JP2967456B2 - Authentication system - Google Patents

Description

DETAILED DESCRIPTION OF THE INVENTION [0001] BACKGROUND OF THE INVENTION The present invention relates to, for example,
Information such as the contents of purchase orders and contracts,
Exchange message data between the parties' computers
If you conduct a paperless transaction with
Digit for authenticating the sender of certain message data
The present invention relates to an authentication system having a function of generating a signature. [0002] 2. Description of the Related Art In this type of authentication system, a conventional
For example, information processing VOL. 2
5 NO. 6 (1984) p554-560, information processing V
OL. 24 NO. 7 (1983) p853-861
There was one listed. Generate this conventional digital signature
FIG. 11 shows an authentication system having a function to perform this function. FIG.
Is a digital signature using public key cryptography.
1 is an example of a name authentication system. Biography of one of the parties
Message data M that sender A is notorious for
Secret decryption key D_ADecrypted by D_A(M)
Obtained, and the decrypted data D_A(M)
Public key E of recipient B, the other party_BEncrypt with
Statement C = E_B｛D_A(M)｝ is obtained. And this ciphertext C
Is transmitted to the recipient B. In the receiver B, the received data C is
Private key D owned by itself_BDecrypt with D_A(M)
You. This D_A(M) becomes the digital signature. And
D_A(M) to public key E_ATo encrypt the original
Message data M can be obtained. At recipient B,
Together with this message data M, D_A(M)
It is stored as digital prominent data in an electronic file etc.
Keep it. In this way, if the message data is not famous
External private key D owned by the user_AFrom etc
According to the secret conversion data (secret rule)
The message data is converted by an algorithm and
Conversion data D_A(M) is transmitted by the receiver to the transmission data M
By transmitting to the recipient side so that it can be distinguished from the
Digital signature can be performed. As a result,
Fellow B falsifies the received message data M
The message data M and digital signature data
D_A(M) is lost and both tend to
It will be a jumble. In other words, digital
D which is name data_A(M) means that the message data M
Transmitter A's private key D_AThis is the
When the message data M is falsified into data M '
Can use the secret key D_AEven if decrypted by D
_A(M '), and the D_A(M) does not match
That is, it is easily found that the information has been tampered with.
Therefore, in the receiver B, the message data M is
M 'falsified and its digital famous data D
_A(M) also adjusts the tampered message data M '
Compatible D_A(M ')
Attempt to forge to maintain compatibility. But recipient B
Side is D_ATo obtain (M '), the secret of sender A
Secret key D as an example of the conversion data_AUnless you know
It is impossible. However, this secret key D_AIs external
To be secret and unique to sender A,
Recipient B has secret key D_AIt's generally impossible to get
It is. Also, the digital signature received by the receiver B is
Is D_A(M) to be converted to another paperless contract
However, other paperless contracts are generally
Because it is different from Sage Data M,
D which is a digital signature for a certain data N_A(M)
N and signature data D_A
(M) is not compatible with the digital signature
The diversion of names to other contracts can easily be found. As described above, the disk shown in FIG.
The digital signature system signs the transmission data M.
Secret key D owned by signer A_AEtc. externally
A predetermined algorithm according to the secret secret conversion data
The transmission data M is subjected to predetermined conversion such as encryption.
The conversion data D_A(M) is received by the receiver B
Data to recipient B so that it can be distinguished from data M
A digital signature, and the signature data
TA D_ARecipient B sees between (M) and transmission data M
By providing a certain correlation that cannot be
The signature function in paperless transactions, etc.
It is. [0004] However, such a data is
In the digital signature system, the secret key D_AEtc.
It is important to protect the confidentiality of the secret conversion data.
Secret conversion data leaked and became known to recipient B etc.
If the data M is lost, the receiver B updates the data M.
The signature data and the altered data
Data with the above-mentioned fixed correlation.
And has the function of a digital signature at all.
They will not be. Therefore, conventionally, as a key management method,
Various methods such as distribution method, key storage method, key generation method, key conversion method
Is considered. However, this type of key management method has
The key management system has been devised,
None of this leaves the realm of logical research.
Attempt to realize and spread the system in the real world
In that case, the whole system becomes complicated and large,
There is a disadvantage that the equipment cost becomes enormous. [0007] The digital signature system described above is used in the real world.
If it is realized and spread widely, the secret conversion
We came up with a simple method to prevent data leakage,
A system that is not so expensive and easily adaptable to the real world
There is a need to. [0008] On the other hand, a certificate having a digital signature generation function is provided.
