JP3641909B2 - Proof data generator - Google Patents

Description

となる。
【００７８】
そこで、証明データ検証部２２では、乱数保持部２３から乱数ｒを取り出し、
【００７９】
【数６】
ｒ^-1Ｒ ｍｏｄ ｎ
を計算することで、アプリケーションを暗号化していた共通暗号鍵Ｋを入手することができる。証明データ検証装置は、この共通暗号鍵Ｋでアプリケーションの暗号化されていた部分を復号し、アプリケーションを実行することができる。
【００８０】
この例では、証明データ検証装置は、アプリケーションが正しく実行できたことをもって、正しく検証ができたと判断する。
【００８１】
以上で通常の認証処理の説明を終了する。
【００８２】
［パーチェス］
次に、プリペイド情報を用いて、アプリケーションプログラムのアクセス権を購入する（パーチェス）例について説明する。
【００８３】
この機能を実現するには、通常のアクセスチケットである第１のアクセスチケットを暗号化して暗号化アクセスチケットを作成しておき、この暗号化アクセスチケットへアクセスするための第２のアクセスチケットを用いて、通常の認証処理と全く同じ処理を行うことにより、暗号化アクセスチケットから、第１のアクセスチケットを復号化する。
【００８４】
そしてこのとき、第１のアクセスチケットは、利用料金が無料のチケットとして作成し、第２のアクセスチケットは、利用料金を有料としプリペイドで支払うように構成することで、全体としてプリペイドにおけるパーチェス機能の実現を可能にする。
【００８５】
まず、パーチェスの機能を実現したいアプリケーションプログラムをＡＰ１とする。上述の説明と同様に、ＡＰ１をプロテクトする。
【００８６】
＜アプリケーションプログラムＡＰ１のプロテクトの説明＞
ソフトウェアベンダは、プロテクトしたいアプリケーションプログラムに対する暗号鍵を作成する。ここではＲＳＡ暗号を用いるので、大きな素数ｐ₁，ｑ₁を秘密に作成し、法数ｎ₁をｎ₁＝ｐ₁・ｑ₁として作成する。次に法数ｎ₁の元で暗号鍵Ｅ₁と復号鍵Ｄ₁を、
【００８７】
【数７】
Ｅ₁・Ｄ₁≡１ ｍｏｄ φ（ｎ₁）
を満たすように生成する。ここでφ（ｎ₁）はオイラー数であり、φ（ｎ₁）＝（ｐ₁−１）（ｑ₁−１）である。
【００８８】
次にソフトウェアベンダは、共通暗号鍵Ｋ₁を作り、プロテクトしたいアプリケーションプログラムの一部または全部をＫ₁で暗号化し、さらに共通暗号鍵Ｋ₁を以下の式に従って、暗号鍵Ｅ₁で暗号化して、Ｋ₁’を生成する。
【００８９】
【数８】
Ｋ₁’＝Ｋ₁Ｅ₁ ｍｏｄ ｎ₁
そして、Ｋ₁’を暗号化したアプリケーションプログラムに、第３者が容易に取り出せないように埋め込んで配布する。また、ｎ₁も、暗号化したアプリケーションプログラムに埋めこむ。
【００９０】
ソフトウェアベンダは、作成した（ｎ₁，Ｄ₁，φ（ｎ₁））の組をアクセスチケット情報データベースに記憶する。
【００９１】
次に、プリペイド払いパーチェス・チケットの作成について説明する。図５は、証明用補助情報生成装置３０の構成例を示したものである。この例では、第１の利用条件情報と第１の復号鍵とユーザ固有情報と第２の利用条件情報とを入力として、プリペイド払いパーチェス・チケットを出力する。図５において、入力部３１は、第１の利用条件情報と第１の復号鍵とユーザ固有情報と第２の利用条件情報とを入力する部分である。第１復号鍵記憶部３３は、入力部３１から入力された第１の復号鍵を記憶する部分である。第１の復号鍵は、アプリケーションプログラムＡＰ１の暗号化に用いた共通暗号鍵Ｋ₁を暗号化した暗号鍵（Ｅ₁，ｎ₁）に対応する復号鍵（Ｄ₁，ｎ₁）である。
【００９２】
ユーザ固有情報記憶部３４は、入力部３１から入力されたユーザ固有情報を記憶する部分である。これは、ユーザの証明データ生成装置１０に格納されているものと同一のものである。
【００９３】
ユーザがチケットの発行を依頼する時には、ユーザの識別情報Ｕと、ユーザが利用を希望するアプリケーションプログラムＡＰ１から取り出したｎ₁とを、ソフトウェアベンダに送る。ソフトウェアベンダは、ユーザの識別情報Ｕとユーザ固有情報ｄｕとを対応づけて保持しているユーザ情報データベースから、ユーザの識別情報Ｕに対応するユーザ固有情報ｄｕを検索することによってユーザ固有情報を得、また（ｎ，Ｄ，φ（ｎ））の組を保持しているアクセスチケット情報データベースから、ｎ₁に対応する復号鍵（Ｄ₁，ｎ₁）を得て、証明用補助情報生成装置３０に入力する。
