JP2023143533A - Service authority transfer system, mobile terminal, computer program, and service authority transfer method - Google Patents

Abstract

To enable the migration of a service privilege for a mobility service and to prevent unauthorized use of the service privilege related to the mobility service.SOLUTION: A service authority transfer system 1 includes a contactless IC card 2 and an eSE 31 installed in a mobile terminal 3 as a near field communication (NFC) device. An authority transfer control unit 300 of a service APP 30 installed in the mobile terminal 3 registers a service authority 316 in an eSE31 which is the destination NFC device after deleting the authority information 26 registered in the contactless IC card 2 when transferring the service authority from the contactless IC card 2 to the eSE 31. The source NFC device may be the eSE 31 and the destination NFC device may be the contactless IC card 2.SELECTED DRAWING: Figure 1

Description

The present invention relates to a system and method for transferring a service authority granted to a source device to a destination device to which no service authority is assigned.

One type of NFC device compatible with NFC (Near Field Communication) is a contactless IC card, which is a card-type NFC device. In response to the attention that mobility services (MaaS: Mobility as a Service) are attracting, consideration is being given to enabling contactless IC cards to be used in mobility services (for example, Patent Document 1). Note that in this application, NFC means wireless communication with a communication distance of about 10 cm.

The present applicant has already released the in-vehicle NFC system 5 illustrated in FIG. 4 of the present application as a system for using a contactless IC card in mobility services. The in-vehicle NFC system 5 illustrated in FIG. 4 of the present application includes an NFC reader/writer 51, a UWB reader/writer 52 (UWB: Ultra Wide Band), multiple SEs 53 (SE: Secure Elements) such as for authentication and digital keys, and these components. It includes a controller 50 that controls the. The controller 50 connects to an external device using the UWB reader/writer 52, and connects to a contactless IC card via the NFC reader/writer 51 if a request from the external device cannot be processed by any of the SEs 53.

Japanese Patent Application Publication No. 2013-20547

A front-end IC (Integrated Circuit) designed for wireless communication compatible with NFC has been developed. In this application, this front-end IC is called an NFC chip. By equipping a mobile terminal (for example, a smartphone) with an NFC chip, the mobile terminal can be used as an NFC device.

Considering the convenience of users using NFC in-vehicle systems, it is desirable to be able to migrate the NFC devices used in NFC in-vehicle systems from contactless IC cards to mobile terminals. If granted to an NFC device, there is a possibility that service privileges related to mobility services may be used illegally.

Therefore, in this application, the service authority of a mobility service can be transferred from an NFC device to which service authority has been granted to another NFC device to which no service authority has been granted, and furthermore, even if the service authority is transferred, the mobility service cannot be transferred. The purpose is to prevent unauthorized use of such service privileges.

A first invention that solves the above-mentioned problems includes a source NFC device that stores authority information related to service authority of a mobility service, a destination NFC device that does not store the authority information, an NFC chip, and an embedded secure element. When transferring service privileges for a mobility service from the source NFC device to the destination NFC device, the authority information stored in the source NFC device is deleted and then transferred to the destination NFC device. a mobile terminal that executes the process of registering the authority information; one of the embedded secure element of the mobile terminal and the non-contact IC card is used as the migration source NFC device; The service authority migration system is characterized in that the other of the contact IC cards is used as the migration destination NFC device.
In the first invention, the mobile terminal includes a service server that generates the authority information based on identification information used to identify the NFC device, and the mobile terminal transmits the identification information of the migration destination NFC device to the service server, and Preferably, the authority information generated by the server is registered in the destination NFC device.
Furthermore, in the first invention, the mobile terminal transmits the identification information of the migration destination NFC device and the identification information and authority information of the migration source NFC device to the service server, and the service server transmits the identification information of the migration source NFC device. The authority information of the source NFC device is authenticated using the device identification information, and only when the authority information of the source NFC device is successfully authenticated, the authority information based on the identity information of the destination NFC device is authenticated. It is preferable to generate it.

Furthermore, a second invention is a mobile terminal that constitutes the service authority transfer system described in the first invention.