Conventionally, as a certification system, JP-A-58-75267
There was one described in the report. In this conventional one, the secret
Secret conversion data consisting of code
Pre-stored in the memory of the user's personal computing device
Cannot be used by illegally calling secret conversion data.
This memory is externally accessible to
Was not configured to be. And to the data input device
With the personal computing device inserted, the message
Data from the data input device, and
The personal data processing unit uses the secret data for the secret conversion.
Generate digital signature as encryption using data
It is configured to output externally. However, this conventional
In the case of a personal computer, the personal computing device
Data is subjected to predetermined conversion processing such as encryption, and
Performs digital signature generation conversion
The secret conversion data stored in the memory.
Data to the data input device,
Via the connection bus, which is the data signal line of
The replacement data is fetched by the personal computing device, and the fetch
The message data using the secret conversion data.
The digital signature generation conversion process.
Had been formed. As a result, in this conventional one,
A person who illegally obtains secret conversion data and tries to exploit it
For the sake of this, the secret conversion data is bothersomely memorized.
You do not need to access the memory
From the external device to the data input device
Wait until it is received, for converting the secret output from the outside
If you read the data, you can easily get it,
There is no inconvenience that dense conversion data is easily stolen
You. Also, in this conventional device, a typewriter
Message data from the keyboard
Must be entered and the message data
There is an inconvenience that the operation is complicated. The present invention has
It has been conceived in light of
Digitization using an authentication system with a signature generation function
When performing a signature, the conversion is performed by a simple method.
Data can be kept confidential and easy to operate
It is to provide a widely used authentication system. [0010] Means for Solving the Problems The first aspect of the present invention relates to
When exchanging message data with
Digital signature for authentication of sender of message data
An authentication system having a function of generating a digital
Owned by the user attempting to sign the
The conversion data for authentication and the secret
The conversion data is stored, and a predetermined data is stored in accordance with the conversion data.
Conversion processing for digital signature generation is performed by the algorithm.
Personal computing device having a function for
A data input unit for inputting the image data.
Input data from the power unit, wherein the predetermined algorithm
The data to be converted by the
And a data input device for inputting to the arithmetic unit.
The personal computing device stores the secret conversion
Data input device without externally outputting application data
Conversion processing for the digital signature generation of the data inputted from
And is stored in the personal computing device.
User who owns the personal computing device
The conversion data for user authentication allocated to
Registered in advance by a third party, and the data input unit
One message input operation for fixed message data
The data input device and the personal computing
It is characterized in that it is configured separately from the device.
In the second invention, message data is exchanged between the parties.
The identity of the sender of the message data
Authentication System with Function to Generate Digital Signature for Certificate
User who wants to sign a digital signature
And the conversion data for user authentication
Storing the user-specific secret conversion data,
Digital according to the specified algorithm according to the data
A personal computer having a function for performing a conversion process for signature generation
Null operation unit and data input to input message data
Input part from the data input part,
Subject to conversion processing by the predetermined algorithm
Data for inputting data to the personal computing device
A personal input device, and
Do not output the secret conversion data
Of the data input from the data input device.
Digital signature generation conversion processing, and
The force input is a one-touch input operation of the specified message data
Is configured to allow message data
User's intention to sign the digital signature at the end of the process
Confirmation operation for display is configured to be possible,
That the confirmation operation has been performed by the data input unit.
As a condition, the digital signature generation conversion process is performed.
The data input device and the personal computing device
It is characterized in that it is configured as a separate structure. [0011] According to the first aspect, the digital signature is executed.
The personal computing device owned by the user trying to
The conversion data for the user authentication and the
The secret conversion data is stored, and the conversion
Digital signature by a predetermined algorithm according to the data
A name generation conversion process is performed. Enter message data
A data input device having a data input
Input data from the data input unit and
Data to be converted by a fixed algorithm
Is input to the personal computing device. And par
The sonal operation device stores the secret conversion data stored therein.
Input from the data input device without external output of data
Conversion processing for the digital signature generation of
Noh. Being stored in the personal computing device
Therefore, it is allocated to the user who owns the personal computing device.
The conversion data for user authentication to be performed is a predetermined third
Is registered in advance by the institution. The data input unit is
One message input operation for fixed message data
Have been. Also, the data input device and the personal
It is configured separately from the arithmetic unit. In the second invention
According to users who want to sign digitally,
Personal computing device, the user authentication
Conversion data that is a secret conversion data unique to the user.
Data is stored, and a predetermined
Conversion processing for digital signature generation is performed by the algorithm.