【００９４】
第１利用条件情報記憶部３２と第２利用条件情報記憶部３５は、それぞれ第１の利用条件情報と第２の利用条件情報とを記憶する部分である。第１の利用条件情報は、アプリケーションプログラムＡＰ１の利用条件を記述したものであり、第２の利用条件情報は、プリペイド払いパーチェス・チケットの利用条件を記述したものである。プリペイド払いパーチェス・チケットの場合には、１回目の利用時に課金され、２回目以降の利用時には課金されないという特性を持つので、第１の利用条件情報には少なくとも無料であることを意味する情報が含まれており、第２の利用条件情報には、少なくとも有料であることを意味する情報が含まれている。
【００９５】
第１チケット生成部３６は、入力された第１の利用条件情報と第１の復号鍵とユーザ固有情報とに所定の計算を実行してアクセスチケットを生成する部分である。
【００９６】
第１利用条件情報記憶部３２と第１復号鍵記憶部３３とユーザ固有情報記憶部３４と第１チケット生成部３６とからなる構成部分４１は、通常のアクセスチケットを生成するのと同様の構成をなしている。
【００９７】
第２の鍵生成部３７は、第１チケット生成部３６で生成された第１のアクセスチケットを暗号化するための鍵を生成する部分である。
【００９８】
暗号化部３８は、第１チケット生成部３６で生成された第１のアクセスチケットを、第２の鍵生成部３７で生成された暗号化鍵を用いて暗号化する部分である。
【００９９】
第２チケット生成部３９は、暗号化部３８で暗号化された暗号化アクセスチケットを復号化するために必要となる第２のアクセスチケットを生成する部分である。
【０１００】
チケット出力部４０は、暗号化部３８で暗号化された暗号化アクセスチケットと、第２チケット生成部３９で生成された第２のアクセスチケットとを組み合わせて、プリペイド払いパーチェス・チケットとして出力する。
【０１０１】
＜プリペイド払いパーチェス・チケットの作成＞
以下に、プリペイド払いパーチェス・チケットの作成の方法について図６のフローチャートを用いて説明する。
【０１０２】
ソフトウェアベンダは、ユーザからのプリペイド払いパーチェス・チケット発行要求を受けて、プリペイド払いパーチェス・チケットを発行する。チケットの発行を依頼するユーザは、ユーザの識別情報Ｕと、ユーザが利用を希望するアプリケーションプログラムＡＰ１から取り出したｎ₁とを、ソフトウェアベンダに送る。
【０１０３】
（ステップＳ３１）：ソフトウェアベンダは、ユーザからのプリペイド払いパーチェス・チケット発行要求であるユーザの識別情報ＵとアプリケーションプログラムＡＰ１から取り出したｎ₁との組（Ｕ，ｎ₁）を入力する。また、アプリケーションプログラムＡＰ１の利用条件を記述した第１の利用条件情報Ｌ₁と、プリペイド払いパーチェス・チケットの利用条件を記述した第２の利用条件情報Ｌ₂も入力する。ここでは、プリペイド払いパーチェス・チケットの生成を目的としているので、第１の利用条件情報Ｌ₁は、利用料金が無料であることを意味する
【０１０４】
【数９】
Ｌ₁＝０
であり、第２の利用条件情報Ｌ２は、パーチェスの料金が有料であることを意味する
【０１０５】
【数１０】
Ｌ₂＝Ａ
とする。ただしＡは０以外の数字であり、たとえば１００である。
【０１０６】
（ステップＳ３２）：ユーザの識別情報Ｕとユーザ固有情報ｄｕとを対応づけて保持しているユーザ情報データベースから、ユーザの識別情報Ｕに対応するユーザ固有情報ｄｕを検索する。
（ステップＳ３３）：（ｎ，Ｄ，φ（ｎ））の組を保持しているアクセスチケット情報データベースから、ｎ₁に対応する第１の復号鍵（Ｄ₁，ｎ₁）を検索する。
（ステップＳ３４）：ユーザがＡＰ１にアクセスするための第１のアクセスチケットＴ₁を作成する。
【０１０７】
【数１１】
Ｔ₁＝（ｔ₁，Ｌ₁，ｎ₁）
ｔ₁＝Ｄ₁−Ｆ（ｎ₁，Ｌ₁，ｄｕ）
（ステップＳ３５）：第１のアクセスチケットＴ₁を暗号化するために、第２の法数ｎ₂、第２の暗号鍵Ｅ₂、第２の復号鍵Ｄ₂を生成する。大きな素数ｐ₂，ｑ₂を生成し、以下の式が成り立つように、法数ｎ₂、暗号鍵Ｅ₂、復号鍵Ｄ₂を生成する。
【０１０８】
【数１２】
ｎ₂＝ｐ₂・ｑ₂
Ｅ₂・Ｄ₂≡１ ｍｏｄ φ（ｎ₂）
φ（ｎ₂）＝（ｐ₂−１）（ｑ₂−１）
（ステップＳ３６）：生成した第２の暗号鍵Ｅ₂で第１のアクセスチケットＴ₁を暗号化する。Ｔ₁を暗号化したものをＴ₁’とする。
【０１０９】
【数１３】
