present invention, when the authentication of the terminal device and the authentication of the server device are successful, the terminal device and the server device communicate with each other, and when the authentication of the server device fails, the terminal device is a terminal for authentication by the server device. The authentication information is deleted from the storage unit. Therefore, if impersonation of the server device occurs and the server device authentication fails, authentication cannot be performed thereafter, and communication cannot be performed. Therefore, according to the present invention, it is possible to prevent information leakage.

1 is a diagram illustrating a configuration of a communication system according to Embodiment 1. FIG. FIG. 2 is a block diagram illustrating a configuration of a terminal device according to the first embodiment. FIG. 2 is a block diagram illustrating a configuration of a server device according to the first embodiment. 3 is a flowchart showing the operation of the communication system according to the first embodiment. FIG. 3 shows an operation example of the communication system according to the first embodiment. FIG. 3 shows an operation example of the communication system according to the first embodiment. FIG. 3 is a block diagram illustrating a configuration of a terminal device according to a second embodiment. The figure which shows the hardware structural example of the terminal device which concerns on embodiment of this invention.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings. In addition, the same code | symbol is attached | subjected to the part which is the same or it corresponds in each figure. In the description of the embodiments, the description of the same or corresponding parts will be omitted or simplified as appropriate.

Embodiment 1 FIG.
First, an outline of the present embodiment will be described.

  In the present embodiment, a plurality of terminals and a plurality of servers are connected to a communication network. After the terminal and the server authenticate each other, the terminal and the server transmit / receive information stored in the terminal and the server. When the terminal access fails, the information stored in the terminal is deleted.

  The server requests terminal authentication information when a terminal access request is made. The terminal requests server authentication information. The terminal verifies the authentication information transmitted from the server. The server verifies the authentication information transmitted from the terminal. The terminal and server authentication information is generated by the management device. When verification of authentication information fails in either or both of the terminal and the server, it is presumed that some sort of security breach has occurred, and the information stored in the terminal is deleted. This information includes terminal authentication information.

  It is possible to prevent duplication or analysis of authentication information and information leakage by erasing the information stored in the terminal when the verification information of the terminal fails, and including the authentication information in the information to be deleted from the terminal It is.

  Next, as the details of the present embodiment, the configuration of the system according to the present embodiment, the operation of the system according to the present embodiment, and the effects of the present embodiment will be described in order.

*** Explanation of configuration ***
With reference to FIG. 1, the structure of the communication system 100 which is a system based on this Embodiment is demonstrated.

  The communication system 100 includes a terminal device 200 corresponding to the plurality of terminals described above and a server device 300 corresponding to the plurality of servers described above. Although FIG. 1 shows two terminals T1 and T2 as the terminal apparatus 200, the number of terminal apparatuses 200 may be one or three or more. Similarly, although two servers S1 and S2 are shown in FIG. 1 as the server apparatus 300, the number of server apparatuses 300 may be one, or three or more.

  The terminal device 200 is connected via the router 210 to the Internet 110 corresponding to the communication network described above. The server device 300 is also connected to the Internet 110. The terminal device 200 and the server device 300 communicate with each other via the Internet 110. In the present embodiment, the terminal device 200 and the server device 300 authenticate each other and communicate when authentication is successful.

  An authentication information management device 400 corresponding to the management device described above is also connected to the Internet 110. The authentication information management device 400 has an authentication information generation function 401 and an authentication information revocation function 402. The authentication information generation function 401 is a function for generating terminal authentication information 211 used for authentication of the terminal device 200 by the server device 300 and server authentication information 311 used for authentication of the server device 300 by the terminal device 200. The authentication information revocation function 402 is a function for revoking the terminal authentication information 211 and the server authentication information 311.

  The terminal authentication information 211 is generated individually for the terminal device 200. FIG. 1 shows that Tauth1 is generated as the terminal authentication information 211 of T1 and Tauth2 is generated as the terminal authentication information 211 of T2. The terminal authentication information 211 may be generated for each access destination server apparatus 300. That is, the terminal authentication information 211 of T1 may be generated separately for accessing S1 and for accessing S2. Similarly, the terminal authentication information 211 for T2 may be generated separately for accessing S1 and for accessing S2. In the present embodiment, the terminal authentication information 211 is an electronic certificate.