It is. Has a data input section for inputting message data
By the function of the data input device,
Input data which is changed by the predetermined algorithm.
The data to be exchanged is the personal computing device
Is input to The personal computing device stores
Without outputting the secret conversion data
The digital data input from the data input device;
Conversion processing for signature generation is possible. And the data
The input unit performs one-touch input operation of predetermined message data.
And the message data
User's intention to complete digital signature after input
Confirmation operation for displaying
The above-mentioned digit is provided on condition that the confirmation operation of
Tal signature generation conversion processing is performed. In addition, the data
The data input device and the personal computing device are constructed separately.
Has been established. [0012] DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS As shown in FIG.
A keyboard that allows you to input hiragana and numbers with a key
Of data input means as an external device having
For the data input device 2, a RAM or a CP as an example of a memory is used.
Attaching and detaching the personal computing device 3 with built-in U through the connection unit 50
It is freely configured. This personal computing device 3 is
Personally owned by the sender of the data for which the digital signature is required
Any device can be used.
As generally known from, for example, IC card
And so on. [0013] The personal computer 3
The road configuration is shown in FIG. In the personal computing device 3,
CPU 50 and RAM 52, ROM 51 as an example of a memory
And an I / O port 53. ROM 51
Is an operation program of the CPU 50, that is, FIG.
The program of the flowchart shown in
You. The CPU 50 stores the programs stored in the ROM 51.
It operates in accordance with the
Invoke an example alphanumeric conversion rule or secret function
Stored in the RAM 52. And, as described below,
Input from keyboard 1 and input from I / O port 53
The transmitted transmission data (message data) is stored in the RAM 52.
Algorithm according to the secret conversion data stored in
The data is converted as shown in FIG.
Output from the / O port 53. The data stored in the personal computing device 3
The secret conversion data uses hiragana characters according to certain rules.
Character and number conversion rules to convert to numbers
Secret function f composed of combinations of functions, exponential functions, etc.
(X). This secret conversion data is
Different types of personal computing devices 3
Things are remembered, so each signer who wants to sign
By owning this personal computing device 3,
Therefore, each signer has its own unique secret conversion data.
Will be held. Also, this secret conversion data is
Externally secret. The personal computing device 3 includes:
The program of the flowchart shown in FIG.
When performing a digital signature, the personal
When the computing device 3 is attached to the input device 2, the
Transmission data (message data) such as the characters of the contract
Input from the keyboard 1 in the form of hiragana. Also, date etc.
Enter the number as is. And the input is
If the character is a character, step S shown in FIG.
S), a YES determination is made, and
Is processed according to the above-mentioned character / numeric conversion rules.
Each character is converted to a number for each force
Will be Furthermore, if the input is a number
A determination of NO is made in S2 and the number is left as it is.
(S3), then NED key E ON operation
If there is, YES is determined in S6 and all the sentences
The sum P (n) of letters and numbers is calculated by the secret function f (x).
To calculate the answer (S8), and the encrypted code
Conversion data (in this case, numbers)
Is output from the I / O port 53 as signature data.
It is displayed on the display unit 4 (S9). And the display unit 4
Send the signature data displayed in the
And send it along with the S2 to S8 shown in FIG.
From the input message data, the conversion pair
Message data to be stored in the memory.
Is changed by an algorithm according to the secret conversion data
Conversion operation means for performing an operation for conversion
You. By S9, the conversion operation by the conversion operation means is performed.
The converted data is converted to digital
External device connected to the connection unit for use in signature
Output means for outputting the data to the computer. The keyboard 1 is provided with the NED key E.
A data input section comprising the keyboard 1
Indicates that the digital signature is
Confirmation operation to indicate the user's intention to perform
Noh is configured. And it is shown in S6
As described above, the confirmation operation by the data input unit is performed.
On the condition that the digital signature is generated.
Is performed. The input device 2 as the external device includes:
It may be a Teletex terminal, in which case,
Transfer the target transmission data to the keyboard of the Teletex terminal.
Input to the personal computing device 3 from the network. Also, par
Authentication as conversion data output from the sonal operation device 3
I will transfer the data from the Teletex terminal to the contract partner
Be configured as follows. Further, the character / numeric conversion rule and seek
Is a conversion function for user authentication.
Thus, secret conversion data unique to the user is configured.