Furthermore, the third invention provides step a of deleting authority information from a source NFC device that stores authority information related to service authority of a mobility service, and transmitting the authority information to a destination NFC device that does not store the authority information. This is a computer program for causing a processor of a mobile terminal to execute step b of registering. The third invention is an invention related to an application installed on a mobile terminal.
In the third invention, in the step executed before the step b, the identification information of the migration destination NFC device is transmitted to a service server that generates the authority information based on the identification information used to identify the NFC device, and the migration Preferably, the processor of the mobile terminal executes step c of receiving the authority information to be registered in the destination NFC device from the service server.

A third invention provides step a in which a mobile terminal equipped with an NFC chip and executing processing related to transfer of service authority of a mobility service deletes authority information related to service authority of a mobility service from a transfer source NFC device; The service authority transfer method is characterized in that it includes step b of registering the authority information in an NFC device.
In the third invention, the mobile terminal transmits the identification information of the migration destination NFC device to a service server that generates the authority information based on the identification information used to identify the NFC device, and registers it with the migration destination NFC device. Preferably, step c of receiving the authority information from the service server is included as a step executed before step b.
Furthermore, in the third invention, in step c, the mobile terminal transmits the identification information of the migration destination NFC device and the identification information and authority information of the migration source NFC device to the service server, and uses the identification information of the source NFC device to authenticate the authority information of the source NFC device, and only when the authority information of the source NFC device is successfully authenticated, the identity information of the destination NFC device is authenticated. Preferably, the authority information is generated based on.

In the present invention, when transferring the service authority of the mobility service from the source NFC device to the destination NFC device, the authority information stored in the source NFC device is deleted and then the authority information is registered in the destination NFC device. This prevents one service authority from being registered in two NFC devices even if the mobility service authority is transferred.

A diagram showing the configuration of a service authority migration system. FIG. 1 shows a procedure for transferring service authority. FIG. 2 shows a procedure for transferring service authority. FIG. 2 is a diagram illustrating an in-vehicle NFC system.

From here, the embodiments of the present application will be described. The embodiments of the present application are intended to facilitate understanding of the invention of the present application, and the invention of the present application is not limited to the embodiments of the present application. Further, unless otherwise specified, the drawings are schematic diagrams drawn to facilitate understanding of the present invention.

FIG. 1 is a diagram showing the configuration of a service authority migration system 1 according to an embodiment of the present application. FIG. 2 is a first diagram showing the procedure for transferring service authority. FIG. 3 is a second diagram showing the procedure for transferring service authority.

A service authority migration system 1 according to an embodiment of the present application is a system that migrates service authority for a mobility service from a source NFC device to which service authority has been granted to a destination NFC device to which service authority has not been granted.

The service authority migration system 1 illustrated in FIG. 1 includes a mobile terminal 3 equipped with an NFC chip 32 and an embedded secure element 31 (eSE), and a contactless IC card 2 compatible with NFC. In the service authority transfer system 1 illustrated in FIG. 1, the eSE 31 of the mobile terminal 3 and the contactless IC card 2 can be used as NFC devices. Further, the service authority transfer system 1 illustrated in FIG. 1 includes a service server 4 having a function of generating authority information related to mobility services. The authority information related to the mobility service is information indicating that service authority for the mobility service has been granted, and is also information that is authenticated by the service server 4 and the like when using the mobility service.

In the service authority transfer system 1 illustrated in FIG. 1, the mobile terminal 3 is the device that executes the transfer of service authority related to mobility services. If the same authority information is registered in two NFC devices, there is a possibility that the service authority related to the mobility service will be used illegally. In order to prevent the same authority information from being registered in two NFC devices, when transferring the service authority related to the mobility service, the mobile terminal 3 registers the authority information in the transfer source NFC device before registering the authority information in the transfer destination NFC device. Delete the authority information stored in the NFC device. In the present application, either the eSE 31 of the mobile terminal 3 or the contactless IC card 2 can be used as the source NFC device, and the other of the eSE 31 or the contactless IC card 2 of the mobile terminal 3 can be used as the destination NFC device. For example, if the migration source NFC device is the contactless IC card 2 and the migration destination NFC device is the eSE31 of the mobile terminal 3, the mobile terminal 3 deletes the authority information registered in the contactless IC card 2, and then , register authority information in the eSE31. This makes it possible to limit the number of NFC devices that register authority information related to one service authority to one.