  The server authentication information 311 is generated individually for the server device 300. FIG. 1 shows that Sauth1 is generated as the server authentication information 311 of S1 and Sauth2 is generated as the server authentication information 311 of S2. In the present embodiment, the server authentication information 311 is an electronic certificate.

  The configuration of the terminal device 200 will be described with reference to FIG.

  The terminal device 200 includes a storage unit 201, a request unit 202, an authentication unit 203, a communication unit 204, and an erasure unit 205.

  The storage unit 201 stores terminal authentication information 211 for authentication by the server device 300 and other information 212.

  The request unit 202 acquires the terminal authentication information 211 from the storage unit 201. The request unit 202 transmits the acquired terminal authentication information 211 to the server device 300 and requests authentication by the server device 300.

  The authentication unit 203 receives server authentication information 311 for authentication of the server device 300 from the server device 300. The authentication unit 203 authenticates the server device 300 using the received server authentication information 311.

  When the authentication requested by the request unit 202 and the authentication by the authentication unit 203 are successful, the communication unit 204 transmits another information 212 stored in the storage unit 201 to the server device 300. The authentication requested by the request unit 202 is authentication of the terminal device 200. The authentication by the authentication unit 203 is the authentication of the server device 300.

  The erasure unit 205 executes an erasure process for erasing the terminal authentication information 211 from the storage unit 201 when the authentication by the authentication unit 203 fails. In the present embodiment, the erasure unit 205 executes the erasure process even when the authentication requested by the request unit 202 fails.

  The configuration of the server device 300 will be described with reference to FIG.

  The server device 300 includes a storage unit 301, a request unit 302, an authentication unit 303, and a communication unit 304.

  The storage unit 301 stores server authentication information 311 for authentication by the terminal device 200 and other information 312.

  The request unit 302 acquires server authentication information 311 from the storage unit 301. The request unit 302 transmits the acquired server authentication information 311 to the terminal device 200 and requests authentication by the terminal device 200.

  The authentication unit 303 receives terminal authentication information 211 for authenticating the terminal device 200 from the terminal device 200. The authentication unit 303 authenticates the terminal device 200 using the received terminal authentication information 211.

  When the authentication requested by the request unit 302 and the authentication by the authentication unit 303 are successful, the communication unit 304 transmits another information 312 stored in the storage unit 301 to the terminal device 200. The authentication requested by the request unit 302 is authentication of the server device 300. Authentication by the authentication unit 303 is authentication of the terminal device 200.

*** Explanation of operation ***
The operation of the communication system 100 will be described with reference to FIGS. The operation of the communication system 100 corresponds to the communication method according to the present embodiment. Of the operations of the communication system 100, the operations of the terminal device 200 correspond to the processing procedure of the terminal program according to the present embodiment. The operation of the server apparatus 300 corresponds to the processing procedure of the server program according to the present embodiment.

  In S <b> 11 of FIG. 4, the terminal device 200 transmits terminal authentication information 211 to the server device 300. The server device 300 receives the terminal authentication information 211.

  In S12 of FIG. 4, the server apparatus 300 authenticates the terminal apparatus 200 using the terminal authentication information 211 received in S11. Specifically, the server apparatus 300 inquires of the authentication information management apparatus 400 whether the terminal authentication information 211 is legitimate. Alternatively, the server apparatus 300 is notified in advance from the authentication information management apparatus 400 whether the terminal authentication information 211 is legitimate. When it is confirmed that the terminal authentication information 211 is authentic, the terminal device 200 has been successfully authenticated. If the authentication of the terminal device 200 is successful, the flow proceeds to S13. If the authentication of the terminal device 200 fails, the flow proceeds to S15.

  In S <b> 13 of FIG. 4, the server device 300 transmits server authentication information 311 to the terminal device 200. The terminal device 200 receives the server authentication information 311.

  In S14 of FIG. 4, the terminal device 200 authenticates the server device 300 using the server authentication information 311 received in S13. Specifically, the terminal device 200 inquires of the authentication information management device 400 whether the server authentication information 311 is legitimate. Alternatively, the terminal device 200 is notified in advance from the authentication information management device 400 whether the server authentication information 311 is legitimate. If it is confirmed that the server authentication information 311 is authentic, the server apparatus 300 has been successfully authenticated. If the authentication of the server device 300 is successful, the flow proceeds to S16. If the authentication of the server device 300 fails, the flow proceeds to S15.