I have. This conversion data is used by governmental
Register with public institutions and service organizations. This public institution
User assigned by the
Predetermined data conversion processing for authentication with existing data
To register the conversion data used for
A three-party organization is formed. [0018] Document receipt seal, receipt seal, like money receipt stamp
In the case of a digital signature for authentication for checking
In this case, the act of authentication itself, such as the act of accepting documents, should be written in hiragana
Input from the keyboard 1 with characters,
Enter the date of the conversion and enter the conversion data, that is, the signature data.
Is calculated. For example, the act of certification is document acceptance.
The certification date is 11:35 on October 9, 1984.
Then, on keyboard 1, "Short-handed 1984
10 10 9 11 11 35 fun. " This
Date and time when the act subject to certification, that is, the signature act was performed
Enter digital data and digitally sign
By accepting documents, receiving documents, receiving documents, and receiving money
It is relatively easy to use, and it has the same contents
Even if it is a message
Tal signature will be given. As a result, digital
Unauthorizedly copying many signed message data
Fraudulent acts can be prevented as much as possible. This recognition
To the date and time data when the act subject to certification (signing act) was performed
Variable numeric data that can be changed each time a digital signature is applied
Data is configured. In addition, various operations such as document acceptance, acceptance, etc.
One operation on keyboard 1 for representative check
One-touch input by assigning to buttons
It may be configured as follows. The present invention uses this one-touch input
An operable keyboard 1 is employed. That is,
The data input section consisting of the board 1
It is configured to enable one-touch input operation of data. Further, as the act to be authenticated in the present invention,
The listed document acceptance and acceptance activities are merely examples,
Other notes on certification of purchase orders, delivery notes, receipts, etc.
Various checks such as writing, goods delivery, and money receiving
Needless to say, this includes the act. Next, another embodiment of the present invention will be described.   Enter the number calculated by the secret function
Instead of using the signature data, one of the calculated numbers
Part or all based on certain secret rules
Characters such as hiragana, katakana, kanji alphabet,
Figures, symbols or their combinations or their colors
And used as signature data. The secret conversion data is stored in a personal
Instead of storing it in the arithmetic unit 3, as shown in FIG.
It is stored in a file device 5 of a company or the like. In that case
Connects the teletex terminal 6 and the file device 5
Connected by RAN 8 etc. via computer 7, public line etc.
Paperless transactions with other companies using
Signer transfers his secret conversion data to the Teletech
To be called by the operation from the
Therefore, conversion work such as encryption is performed. The secret conversion data
When calling data, use the individual identification system described later.
The secret conversion data specified by the signer
The computer 7 as to whether or not it belongs to the signer.
Check and confirm that it belongs to the signer.
Access to the secret conversion data specified for the first time
Enable In the figure, reference numeral 9 denotes a node. Secret change
Instead of calling the replacement data from the file device 5 in the company
Public services and services that have secret conversion data registered
File device such as a service institution, or a file device at home.
Calls its own secret conversion data by data communication from the device
And the computer connected to the called file device
Perform conversion work such as encryption on the computer. The above,
In another embodiment, the storage location of the secret conversion data
However, as far as it is not the personal computing device 3,
However, it is not a technology directly related to the present invention. The personal computing device 3 has a
Oscillator owned by owner (for example, ring type)
These predetermined signals (different for each oscillator)
If reception becomes impossible, conversion functions such as encryption will stop.
In the event that the personal computing device 3 is lost.
Help prevent human misuse. That is, the oscillation
For identity verification consisting of a predetermined signal oscillated from the instrument
If there is no input signal of the predetermined identification information, the conversion
No conversion operation is performed by the operating means. Next, although not directly related to the present invention,
For example, as described above, the secret conversion data (the secret
Le) The secret rule specified at the time of calling is really the person himself.
Invention of an individual identification system for determining whether or not the object belongs
Will be described. Next, although not directly related to the present invention,
For example, as described above, the calling finger is
Whether the established secret rules are really yours
The invention of the individual identification system for discriminating will be described. The present invention mainly relates to access to a certain facility.
Access to maintenance to limit access to only
Is to determine whether or not the
Or, when a certain input signal is input,
Calculate the answer based on certain secret rules,
Owned by facility user to output it as identification signal
Device 33 and a certain secret rule are registered.
The secret rule (secret rule) and the input
The identification signal output from the signal is correct.
Identification means having a judgment means for judging whether or not
About the system. In this type of individual identification system,
In general, those commonly used include, for example,
There is a technology described in Japanese Patent Application Laid-Open No. 59-10680.
Register certain secret rules on the equipment in advance.
Equipment based on certain input signals.