In order to further prevent unauthorized use of service authority, it is desirable that authority information be different for each NFC device. Since the source NFC device and the destination NFC device use different identification information to identify the NFC device, the service server 4 according to the embodiment of the present application generates authority information based on the identification information of the NFC device.

Furthermore, in order to further prevent unauthorized use of the service authority, it is desirable to authenticate the source NFC device when transferring the service authority of the mobility service from the source NFC device to the destination NFC device. The service server 4 according to the embodiment of the present application generates the authority information of the destination NFC device only when the authority information of the source NFC device is successfully authenticated.

First, the mobile terminal 3 that constitutes the service authority transfer system 1 illustrated in FIG. 1 will be described. In this application, the mobile terminal 3 is a general term for computer equipment that is small, lightweight, and suitable for carrying. Although the mobile terminal 3 is illustrated as a smartphone in FIG. 1, the smartphone is only one example of the mobile terminal 3. The mobile terminal 3 also includes a tablet computer or a notebook personal computer.

As illustrated in FIG. 1, the mobile terminal 3 includes a mobile communication circuit 33, an NFC chip 32, and an eSE 31 as hardware. Naturally, the mobile terminal 3 is equipped with hardware, such as a processor and a memory, which are not shown in FIG. 1 and are necessary for operating as the mobile terminal 3. The mobile terminal 3 also includes a service application 30 (hereinafter referred to as service APP30. APP is an abbreviation for Application) as a computer program that operates the processor.

The mobile communication circuit 33 of the mobile terminal 3 is a circuit for bidirectionally communicating with other devices via a mobile communication network in accordance with communication standards such as 4G or 5G. In the present application, the mobile communication circuit 33 of the mobile terminal 3 is used for communication with the service server 4. The NFC chip 32 is a front-end IC designed for wireless communication compatible with NFC. In the present application, the NFC chip 32 of the mobile terminal 3 is used for communication with the contactless IC card 2.

The eSE 31 refers to a semiconductor product that is equipped with a memory that is tamper-resistant against external analysis attacks and is mounted on the circuit board of the mobile terminal 3. In the embodiment of the present application, the mobile terminal 3 is configured such that the eSE 31 is connected to the NFC chip 32 and the eSE 31 can use the NFC chip 32 without going through the service APP 30.

The eSE 31 is equipped with an applet 31a for using mobility services. The applet 31a means a small program that operates on the platform of the eSE31. The Java (registered trademark) platform is famous as the eSE31 platform. The applet 31a of the eSE31 is installed in the eSE31 when the service APP30 is installed in the mobile terminal 3.

In this embodiment, in order to enable the eSE 31 of the mobile terminal 3 to be used as an NFC device, the identification information 315 and authority information 316 of the eSE 31 are stored in the applet 31a of the eSE 31. The identification information 315 of the eSE 31 is different information for each eSE 31. The identification information 315 of the eSE31 is written to the applet 31a of the eSE31 when the applet 31a of the eSE31 is installed. The authority information 316 of the eSE 31 is written to the applet 31a of the eSE 31 when the eSE 31 is used in a mobility service.

The applet 31a of the eSE31 includes a session key generation section 310, an authorization section 311, an authorization deletion section 312, a reading section 313, and a cryptographic operation section 314 as functions called from the service APP30.

The session key generation unit 310 has a function of generating a session key used for encrypted communication with the service server 4. Any method can be used to generate the session key. A method of generating a session key from a common master key between the eSE 31 and the service server 4, and a method of generating a session key using an encryption key of public key cryptography are known.

The cryptographic operation unit 314 has a function of encrypting information or decoding encrypted information. When the cryptographic operation unit 314 is called with encryption specified, it encrypts the specified information using the session key generated by the session key generation unit 310. Furthermore, when the cryptographic calculation unit 314 is called with decryption specified, it decrypts the designated cryptographic information using the session key generated by the session key generation unit 310.

The authorization unit 311 has a function of registering (writing) the authorization information handed over from the service APP 30 into the memory of the eSE 31. The authority deletion unit 312 is a function that deletes authority information stored in the memory of the eSE 31. The reading unit 313 has a function of reading information stored in the memory of the eSE 31.