  In S <b> 15 of FIG. 4, the terminal device 200 executes an erasing process for erasing the terminal authentication information 211 from the storage unit 201. Specifically, this erasure process is executed by the erasure unit 205.

  In S16 of FIG. 4, the terminal device 200 and the server device 300 start mutual communication. Specifically, the terminal device 200 transmits another information 212 stored in the storage unit 201 to the server device 300. The server apparatus 300 receives the other information 212. In addition, the server device 300 transmits another information 312 stored in the storage unit 301 to the terminal device 200. The terminal device 200 receives the other information 312.

  The process of the terminal device 200 in S11 is a request process executed by the request unit 202. The processing of the terminal device 200 in S13 and S14 is authentication processing executed by the authentication unit 203. The process of the terminal device 200 in S16 is a communication process executed by the communication unit 204.

  The process of the server apparatus 300 in S11 and S12 is an authentication process executed by the authentication unit 303. The process of the server apparatus 300 in S13 is a request process executed by the request unit 302. The process of the server apparatus 300 in S16 is a communication process executed by the communication unit 304.

  As described above, the server device 300 requests the terminal authentication information 211 from the terminal device 200 when an access request from the terminal device 200 is made. The server device 300 confirms that the access request source terminal device 200 is a legitimate terminal device 200. The terminal authentication information 211 used for the confirmation is transmitted from the terminal device 200 to the server device 300 and verified by the server device 300.

  The terminal device 200 requests server authentication information 311 from the server device 300 when accessing the server device 300. The terminal device 200 confirms that the access destination server device 300 is the regular server device 300. The server authentication information 311 used for confirmation is transmitted from the server device 300 to the terminal device 200 and verified by the terminal device 200.

  Only when the verification is successful in both the terminal device 200 and the server device 300, information can be transmitted and received between the terminal device 200 and the server device 300.

FIG. 5 shows an operation example of the communication system 100 when the verification of the terminal authentication information 211 fails. The operations of (1) to (5) in FIG. 5 are as follows.
(1) When the terminal authentication information 211 held by T1 which is the terminal device 200, that is, Tauth1 is lost, Tauth1 is revoked by the authentication information revocation function 402 of the authentication information management device 400.
(2) The authentication information revocation function 402 of the authentication information management device 400 notifies the server devices 300 S1 and S2 that Tauth1 is no longer valid.
(3) When an access request is issued from T1 to S1, authentication of T1 fails in S1.
(4) When T1 detects that the authentication at the time of access to S1 has failed, the information stored in T1 is deleted. In the present embodiment, at least Tauth1 is erased.

  As in (3), when an access request is issued from T1 to S1, if Tauth1 has been tampered with, even if Tauth1 has not expired, that is, (1) and ( Even if the operation of 2) is not performed, the authentication of T1 fails. Therefore, as shown in (4), the information stored in T1 is erased.

FIG. 6 shows an operation example of the communication system 100 when the verification of the server authentication information 311 fails. The operations of (1) and (2) in FIG. 6 are as follows.
(1) When the server authentication information 311 possessed by S1 which is the server apparatus 300, that is, Sauth1 is no longer valid, when an access request is issued from S1 to T1 which is the terminal apparatus 200, S1 Authentication fails.
(2) Since the authentication of S1 has failed in T1, the information stored in T1 is deleted. In the present embodiment, at least Tauth1 is erased.

*** Explanation of effects ***
In the present embodiment, when the authentication of the terminal device 200 and the authentication of the server device 300 are successful, the terminal device 200 and the server device 300 communicate with each other, and when the authentication of the server device 300 fails, the terminal device 200 The terminal authentication information 211 is deleted from the storage unit 201. Therefore, if impersonation of the server apparatus 300 occurs and the authentication of the server apparatus 300 fails, authentication cannot be performed after that, and communication cannot be performed. For this reason, according to the present embodiment, it is possible to prevent information leakage.

  In the present embodiment, the terminal authentication information 211 can be prevented from being analyzed by including the terminal authentication information 211 in the erasing operation of the information stored in the terminal device 200.

Embodiment 2. FIG.
In the present embodiment, differences from the first embodiment will be mainly described.

  In the first embodiment, the storage unit 201 of the terminal device 200 stores terminal authentication information 211 and other information 212. On the other hand, in the present embodiment, as shown in FIG. 7, the storage unit 201 of the terminal device 200 stores confidential information 213 that is indicated to be confidential, separately from the terminal authentication information 211.