The identification signal calculated by the
Only when the calculated identification signal matches, the device
Judge owners to have acceptable access to equipment
It is. However, a highly information-oriented society has become
If the individual identification system of
Unlock the door of the locker, open and use your own bank account
File of secret technical information with limited users
The frequency of use of this system, such as calls from mobile devices, has increased
And will be used to access many of the facilities
Therefore, for that purpose, many usage facilities
Secret rules must be registered for all
Not to the registered secret rule others
Increase the chances of plagiarism and cause enormous damage from misuse
The disadvantage is that Especially in the advanced information society
In the unlikely event that personal privacy or trade secrets are leaked
It must not be, plagiarism of secret rules
Must be strictly prevented. Therefore, different secrets are used for different facilities.
Register rules, for example, one of them
Even if the security rules are stolen, access to other
There is a way to prevent it from being misused by
Equipment users can use secret rules for each equipment.
Must be memorized, and it is complicated,
If the number of facilities to be used increases, it may be forgotten,
is there. The object of the invention of this individual identification system is as follows.
In light of the actual situation, even if the number of facilities
Register without registering secret rules
Prevent the increase of damage caused by secret theft of secret rules
Another object of the present invention is to provide an individual identification system that can be stopped. Individual identification made to achieve the above object
The configuration of the system depends on the secret when the system is used.
Data communication between rule registration locations and equipment used
Setting means for setting in advance so that
Whether the identification signal transmitted from is correct
Is to be made at the secret rule registration location.
is there. An individual identification system having such a configuration
The functions and effects of the invention are as follows. That is, when using this system,
The identification signal output from the equipment owned by the user
Secret rules by data communication through the facilities used
It is transmitted to the registered location, and the secret
The identification signal sent at the location where the ruler is registered is correct
Can be judged whether or not they are
Even if there are many use facilities that must be
Only based on one registered secret rule
Individual identification is possible, and the secret
Can prevent an increase in plagiarism of security rules.
It is possible to prevent an increase in the damage caused by the damage. The data communication is performed by a wired media.
A) Includes both wireless media. Next, the same individual identification
Invention of system, but different from the above
Is described below. This invention also has the same application fields as the above-mentioned invention.
The purpose is to prevent theft of secret rules
Although the previous invention has the same
Address the increase in plagiarism due to the increase in the number of registration locations for credit rules
In contrast, the present invention provides a
Secret rule theft due to increased use of files
The difference is that it does not deal with the addition. In other words, the number of facilities used increases,
If rules are used more frequently,
Abuse this system, even if the
The input signal and the corresponding identification signal
No. is recorded every time when this system is used.
If the record volume becomes enormous, the abuser could use this system
When using, the input signal selected arbitrarily
Existed in the past recorded by the abuser,
Access to equipment may be tolerated by abusers
Performance of the system, and the frequency of use of this system is high.
Strictly prevent secret rules from plagiarism
Even if you do, there is no danger of causing damage by the abuser
Disadvantages. In view of the above circumstances, an object of the present invention is to provide a system
The frequency of use of the system has increased, and
Despite the louse-like recording of the identification signal corresponding to
Can effectively prevent abusers from accessing equipment
The object is to provide an individual identification system. An individual made to achieve such an object
The configuration of the invention of the body identification system uses a certain input signal.
Certain secret rules when entered
Calculate the answer based on
A device 33 owned by the facility user to be put and a certain system
Secret rules are registered and their secret rules
And the output identification signal from the input signal
Has a determining means for determining whether or not
In an individual identification system,
There is a selective means of using things that have never been used.
Is to do. The invention of the individual identification system having the above configuration
The effects of the invention are as follows. In other words,
The input signal and the identification signal are recorded one by one
Input signal used once in the past
Evil using the above-mentioned records because they will not be used again
Can no longer be used and the frequency of use of this system increases.
In this case, system misuse can be reliably prevented and privacy
In the highly information-oriented society,
Individual identification system capable of responding to fateful tasks
Could be provided. Next, the embodiment of the invention of this individual identification system will be described.
Embodiments are listed below.   As the selective use means, used in the past
A function to reject an input signal that may
Individual identification system provided. [0042] As the above-mentioned selective use means,
And increase or decrease with each selected use or over time
An individual identification system using a number as the input signal. [0043] The numbers are based on code / data broadcast.
Is determined based on the signal transmitted by
The individual identification system according to the above item. The number represents the current date and time
The individual identification system according to the above item or
Stem. The equipment user's device is composed of a wristwatch
And the time at which the watch is displayed is used as the input signal.