Ｔ₁’＝Ｔ₁Ｅ₂ ｍｏｄ ｎ₂
（ステップＳ３７）：暗号化されたアクセスチケットＴ₁’をユーザが復号するための第２のアクセスチケットＴ₂を作成する。
【０１１０】
【数１４】
Ｔ₂＝（ｔ₂，Ｌ₂，ｎ₂）
ｔ₂＝Ｄ₂−Ｆ（ｎ₂，Ｌ₂，ｄｕ）
（ステップＳ３８）：（（Ｔ₁’，ｎ₂），Ｔ₂）を組にしてプリペイド払いパーチェス・チケットとして出力する。
【０１１１】
ソフトウェアベンダは、出力されたプリペイド払いパーチェス・チケット（（Ｔ₁’，ｎ₂），Ｔ₂）を、ユーザに送付する。
【０１１２】
次に、プリペイド払いパーチェス・チケットの使用例について説明する。
【０１１３】
＜プリペイド払いパーチェス・チケットの使用例＞
（ａ）プリペイド払いパーチェス・チケット（（Ｔ₁’，ｎ₂），Ｔ₂）を受け取ったユーザは、まずＴ₂をアクセスチケット記憶部１３に格納する。
（ｂ）次に、（Ｔ₁’，ｎ₂）を自分が保持している証明データ生成装置１０の認証用データ入力部１４より入力する。
【０１１４】
以下、証明データ生成装置１０における処理が図４に従って行われる。今、証明データ生成装置１４の度数情報保持部１２には、８００度数のプリペイド情報Ｖが保持されているとする。（Ｖ＝８００）
（ステップＳ２１）：認証用データ入力部１４より、認証用データ（Ｔ₁’，ｎ₂）を入力する。
（ステップＳ２２）：利用条件判断部１５は、ｎ₂をキーにしてアクセスチケット記憶部１３を検索し、アクセスチケットＴ₂＝（ｔ₂，Ｌ₂，ｎ₂）を取り出す。
（ステップＳ２３）：利用条件判断部１５は、取り出したアクセスチケット中の利用条件Ｌ₂と、度数情報保持部１２の度数情報Ｖとを比較する。
（ステップＳ２４）：今、Ｌ₂＝１００、Ｖ＝８００なので、
【０１１５】
【数１５】
Ｖ≧Ｌ₂
が成り立ち、（ステップＳ２６）へ進む。
（ステップＳ２６）：利用条件判断部１５は、度数情報保持部１２に保持されている度数情報Ｖを利用条件Ｌ₂の分だけ減額する。
【０１１６】
【数１６】
Ｖ＝８００−１００＝７００
つまり、度数情報Ｖは、プリペイド払いパーチェス・チケットの買取り料金として、１００度数引き落とされ、残り７００度数となる。
（ステップＳ２７〜Ｓ２９）：証明データ生成出力部１６は、利用条件判断部１５が取り出した証明用補助情報ｔ₂、利用条件Ｌ₂と、ユーザ固有情報記憶部１１から読み出したｄｕとを用いて証明データＲを計算して出力する。
【０１１７】
【数１７】
Ｒ’＝Ｔ₁’^F(n2,L2,du) ｍｏｄ ｎ₂
Ｒ＝Ｔ₁’^t2Ｒ’ ｍｏｄ ｎ₂
Ｒの計算を行うと、
【０１１８】
【数１８】

という計算が成り立ち、証明データ生成出力部１６から、証明データＲとして
【０１１９】
【数１９】
Ｒ＝Ｔ₁
が出力される。
【０１２０】
つまり、（Ｔ₁’，ｎ₂）を自分が保持している証明データ生成装置１０の認証用データ入力部１４より入力すると、Ｌ₂が度数情報Ｖから引き落とされて、結果としてＴ₁’が復号されたＴ₁が出力される。
【０１２１】
（ｃ）ユーザは、入手したＴ₁をアクセスチケット記憶部１３に格納する。
【０１２２】
（ｄ）ユーザは、アプリケーションプログラムＡＰ１を利用するためのアクセスチケットＴ₁を入手できたので、アプリケーションプログラムＡＰ１を利用する。
【０１２３】
以下、証明データ検証装置１０における認証用データ生成処理が図３に従って行われる。
（ステップＳ１１）：認証用データ生成部２１は、プロテクトされたアプリケーションプログラムから、Ｋ₁’とｎ₁とを取り出す。
（ステップＳ１２）：認証用データ生成部２１は、乱数ｒを生成し、乱数保持部２３に格納する。
（ステップＳ１３）：Ｃ＝ｒ^EＫ₁’ ｍｏｄ ｎ₁を計算する。
（ステップＳ１４）：（Ｃ，ｎ₁）の組を認証用データとして証明データ生成装置１０に送付する。
（ｅ）証明データ生成装置１０における処理が再び図４に従って行われる。
（ステップＳ２１）：認証用データ入力部１４より、認証用データ（Ｃ，ｎ₁）を入力する。
（ステップＳ２２）：利用条件判断部１５は、ｎ₁をキーにしてアクセスチケット記憶部１３を検索し、アクセスチケットＴ₁＝（ｔ₁，Ｌ₁，ｎ₁）を取り出す。
（ステップＳ２３）：利用条件判断部１５は、取り出したアクセスチケット中の利用条件Ｌ₁と、度数情報保持部１２の度数情報Ｖとを比較する。
（ステップＳ２４）：今、Ｌ１＝０、Ｖ＝７００なので、
【０１２４】
【数２０】
Ｖ≧Ｌ₁
が成り立ち、（ステップＳ２６）へ進む。