  When the authentication requested by the request unit 202 and the authentication by the authentication unit 203 are successful, the communication unit 204 transmits the confidential information 213 stored in the storage unit 201 to the server device 300.

  The erasure unit 205 executes an erasure process for erasing the terminal authentication information 211 and the confidential information 213 from the storage unit 201 when the authentication by the authentication unit 203 fails.

  In the first embodiment, the erasure process executed by the erasure unit 205 when the authentication of the server device 300 fails is a process of erasing the terminal authentication information 211 from the storage unit 201. On the other hand, in the present embodiment, when the authentication of the server apparatus 300 fails, the erasure process executed by the erasure unit 205 erases the confidential information 213 together with the terminal authentication information 211 from the storage unit 201 as described above. It is processing to do. For this reason, according to the present embodiment, it is possible to reliably prevent leakage of the confidential information 213.

Embodiment 3 FIG.
In the present embodiment, differences from the first embodiment will be mainly described.

  In the first embodiment, when the authentication of the server device 300 fails, the erasure unit 205 of the terminal device 200 executes an erasure process for erasing the terminal authentication information 211 from the storage unit 201. On the other hand, in the present embodiment, when the authentication of the server device 300 fails, the erasure unit 205 of the terminal device 200 executes an erasure process for erasing all information stored in the storage unit 201 from the storage unit 201. To do.

  That is, in the first embodiment, the erasure process executed by the erasure unit 205 when the authentication of the server device 300 fails is a process of erasing the terminal authentication information 211 from the storage unit 201. On the other hand, in this embodiment, the erasure process executed by the erasure unit 205 when the authentication of the server device 300 fails is a process of erasing another information 212 from the storage unit 201 together with the terminal authentication information 211. . For this reason, according to this Embodiment, it becomes possible to prevent the leakage of information reliably.

  The other information 212 or a part of the other information 212 may be confidential information 213 as in the second embodiment.

  Below, with reference to FIG. 8, the hardware structural example of the terminal device 200 which concerns on embodiment of this invention is demonstrated.

  The terminal device 200 is a computer. The terminal device 200 includes hardware such as a processor 901, an auxiliary storage device 902, a memory 903, a communication device 904, an input interface 905, and a display interface 906. The processor 901 is connected to other hardware via the signal line 910, and controls these other hardware. The input interface 905 is connected to the input device 907. The display interface 906 is connected to the display 908.

  The processor 901 is an IC (Integrated Circuit) that performs processing. The processor 901 is, for example, a CPU (Central Processing Unit), a DSP (Digital Signal Processor), or a GPU (Graphics Processing Unit).

  The auxiliary storage device 902 is, for example, a ROM (Read / Only / Memory), a flash memory, or an HDD (Hard / Disk / Drive). The auxiliary storage device 902 or a part of the auxiliary storage device 902 functions as the storage unit 201.

  The memory 903 is, for example, a RAM (Random Access Memory).

  The communication device 904 includes a receiver 921 that receives data and a transmitter 922 that transmits data. The communication device 904 is, for example, a communication chip or a NIC (Network, Interface, Card).

  The input interface 905 is a port to which the cable 911 of the input device 907 is connected. The input interface 905 is, for example, a USB (Universal / Serial / Bus) terminal.

  The display interface 906 is a port to which the cable 912 of the display 908 is connected. The display interface 906 is, for example, a USB terminal or an HDMI (registered trademark) (High Definition, Multimedia, Interface) terminal.

  The input device 907 is, for example, a mouse, a touch pen, a keyboard, or a touch panel.

  The display 908 is, for example, an LCD (Liquid / Crystal / Display).

  The auxiliary storage device 902 stores a program that realizes the function of “unit” such as the request unit 202, the authentication unit 203, the communication unit 204, and the deletion unit 205. This program is loaded into the memory 903, read into the processor 901, and executed by the processor 901. The auxiliary storage device 902 also stores an OS (Operating System). At least a part of the OS is loaded into the memory 903, and the processor 901 executes a program that realizes the function of “unit” while executing the OS.

  Although one processor 901 is shown in FIG. 8, the terminal device 200 may include a plurality of processors 901. A plurality of processors 901 may execute a program for realizing the function of “unit” in cooperation with each other.

  Information, data, signal values, and variable values indicating the result of processing of “unit” are stored in the auxiliary storage device 902, the memory 903, or a register or cache memory in the processor 901.