The individual identification system according to the above-mentioned item, wherein the system is used. The wristwatch is used for code / data broadcasting
Therefore, the time can be displayed based on the transmitted signal.
The individual identification system according to the above item, wherein The code / data broadcast is used
Which is transmitted from each facility
Item or the individual identification system according to Item. [0048] The wristwatch is
Another signal is transmitted to the target facility using the human hand as a medium.
The said item which has a signal transmission part to a human hand in order to
Or the individual identification system according to the above paragraph. The equipment owned by the equipment user is
It can receive predetermined signals from the transmitter owned by the owner.
If it disappears, the function for individual identification will stop.
An individual identification system that has been established. Next, the invention of the above-mentioned individual identification system is also described.
Including the embodiments of the invention of the individual identification system based on the drawings
Will be explained. As shown in FIG.
Calling the Zodiac, secret technology in databank 11
Information retrieval, unlocking of coin locker 12, etc.
Equipment that should only allow access to
Individual identification of whether or not to allow access to the person
Computer 13 or 1 at home or at a designated institution
4 via a public line 15 and the facilities 10, 11, and
Between computer 12 and computers 13 and 14 that perform individual identification
Is configured to enable data communication. Also figure
Reference numeral 16 denotes a network control unit (NCU), and 17 denotes an exchange. Then, for example, in the data bank 11,
If you want to use technical information, first
The terminal 18 calls the data bank 11 and calls the desired technique.
Technical information is searched, and the technical information
This is secret technical information that can only be used
In this case, individual identification is performed in the following procedure. Equipment user who does not use technical information
Home or designated institution computer that identifies individuals
Inform the data bank 11 of the call number 13 or 14
You. On the data bank 11 side, the number is
It is the number of those that are registered and can be used
Is confirmed, and if the number is a licensee, the identification signal
Request transmission and allow use if the number is not the authorized person
do not do. If a request for transmitting the identification signal is issued,
The user recognizes the information output from the device 33 owned by the user.
Another signal is sent to the data bank 1 by the captain terminal 18.
Send to one side. The data bank 11 has been transmitted
The identification signal is sent to the computer 13 or 14 of the calling number.
To the computer 13 or 14
Individual identification judgment whether the identification signal received is correct or not (after
Described above) and send the result to the data bank 11 side.
I believe. On the data bank 11 side,
Is specified only when the judgment result is sent.
Access to secret technical information. Next, when unlocking the coin locker 12,
First, inside the door of the unlocked coin locker
Automatically identifies individuals by operating the keyboard on the side.
Call the computer 13 or 14 at home or at a designated institution
Enter the number and enter the number of the computer 13 or
14 and automatically registers the computer 1 when unlocking
With 3 or 14 set to be called, open the door
Close and lock, and when unlocked, the coin locker door
Input the identification signal from the outside, and
Unlock control is performed by the same method. Next, for example, when paying money,
Move your bank account deposit into the cashee's bank account
The key that moves only the number of
For cashless payment system (bank POS system), etc.
In order to call your bank account,
Computer 13 at home or at a designated institution in advance
Register 14 call numbers and call your own bank account
If specified, the computer 13 is automatically
Or, 14 is set to be called. And
When purchasing and paying for goods at a supermarket, etc.
From the supermarket or other register 19
Specify the calling of the bank account, the same method as above
Use to access your bank account. In addition,
The bank account call designation means is a device owned by the facility user.
The bank account call designation signal output from 33 is registered in register 1
9 and transmit it to the bank. In addition, unlocking of doors of automobiles and the like,
Access such as start-up is because the equipment to be used is a moving object
In addition, data communication using wired media such as public lines is not
It is possible and uses wireless media such as satellite communication. Next, the individual identification method described above will be described.
As shown in FIG.
Data / data broadcast, and time based on the received signal
The device 33 owned by the facility user is configured by a watch that displays
It has been done. Then, the system stored in the watch 33 is
Secret functions as secret rules (each
Is different depending on the wristwatch).
The current time as the input signal and calculate the answer.
Out of the answer and the input signal used
The part is output as an identification signal. Output
As shown in FIG. 6, first, the send button 21 is pressed.
Then, from the signal transmission unit 22 composed of the conductive plate on the back of the wristwatch
The identification signal is applied to the hand 23 as a pulse current for a certain time (10 seconds).
Interval) sent out, using the hand 23 as a medium as a medium,
Star 19, coin locker 12, car 20, captain
Terminal 18, telephone, teletex terminal etc.