The service APP 30 included in the mobile terminal 3 is a computer program that runs on the operating system installed in the mobile terminal 3. The service APP 30 included in the mobile terminal 3 includes an authority transfer control unit 300 that executes a process of transferring service authority for a mobility service. The processing executed by the authority transfer control unit 300 included in the mobile terminal 3 will be described later.

Furthermore, the service APP 30 included in the mobile terminal 3 includes a channel establishment section 301 that establishes a secure channel between the service APP 30 included in the mobile terminal 3 and the contactless IC card 2 . The channel establishment unit 301 executes processing for establishing a secure channel between the service APP 30 provided in the mobile terminal 3 and the non-contact IC card 2 in accordance with a method defined by a standard related to IC cards such as ISO7816.

From here, the contactless IC card 2 that constitutes the service authority transfer system 1 will be explained. The non-contact IC card 2 refers to a card-type NFC device equipped with a coil antenna and an IC chip used in NFC. In the present application, the form of the non-contact IC card 2 is not limited to the card type. The contactless IC card 2 may be in the form of a key fob or may be in the form of a coin.

As illustrated in FIG. 1, the contactless IC card 2 includes an NFC circuit 20 as hardware. Naturally, the contactless IC card 2 includes hardware such as a processor and a memory for operating as the contactless IC card 2, but this hardware is not shown in FIG.

As illustrated in FIG. 1, the contactless IC card 2 has a channel establishment function that establishes a secure channel between the service APP 30 provided in the mobile terminal 3 and the contactless IC card 2, as a function realized by a computer program that operates a processor. A section 21 is provided. The contactless IC card 2 also includes an authorization command 22, an authorization deletion command 23, and a read command 24 as commands implemented by a computer program that operates a processor. Further, the memory of the non-contact IC card 2 stores identification information 25 and authority information 26 of the non-contact IC card 2 as information.

The NFC circuit 20 is a circuit designed for wireless communication compatible with NFC. A coil antenna built into the non-contact IC card 2 is connected to the NFC circuit 20. In the present application, the NFC circuit 20 of the contactless IC card 2 is used for communication with the mobile terminal 3.

The identification information 25 stored in the non-contact IC card 2 is different information for each non-contact IC card 2. The identification information 25 stored in the non-contact IC card 2 is registered in the memory of the non-contact IC card 2 at the time of manufacture. The authority information 26 stored in the non-contact IC card 2 is information generated by the service server 4. The authority information 26 is written to the contactless IC card 2 when used in the mobility service.

The channel establishment unit 21 provided in the contactless IC card 2 establishes a secure channel between the service APP 30 provided in the mobile terminal 3 and the contactless IC card 2 according to the same method as the channel establishment unit 301 provided in the service APP 30 of the mobile terminal 3. Execute the processing to be performed.

The authorization command 22 is a command for registering (writing) authorization information 26 in the memory of the non-contact IC card 2. The authority deletion command 23 is a command for deleting the authority information 26 registered in the memory of the non-contact IC card 2. The read command 24 is a command for reading information stored in the memory of the non-contact IC card 2.

Next, the service server 4 that constitutes the service authority migration system 1 will be explained. As described above, the service server 4 is a device that has a function of generating authority information for authentication on the mobility service side. In FIG. 1, a service server 4 is connected to a mobility service terminal device 6 that communicates via UWB with a vehicle in which an in-vehicle NFC system has been constructed.

The service server 4 is realized by implementing necessary computer programs in a commercially available server. The service server 4 is equipped with hardware such as a processor and memory like a commercially available server, but the hardware included in the service server 4 is not illustrated in FIG. 1.

The service server 4 includes a session key generation section 40 and an authority information generation section 41 as functions realized using a computer program. The service server 4 also includes an authority information DB 42 as a database (DB: DataBase).

The session key generation unit 40 has a function of generating a session key used for encrypted communication with the eSE 31 of the mobile terminal 3. Although the method of generating the session key is arbitrary, the method of generating the session key is common to the eSE31.

The authority information generation unit 41 is a function of at least generating authority information to be authenticated on the mobility service side. As described above, in order to make the identification information different for each NFC device, in the embodiment of the present application, the authority information is generated based on the identification information of the NFC device. For example, authority information based on the identification information of the NFC device can be generated using a hash function that takes at least the identification information of the NFC device as an argument. The authority information DB 42 records the authority information of the NFC device in association with the identification information of the NFC device to which the mobility service service authority has been granted.