（ステップＳ２６）：利用条件判断部１５は、度数情報保持部１２に保持されている度数情報Ｖを利用条件Ｌ₁の分だけ減額する。
【０１２５】
【数２１】
Ｖ＝７００−０＝７００
つまり、度数情報Ｖは、最初にプリペイド払いパーチェス・チケットの買取り料金として、１００度数引き落とされているので、２回目以降の利用では引き落とされず、残り７００度数のままとなる。
（ステップＳ２７〜Ｓ２９）：証明データ生成出力部１６は、利用条件判断部１５が取り出した証明用補助情報ｔ₁、利用条件Ｌ₁と、ユーザ固有情報記憶部１１から読み出したｄｕとを用いて証明データＲを計算して出力する。
【０１２６】
【数２２】
Ｒ’＝Ｃ^F(n1,L1,du) ｍｏｄ ｎ₁
Ｒ＝Ｃ^t1Ｒ’ ｍｏｄ ｎ₁
つまり、
【０１２７】
【数２３】

（ｆ）証明データ検証装置２０の証明データ検証部２２は通常の認証と同様に処理を行い、乱数保持部２３から乱数ｒを取り出し、
【０１２８】
【数２４】
ｒ^-1Ｒ ｍｏｄ ｎ₁
を計算することで、アプリケーションを暗号化していた共通暗号鍵Ｋを入手することができる。証明データ検証装置は、この共通暗号鍵Ｋでアプリケーションの暗号化されていた部分を復号し、アプリケーションを実行することができる。
【０１２９】
これ以降は、何度アプリケーションプログラムＡＰ１を実行しても、同様の処理が行われ、無料で利用することができる。
【０１３０】
以上説明したように、上記のように構成することで、プリペイド情報を用いて、アプリケーションプログラムのアクセス権を購入する（パーチェス）ことが可能になる。
【０１３１】
以上、プリペイドにおけるパーチェス機能の実現について説明した。
【０１３２】
これ以外にも、証明データ生成装置に時計を備え、第１のアクセスチケットの利用条件情報Ｌの中に、利用額が無料という情報に加えて、有効期限情報を記載し、第１のアクセスチケットの利用のたびに、時刻と比較することによって、プリペイドにおけるレント機能を実現することも可能である。
【０１３３】
さらに、別の例としては、証明データ生成装置に時計を備え、第２のアクセスチケットの利用条件情報Ｌの中に、有効期限情報を記載し、暗号化された第１のアクセスチケットの復号の際に、時刻と比較することによって、第１のアクセスチケットを配布（解凍）する期限を限定することなども可能である。
【０１３４】
また、本実施例では、ＲＳＡ暗号を元にして説明を行ったが、これに限らず他の暗号方式を用いても構わない。また、アクセスチケットの実現式もこれに限ることはない。
【０１３５】
【発明の効果】
実行制御等のユーザのアクセス資格の認証を行うに際して、ユーザはあらかじめ固有情報を保持し、プログラム作成者等のプロテクト者はユーザが所持する固有情報とは独立にアクセス資格認証の特徴情報を用意し、アクセスチケットをユーザの固有情報とアプリケーションプログラムの作成等に使用したアクセス資格認証の特徴情報とに応じて作成し、配布することにより、ユーザおよびプロテクト者の双方を、アクセス権情報管理のわずらわしさから開放させるという特徴を残したまま、従来は困難だったプリペイドにおけるパーチェス機能およびレント機能を実現することを可能にした。
【０１３６】
さらにこれらの機能を実現するにおいて、通常のチケットの認証処理と同じ処理を行うように構成したので、比較的容量の少ないＩＣカード内に、余分なプログラムやデータを入れることなく、効率的に実現することが可能である。
【図面の簡単な説明】
【図１】 本発明の実施例の構成を示すブロック図である。
【図２】 図１の構成を詳細に説明する図である。
【図３】 図１の証明データ検証装置の認証用データ生成処理を説明するフローチャートである。
【図４】 図１の証明データ生成装置の証明データ生成処理を説明するフローチャートである。
【図５】 図１の証明データの生成に用いるチケットを生成する証明用補助情報生成装置を示すブロック図である。
【図６】 図１の証明データの生成に用いるチケットの生成を説明する図である。
【符号の説明】
１０ 証明データ生成装置
１１ ユーザ固有情報記憶部
１２ 度数情報保持部
１３ アクセスチケット記憶部
１４ 認証用データ入力部
１５ 利用条件判断部
１６ 証明データ生成出力部
２０ 証明データ検証装置
２１ 認証用データ生成部
２２ 証明データ検証部
２３ 乱数保持部
３０ 証明用補助情報生成装置
３２ 第１利用条件情報記憶部
３３ 第１復号鍵記憶部
３４ ユーザ固有情報記憶部
３５ 第２利用条件記憶部
３６ 第１チケット生成部