  The “part” may be provided as a “circuitry”. Further, “part” may be read as “circuit”, “process”, “procedure”, or “processing”. "Circuit" and "Circuitry" are not only the processor 901, but also other logic ICs, GA (Gate / Array), ASIC (Application / Specific / Integrated Circuit), FPGA (Field-Programmable / Gate / Array), etc. It is a concept that includes various types of processing circuits.

  The server apparatus 300 according to the embodiment of the present invention can also employ the hardware configuration illustrated in FIG.

  As mentioned above, although embodiment of this invention was described, you may implement combining some of these embodiment. Alternatively, any one or some of these embodiments may be partially implemented. For example, only one of those described as “parts” in the description of these embodiments may be employed, or some arbitrary combinations may be employed. In addition, this invention is not limited to these embodiment, A various change is possible as needed.

  100 communication system 110 Internet 200 terminal device 201 storage unit 202 request unit 203 authentication unit 204 communication unit 205 deletion unit 210 router 211 authentication information 212 other information 213 confidential information 300 server Device 301 storage unit 302 request unit 303 authentication unit 304 communication unit 311 server authentication information 312 different information 400 authentication information management device 401 authentication information generation function 402 authentication information revocation function 901 processor 902 Auxiliary storage device, 903 memory, 904 communication device, 905 input interface, 906 display interface, 907 input device, 908 display, 910 signal line, 911 cable, 912 cable, 921 receiver, 922 transmitter Tta.

Claims (7)

It includes a terminal device and a server device that perform mutual authentication and communicate when authentication is successful,
The terminal device includes a storage unit that stores terminal authentication information for authentication by the server device, and transmits the terminal authentication information to the server device.
The server device receives the terminal authentication information, authenticates the terminal device using the terminal authentication information, transmits server authentication information for authentication by the terminal device to the terminal device,
The terminal device receives the server authentication information, authenticates the server device using the server authentication information, and deletes the terminal authentication information from the storage unit when the server device authentication fails A communication system for executing processing. In addition to the terminal authentication information, the terminal device stores confidential information indicated as confidential in the storage unit, and when the authentication of the server device and the authentication of the terminal device are successful, the confidential information is stored. Sending information to the server device;
The communication system according to claim 1, wherein the erasure process is a process of erasing the confidential information together with the terminal authentication information from the storage unit. The terminal device further stores information different from the terminal authentication information and the confidential information in the storage unit,
The communication system according to claim 2, wherein the erasing process is a process of erasing all information stored in the storage unit from the storage unit.   The communication system according to any one of claims 1 to 3, wherein the terminal device executes the erasure process even when authentication of the terminal device fails. Authenticate each other, out of the terminal device and the server device that communicate when authentication is successful, the terminal device acquires terminal authentication information for authentication by the server device from the storage unit of the terminal device, Sending the terminal authentication information to the server device;
The server device receives the terminal authentication information, authenticates the terminal device using the terminal authentication information,
The server device transmits server authentication information for authentication by the terminal device to the terminal device;
The terminal device receives the server authentication information, authenticates the server device using the server authentication information,
A communication method for executing an erasing process for erasing the terminal authentication information from the storage unit when the terminal device fails to authenticate the server device. A storage unit for storing terminal authentication information for authentication by the server device and other information;
A request unit that acquires the terminal authentication information from the storage unit, transmits the terminal authentication information to the server device, and requests authentication by the server device;
Server authentication information for authentication of the server device is received from the server device, and an authentication unit that authenticates the server device using the server authentication information;
When the authentication requested by the request unit and the authentication by the authentication unit succeed, a communication unit that transmits the other information to the server device;
A terminal device comprising: an erasure unit that executes an erasure process for erasing the terminal authentication information from the storage unit when authentication by the authentication unit fails. In a computer having a storage unit for storing terminal authentication information for authentication by the server device and other information,
Request processing for acquiring the terminal authentication information from the storage unit, transmitting the terminal authentication information to the server device, and requesting authentication by the server device;
Authentication processing for receiving server authentication information for authentication of the server device from the server device, and performing authentication of the server device using the server authentication information;
When the authentication requested by the request processing and the authentication by the authentication processing are successful, a communication processing for transmitting the other information to the server device;
A terminal program for executing an erasure process for erasing the terminal authentication information from the storage unit when authentication by the authentication process fails.

Images