From here, the operation of the service authority transfer system 1 according to the embodiment of the present application will be explained. The explanation of the operation of the service authority transfer system 1 according to the embodiment of the present application also serves as an explanation of the service authority transfer method according to the present application. FIG. 2, which is the first diagram showing the procedure for transferring the service authority, shows the procedure for transferring the service authority from the non-contact IC card 2 to the mobile terminal 3. Referring to FIG. 2, a procedure for transferring service authority from the contactless IC card 2 to the mobile terminal 3 will be described. When transferring service authority from the contactless IC card 2 to the mobile terminal 3, the authority information 26 is stored in the non-contact IC card 2 that becomes the transfer source, but the authority information 316 is stored in the mobile terminal 3 that becomes the transfer destination. is not remembered.

When an operation is performed to transfer the service authority from the contactless IC card 2 to the mobile terminal 3 in the service APP 30 provided in the mobile terminal 3, the authority transfer control unit 300 of the mobile terminal 3 operates to control the authority transfer of the mobile terminal 3. The unit 300 causes the eSE 31 included in the mobile terminal 3 and the service server 4 to generate a session key (S1). At this time, the authority transfer control unit 300 of the mobile terminal 3 causes the session key generation unit 310 of the eSE 31 to communicate with the session key generation unit 40 of the service server 4 via the service APP 30, and causes the session key generation unit 310 of the eSE 31 to communicate with the session key generation unit 40 of the service server 4. The session key generation unit 40 of No. 4 is caused to execute processing for generating a session key.

Next, the authority transfer control unit 300 of the service APP 30 establishes a secure channel between the service APP 30 provided in the mobile terminal 3 and the contactless IC card 2 (S2). At this time, the authority transfer control unit 300 of the mobile terminal 3 activates the channel establishment unit 301 of the service APP 30 and connects the channel establishment unit 301 of the service APP 30 with the contactless IC via the NFC chip 32 included in the mobile terminal 3. The channel establishment unit 21 of the card 2 communicates, and a secure channel between the service APP 30 and the non-contact IC card 2 is established. Once the secure channel between the service APP 30 and the contactless IC card 2 is established, the information communicated between the service APP 30 and the contactless IC card 2 is encrypted.

Once the secure channel is established, the authority transfer control unit 300 of the service APP 30 transmits a command to read the authority information 316 and identification information 315 to the contactless IC card 2 (S3). The read command 24 of the non-contact IC card 2 is used for this command. The read command 24 of the non-contact IC card 2 transmits each of the authority information 26 and the identification information 25 stored in the non-contact IC card 2 to the service APP 30 (S4).

Next, the authority transfer control unit 300 of the service APP 30 transmits a command to read the identification information 315 to the eSE 31 (S5). This command is a command to call the reading unit 313 of the eSE 31, and the reading unit 313 of the eSE 31 transmits the identification information 315 stored in the memory of the eSE 31 (S6).

Next, the authority transfer control unit 300 of the service APP 30 transmits to the eSE 31 a command to encrypt the information (authority information 26 and identification information 25) received from the contactless IC card 2 and the identification information 315 read from the eSE 31 ( S7). This command is a command to call the cryptographic calculation unit 314 of the eSE31, and the cryptographic calculation unit 314 of the eSE31 encrypts this information using the session key generated in step S1 (S8) and stores the authority information of the contactless IC card 2. 26 and the identification information 25, as well as encrypted information obtained by encrypting the identification information 315 of the eSE 31, are transmitted to the service APP 30 (S9).

Next, the authority transfer control unit 300 of the service APP 30 transmits an authority transfer start request including the encrypted information received from the eSE 31 to the service server 4 (S10). The authority transfer start request is a message requesting the service server 4 to generate authority information 316 to be registered in the eSE 31. The authority information generation unit 41 of the service server 4 first decrypts the encrypted information included in the authority transfer start request using the session key generated by the session key generation unit in S1 (S11).