３７ 第２の鍵生成部
３８ 暗号化部
３９ 第２チケット生成部
４０ チケット出力部[0001]
BACKGROUND OF THE INVENTION
The present invention relates to a technique for authenticating a user's access qualification by verifying the validity of proof data generated to prove the authority of the user, and more particularly to a proof data generating apparatus for generating the proof data. .
[0002]
[Prior art]
A program execution control technique is known as a prior art belonging to the same field as the present invention. Program execution control technology
(1) Embed a routine for user authentication in the application program,
(2) The routine checks that the user who is trying to execute the application has a proper authentication key,
(3) Continue the program only when the presence of the authentication key is confirmed, otherwise stop the program execution
Technology.
[0003]
By using such a technique, only an authorized user who has an authentication key can execute the application program. This technology has been put into practical use in the software distribution business, and as a product, for example, Rainbow Technologies, Inc. Sentinel SuperPro (trademark), Aladdin Knowledge Systems Ltd. HASP (trademark) of the company.
[0004]
In these technologies, the user's authentication key is strictly enclosed by the software vendor in memory in the hardware to prevent duplication, and distributed to the user using physical means such as mail, which the user owns. Use it by attaching it to a PC.
[0005]
In these techniques, when creating an application program, the program creator must preliminarily assume an authentication key possessed by the user, and perform protection processing of the program based on the authentication key. That is, the program creator must predict the correct reply from the hardware with a built-in key when creating the program, and create the program so that the program operates normally only when the correct reply is received.