The signal is transmitted to the signal receiving unit 24. The transmitted identification signal is
A computer at home or at a designated institution that makes individual identification decisions
Sent to the computer 13 or 14, and
Secret as a registered secret rule
Calculate the answer by substituting the input signal into the
Compare with the identification signal to judge whether it is correct and identify the individual
Perform The secret function is a trigonometric function, an exponent
A function consisting of a combination of functions and the like, four variables w, x,
y, z, and as shown in Equation 1 below,
Calculate the answer by substituting each part into w, x, y, z
You. [0063] (Equation 1) When sending an identification signal from a foreign country to Japan,
The input signal obtained by converting the time of
Must be assigned to the default function. In the figure, reference numeral 25 denotes a facility for generating a certain signal.
It is a ring type transmitter owned by the user.
Therefore, the wristwatch 33 has a different transmission signal.
When receiving a predetermined signal from the transmitter 25 of
Only when the watch 33 is lost.
Prevent misuse of others. In the figure, reference numeral 26 denotes the time of calling his own bank account, etc.
The keyboard used for
Or output a bank account call designation signal
These signals are transmitted in the same way as the identification signals.
Output from the unit 22. The wristwatch 33 has a code / data
The error with the display time is corrected based on the broadcast signal.
The watch 33
Figure 7 shows a flowchart of the program incorporated in
You. Also, a secret rule is registered.
Program installed in computer 13 or 14
8 is shown in FIG. The program in FIG.
The "allowable value K" calculates the identification signal in the wristwatch 33.
Time and secret rule registration computer
Data communication time to data 13 or 14
Delay time, for example, a short time such as 3 seconds.
You. Also, the current identification signal reception time is set to the previous identification signal reception time.
Acknowledgment that the allowable value K seconds or more has passed since the
The reason for adding to the access permission condition is that the identification signals A and NZ are
Within K seconds from the time of transmission,
The abuser records the identification signal as A and NZ, and
To the registration rule registration computer 13 or 14
To prevent inconvenience of accessing the equipment unfairly
It is. Next, another embodiment of the invention of the individual identification system will be described.
An example will be described. (1) As an input signal to the secret function,
Instead of using the current time, based on code / data broadcasting
And increase or decrease over time
Use the common numbers for In that case, register 19, key
The input from an identification signal input terminal such as a terminal 18 for a captain.
Force signal numbers may be transmitted, and equipment owned by the facility user
The transmission means to 33 is radio wave transmission or cable connection.
either will do. Further, the equipment 33 owned by the facility user is
Not only the total but also any personal terminal such as an electronic desk calculator
Is also good. (2) Still used as an input signal
As a means of selective use using things that have never been
Seek to reject input signals that have been used
Added to the let rule registration computer 13 or 14.
You. Secret rule registration computer 1 in this case
Programs to be incorporated in 3 or 14, equipment owned by facility users
Flowchart of each program to be installed in device 33
Are shown in FIGS. 9A and 9B. (3) A search target person, such as a wanted person,
Register a secret rule and enter the secret rule
When an identification signal is transmitted to the recording computer,
Return location notification command signal to terminal that input identification signal
And install the terminal on the police computer etc. from that terminal
It is configured to transmit a signal indicating the location. (4) Used for the individual identification
The secret rule is applied to the digital signature system described above.
Let the secret rules used in the invention take over. Toes
Confidential rules owned by a person
Used for both signature system and individual identification system. [0073] According to the first aspect of the present invention, a digital signature is
To a personal computing device owned by the user
The conversion data for the user authentication and the
The secret conversion data is stored and the message
Data input device having a data input unit for inputting data
The personal computing device stores the input data from
The digital signature is converted according to the secret conversion data
Performs name generation conversion processing. At that time, personal calculation
The secret conversion data stored in the device is
The digital signature generation conversion process
In order for the secret conversion data to be
Leakage to the outside as much as possible from the
Conversion data is stolen by third parties and abused
It can be prevented as much as possible. Thus, the conversion of the user-specific secret
Physically secure data (Tamper Fre
e Module) is stored in the personal computing device.
And the stored secret conversion data
Conversion processing for digital signature generation without external output
Enabled the conversion of secret data in a relatively simple way.
Data confidentiality and the complexity of the entire system
A highly feasible, popular authentication system that minimizes networking
Can be provided. In addition, the message data
The data input section for inputting the predetermined message data
Is configured to allow one-touch input operation.
Configure the message when you enter it
Input characters by operating the keyboard etc.