After decoding the encrypted information, the authority information generation unit 41 of the service server 4 authenticates the contactless IC card 2 using at least the authority information 26 and identification information 25 of the contactless IC card 2 (S12). Any method can be used to authenticate the contactless IC card 2. In the present application, the authority information generation unit 41 of the service server 4 generates the authority information stored in the authority information DB 42 in association with the identification information 25 of the contactless IC card 2 which has been encrypted in the encrypted information, and the encrypted information. The encrypted authority information 26 of the contactless IC card 2 is verified. In this step S12, the authority information calculated from the identification information 25 of the contactless IC card 2 may be compared with the authority information 26 of the contactless IC card 2 that has been encrypted in the encrypted information.

When the contactless IC card 2 is successfully authenticated, the authority information generation unit 41 of the service server 4 generates the authority information 316 of the eSE 31 using at least the identification information 315 of the eSE 31 that has been encrypted in the encrypted information, After encrypting the authority information 316 of the eSE 31 using the session key (S13), the encrypted authority information obtained by encrypting the authority information 316 of the eSE 31 is transmitted to the service APP 30 of the mobile terminal 3 (S14). When the authority information generation unit 41 of the service server 4 generates the authority information 316 of the eSE 31, it associates the authority information 316 of the eSE 31 with the identification information 315 of the eSE 31 that has been encrypted in the encrypted information, and stores the authority information 316 of the eSE 31 in the authority information DB 42. register.

The authority transfer control unit 300 of the service APP 30 transmits a command to the eSE 31 to decrypt the encrypted authority information received from the service server 4 (S15). This command is a command to call the cryptographic calculation unit 314 of the eSE31, and the cryptographic calculation unit 314 of the eSE31 decrypts the encrypted authority information using the session key generated in step S1 (S16), and the eSE31 obtained by decrypting the encrypted authority information. authority information 316 to the service APP 30 (S17).

When the authority information 316 of the eSE 31 is transmitted from the eSE 31, the authority transfer control unit 300 of the service APP 30 transmits a service authority deletion command to the contactless IC card 2 (S18). The read command 24 of the non-contact IC card 2 is used for this command. The authority deletion command 23 for the contactless IC card 2 deletes the service authority granted to the contactless IC card 2 by deleting the authority information 26 stored in the memory of the contactless IC card 2 (S19). .

When the authority transfer control unit 300 of the service APP 30 is notified of the completion of deletion from the contactless IC card 2 (S20), it transmits a service authority grant command including the authority information 316 of the eSE 31 obtained in step S17 to the eSE 31. (S21). The authorization unit 311 of the eSE 31 grants service authority to the eSE 31 of the mobile terminal 3 by registering the authority information 316 of the eSE 31 received from the service APP 30 in the memory of the eSE 31 (S22).

When the eSE 31 notifies the completion of granting the service authority (S23), the service APP 30 of the mobile terminal 3 transmits an authority transfer completion notification indicating that the authority transfer has been completed to the service server 4 (S14). The procedure ends.

FIG. 3, which is a second diagram showing the procedure for transferring the service authority, shows the procedure for transferring the service authority from the mobile terminal 3 to the non-contact IC card 2. Referring to FIG. 3, a procedure for transferring service authority from the mobile terminal 3 to the contactless IC card 2 will be described. When transferring service authority from the mobile terminal 3 to the contactless IC card 2, the authority information 316 is stored in the mobile terminal 3 which becomes the transfer source, but the authority information 26 is stored in the contactless IC card 2 which becomes the transfer destination. is not remembered.

When an operation is performed to transfer the service authority from the contactless IC card 2 to the mobile terminal 3 in the service APP 30 provided in the mobile terminal 3, the authority transfer control unit 300 of the mobile terminal 3 operates to control the authority transfer of the mobile terminal 3. The unit 300 causes the eSE 31 included in the mobile terminal 3 and the service server 4 to generate a session key (S30). At this time, the authority transfer control unit 300 of the mobile terminal 3 causes the session key generation unit 310 of the eSE 31 to communicate with the session key generation unit 40 of the service server 4 via the service APP 30, and causes the session key generation unit 310 of the eSE 31 to communicate with the session key generation unit 40 of the service server 4. The session key generation unit 40 of No. 4 is caused to execute processing for generating a session key.

Next, the authority transfer control unit 300 of the service APP 30 establishes a secure channel between the service APP 30 provided in the mobile terminal 3 and the contactless IC card 2 (S31). At this time, the authority transfer control unit 300 of the mobile terminal 3 activates the channel establishment unit 301 of the service APP 30 and connects the channel establishment unit 301 of the service APP 30 and the contactless IC card 2 via the NFC chip 32 included in the mobile terminal 3. The channel establishment unit 21 communicates, and a secure channel between the service APP 30 and the contactless IC card 2 is established. Once the secure channel between the service APP 30 and the contactless IC card 2 is established, the information communicated between the service APP 30 and the contactless IC card 2 is encrypted.

After establishing the secure channel, the authority transfer control unit 300 of the service APP 30 transmits a command to read the identification information 25 of the contactless IC card 2 to the contactless IC card 2 (S32). The read command 24 of the non-contact IC card 2 is activated, and the read command 24 of the non-contact IC card 2 transmits the identification information 25 stored in the non-contact IC card 2 to the service APP 30 (S33).

Next, the authority transfer control unit 300 of the service APP 30 transmits a command to read the authority information 316 and identification information 315 of the eSE 31 to the eSE 31 (S34). This command is a command to call the reading unit 313 of the eSE 31, and the reading unit 313 of the eSE 31 respectively transmits the authority information 316 and the identification information 315 stored in the memory of the eSE 31 (S35).

Next, the authority transfer control unit 300 of the service APP 30 transmits a command to the eSE 31 to encrypt the identification information 25 of the contactless IC card 2, the identification information 315 of the eSE 31, and the authority information 316 (S36). This command is a command to call the cryptographic calculation unit 314 of the eSE31, and the cryptographic calculation unit 314 of the eSE31 encrypts this information using the session key generated in step S30 (S37), and stores the identification information of the contactless IC card 2. 25, and the encrypted information obtained by encrypting the identification information 315 and authority information 316 of the eSE 31 are transmitted to the service APP 30 (S38).

Next, the authority transfer control unit 300 of the service APP 30 transmits an authority transfer start request including the encrypted information received from the eSE 31 to the service server 4 (S39). The authority transfer start request is a message requesting the service server 4 to generate authority information. The authority information generation unit 41 of the service server 4 decrypts the encrypted information included in the authority transfer start request using the session key generated by the session key generation unit 40 in S30 (S40).

After decrypting the encrypted information, the authority information generating unit 41 of the service server 4 authenticates the eSE 31 using at least the identification information 315 and the authority information 316 of the eSE 31 (S41). Any method can be used to authenticate the eSE 31. In the present application, the authority information generation unit 41 of the service server 4 generates the authority information stored in the authority information DB 42 in association with the identification information 315 of the eSE 31 that has been encrypted in the encrypted information, and the authority information that has been encrypted in the encrypted information. The authority information 316 of the eSE 31 is verified. Note that in this step S41, the authority information calculated from the identification information 315 of the eSE 31 may be compared with the authority information 316 of the eSE 31 that has been encrypted in the encrypted information.

When the eSE 31 is successfully authenticated, the authority information generation unit 41 of the service server 4 generates the authority information of the contactless IC card 2 using at least the identification information 25 of the contactless IC card 2 that has been encrypted in the encrypted information. After encrypting the authority information 26 of the contactless IC card 2 using the session key (S42), the encrypted authority information obtained by encrypting the authority information 26 of the contactless IC card 2 is sent to the service APP 30 of the mobile terminal 3. (S43). In addition, when the authority information generation unit 41 of the service server 4 generates the authority information 26 of the contactless IC card 2, it associates it with the identification information 25 of the contactless IC card 2 that was encrypted in the encrypted information, and generates the authority information 26 of the contactless IC card 2. The authority information 26 of the IC card 2 is registered in the authority information DB 42.

The authority transfer control unit 300 of the service APP 30 transmits a command to the eSE 31 to decrypt the encrypted authority information received from the service server 4 (S44). This command is a command to call the cryptographic calculation unit 314 of the eSE31, and the cryptographic calculation unit 314 of the eSE31 decrypts the encrypted authority information using the session key generated in step S1 (S45), and the cryptographic calculation unit 314 of the eSE31 decrypts the encrypted authority information using the session key generated in step S1. The authority information 26 of the contact IC card 2 is transmitted to the service APP 30 (S46).