Complex input operations can be reduced, making it easier for general consumers to accept
It is possible to make the authentication system more easily spread. Also before
The data is stored in the personal computing device so that the
-The user assigned to the user who owns the
Conversion data for user authentication is provided to a predetermined third party in advance.
Because it is registered, for example, registration of the seal with the city hall
Just as with the record, a fair authentication and certification function by a third party
It is possible to expect. According to the second aspect of the present invention,
A persona owned by the user trying to digitally sign
The conversion data for user authentication in the
The secret conversion data unique to the user is stored.
Data input unit for inputting message data
Input data from the data input device to the personal computing
Perform conversion according to the secret conversion data stored in the device.
To perform a digital signature generation conversion process. At that time,
For conversion of the secret stored in a personal computing device
The digital signature is generated without data being output to the outside.
In order for the conversion process to be performed, the secret conversion data is used.
Data leak from the personal computing device to the outside as much as possible
Can be prevented and secret conversion data is stolen and misused by a third party
Can be prevented as much as possible. In this way, the user
The secret conversion data is stored in a physically secure device (Tam
per Free Module)
Calculation device, and the stored secret
Digital signature generation without output of conversion data
A relatively simple method because of the use conversion process
Can protect the confidentiality of the secret conversion data.
Prevents the complexity of the entire system as much as possible, and makes it more feasible
Type authentication system can be provided. Moreover,
The data input section for inputting message data
It is configured to enable one-touch input operation of message data
Message when entering a given message.
Operate the keyboard etc. for each character that constitutes the message
Can reduce the complicated input operation of
Authentication system that is easier to accept and easier to spread
I can do it. Furthermore, after the input of message data is completed,
Confirmation of the user's intention to sign the digital signature
Provided that the approval operation has been performed,
Since the conversion process for generating a digital signature is performed, the user
The message data you are trying to sign
Digital signature generation for different message data
The inconvenience of performing the conversion process can be prevented as much as possible.

BRIEF DESCRIPTION OF THE DRAWINGS FIG. 1 is a perspective view. FIG. 2 is a flowchart. FIG. 3 is an operation explanatory view. FIG. 4 is an operation explanatory view. FIG. 5 is an operation explanatory view. FIG. 6 is a perspective view. FIG. 7 is a flowchart. FIG. 8 is a flowchart. FIGS. 9A and 9B are flowcharts, respectively. FIG. 10 is a control circuit diagram of the personal terminal device. FIG. 11 is an explanatory diagram illustrating an outline of a digital signature system as a background of the present invention. [Description of References] 3 is a personal terminal device, 2 is an input device, 1 is a keyboard, and 25 is a transmitter.

Claims (1)

(57) [Claims] An authentication system having a function of generating a digital signature for authenticating the identity of a sender of message data when exchanging message data between parties, the authentication system being owned by a user who intends to perform a digital signature, and A personal computing device having a function of storing conversion data for user authentication and secret conversion data unique to the user, and performing a conversion process for generating a digital signature by a predetermined algorithm according to the conversion data; A data input unit for inputting message data, and a data input device for inputting data to be converted by the predetermined algorithm, which is input data from the data input unit, to the personal computing device. The personal processing device stores the secret conversion data stored therein. Can be converted to digital signature generation of data input from the data input device without externally outputting the data, and the data is allocated to a user who owns the personal arithmetic device by being stored in the personal arithmetic device. The conversion data for user authentication is registered in advance in a predetermined third party, and the data input unit is configured to allow one-touch input operation of predetermined message data. The data input device and the personal computing device An authentication system characterized in that the authentication system is configured separately from the authentication system. 2. An authentication system having a function of generating a digital signature for authenticating the identity of a sender of message data when exchanging message data between parties, the authentication system being owned by a user who intends to perform a digital signature, and A personal computing device having a function of storing conversion data for user authentication and secret conversion data unique to the user, and performing a conversion process for generating a digital signature by a predetermined algorithm according to the conversion data; A data input unit for inputting message data, and a data input device for inputting data to be converted by the predetermined algorithm, which is input data from the data input unit, to the personal computing device. The personal processing device stores the secret conversion data stored therein. The digital signature generation conversion process of the data input from the data input device can be performed without externally outputting, and the data input unit is configured to be capable of one-touch input operation of predetermined message data, A confirmation operation for displaying a user's intention to perform the digital signature after the completion of the input of the message data is configured to be possible, and the above-mentioned condition is performed on condition that the confirmation operation by the data input unit is performed. An authentication system, wherein a conversion process for generating a digital signature is performed, and the data input device and the personal computing device are configured separately.