When the authority information of the mobile terminal 3 is transmitted from the eSE 31, the authority transfer control unit 300 of the service APP 30 transmits a service authority deletion command to the eSE 31 (S47). This command is a command to call the authority deletion unit 312 of the eSE31, and the authority deletion unit 312 of the eSE31 deletes the service authority granted to the eSE31 by deleting the authority information 316 of the eSE31 stored in the memory of the eSE31. (S48).

When the authority transfer control unit 300 of the service APP 30 is notified of the deletion completion from the eSE 31 (S49), the authority transfer control unit 300 of the service APP 30 transmits a service authority granting instruction to the contactless IC card 2 including the authority information 26 of the contactless IC card 2 obtained in step S46. 2 (S50). The authorization command 22 of the contactless IC card 2 is used for this command. The contactless IC card 2 authorization command 22 grants service authority to the contactless IC card 2 by registering the contactless IC card 2 authorization information 26 received from the service APP 30 in the contactless IC card 2 memory. (S51).

When the eSE 31 notifies that the service authority has been granted (S52), the service APP 30 sends an authority transfer completion notification indicating that the authority transfer has been completed to the service server 4 (S53), and the procedure in FIG. 3 ends. do.

1 Service authority transfer system 2 Contactless IC card 25 Identification information 26 Authority information 3 Mobile terminal 30 Service application 31 Embedded secure element 315 Identification information 316 Authority information 32 NFC chip 4 Service server

Claims (9)

a migration source NFC device that stores authority information related to service authority of the mobility service;
a migration destination NFC device that does not store the authority information;
Equipped with an NFC chip and an embedded secure element, when transferring the service authority of a mobility service from the source NFC device to the destination NFC device, delete the authority information stored in the source NFC device, and then , comprising a mobile terminal that executes a process of registering the authority information in the migration destination NFC device,
One of the embedded secure element and the contactless IC card of the mobile terminal is the source NFC device, and the other of the embedded secure element and the contactless IC card of the mobile terminal is the destination NFC device. ，
A service authority migration system characterized by: The mobile terminal includes a service server that generates the authority information based on the identification information used to identify the NFC device, and the mobile terminal transmits the identification information of the migration destination NFC device to the service server and uses the authority information generated by the service server. The service authority migration system according to claim 1, characterized in that information is registered in the migration destination NFC device. The mobile terminal transmits the identification information of the migration destination NFC device and the identification information and authority information of the migration source NFC device to the service server, and the service server uses the identification information of the migration source NFC device. to authenticate the authority information of the source NFC device, and generate the authority information based on the identification information of the destination NFC device only when the authority information of the source NFC device is successfully authenticated. The service authority migration system according to claim 2. A mobile terminal constituting the service authority transfer system according to any one of claims 1 to 3. A step a of deleting the authority information from the source NFC device that has stored the authority information related to the service authority of the mobility service, and a step b of registering the authority information in the destination NFC device that does not store the authority information are carried out on a mobile terminal. A computer program that is executed by a processor. In the step executed before step b, the identification information of the migration destination NFC device is sent to a service server that generates the authority information based on the identification information used to identify the NFC device, and registered in the migration destination NFC device. 6. The computer program product according to claim 5, for causing a processor of a mobile terminal to execute step c of receiving the authority information from the service server. In step a, a mobile terminal equipped with an NFC chip and executing processing related to the transfer of service authority of the mobility service deletes authority information related to the service authority of the mobility service from the transfer source NFC device, and transfers the said authority to the transfer destination NFC device. step b of registering information;
A service authority migration method characterized by comprising: The mobile terminal transmits the identification information of the migration destination NFC device to a service server that generates the authority information based on the identification information used to identify the NFC device, and transmits the authority information to be registered in the migration destination NFC device to the service server. 8. The service authority transfer method according to claim 7, further comprising step c of receiving data from a service server as a step executed before step b. In the step c, the mobile terminal transmits the identification information of the migration destination NFC device and the identification information and authority information of the migration source NFC device to the service server, and the service server transmits the identification information of the migration source NFC device. The authority information of the source NFC device is authenticated using the identification information of the source NFC device, and only when the authority information of the source NFC device is successfully authenticated, the authority information is generated based on the identification information of the destination NFC device. 9. The service authority transfer method according to claim 8, characterized in that:

Images