[0006]
There are basically the following two modes of utilization of the prior art having such characteristics.
[0007]
(1) In the first method, a user authentication key is prepared to be different for each user. That is, one different authentication key is prepared for each user, such as authentication key A for user A and authentication key B for user B.
[0008]
(2) In the second method, the program creator prepares a different authentication key for each application. That is, a different authentication key is prepared for each application, such as an authentication key A for the application A and an authentication key B for the application B, and each application program is created so as to identify a unique authentication key.
[0009]
However, in any of these cases, there are problems as described below.
[0010]
In the case of the first method, the program creator needs to create a program by appropriately changing the authentication routine in the program for each user. In other words, since the authentication key is different for each user, the authentication routine in the program must be created so as to identify the authentication key specific to the user who uses the program, and the program creator differs by the number of users. Need to create.
[0011]
When there are a large number of target users, the task of individualizing the program for each user requires labor that cannot be tolerated by the program creator, and the list of user authentication keys that must be managed becomes enormous.
[0012]
In the case of the second method, it is not necessary to individually create a program for each user as in the case of the first method, but conversely, the user must hold authentication keys for the number of applications to be used. It will be.
[0013]
This restriction raises the following problems for each program creator and user.
[0014]
As described above, the authentication key needs to be distributed to users in a state of being strictly enclosed in hardware. Therefore, in contrast to the program itself being able to be easily distributed via the network, the distribution of the hardware containing the authentication key has to rely on physical means such as mail. This restriction places a heavy burden on the program creator regardless of cost, time, and packaging.
[0015]
In order to respond to the user's request, the program creator must stock a certain number of different hardware for each application, which requires inventory management costs.
[0016]
In addition, the user must be relieved by the complexity of having to replace the hardware every time the application to be used is changed.
[0017]
Even if the user wants to use an application, the user has to wait until the hardware in which the authentication key is enclosed arrives, which causes inconvenience in that it cannot be used immediately.
[0018]
As a technique for solving this problem, the present applicant has proposed a new access qualification verification method (Japanese Patent Application No. 08-062076, currently unpublished).
[0019]
In the proposal of Japanese Patent Application No. 08-062076, by introducing auxiliary information for proof (access ticket), the characteristic information of the access qualification authentication and the user specific information are made independent. I have to prepare the information.
[0020]
An access ticket is data calculated based on specific information of a specific user and characteristic information of access credential authentication, and also calculates characteristic information of access qualification authentication from the access ticket without knowing the user specific information. It is difficult. The correct proof data is calculated only when the correct combination of the user specific information and the access ticket, that is, the combination of the user specific information and the access ticket calculated based on the user specific information is input. .
[0021]
Therefore, the user holds the unique information in advance, and the protector such as the program creator prepares the characteristic information of the access qualification authentication independently of the unique information possessed by the user, and creates the access ticket as the user's unique information and application program. It is possible to authenticate the access qualification of the user such as execution control by creating and distributing it according to the characteristic information of the access credential authentication used for the above.
[0022]
Using this technique, a service that protects an application program and distributes it to a user and provides an access ticket to a user who wants to use the application program can be considered.
[0023]
Give the desired user a medium such as an IC card enclosing different unique information for each user, and the program creator protects and distributes the program using the characteristic information of access qualification, and uses the program The ticket issuer commissioned by the program creator or the program creator provides the access ticket to the user who desires the service.
[0024]
When considering such a service, how and when to charge is a problem. In the case of this example, when issuing an access ticket, a fee corresponding to the price of the program can be collected in exchange for issuing the ticket.
[0025]
By the way, when considering such a program usage right trading service, the following types of rights can be considered.
(1) Purchase: A method of purchasing usage rights. Once purchased, it can be used forever. After that, the fee is the same whether you use it or not.
(2) Pay-per-use: It is also called usage charge. Charged according to the amount used.
(3) Rent: Purchase usage rights for a certain period. Cannot be used after the deadline has passed.
[0026]
When using the technique of the above-mentioned Japanese Patent Application No. 08-062076, it is easy to realize purchase, but it is difficult to realize rent.
[0027]
Pay-per-use can be realized by the user submitting a request for use to the ticket issuer each time it is used, and the ticket issuer issues an access ticket that can be used only once. In addition, since it is necessary to frequently issue a ticket, it is necessary to record a log for the ticket used in the user's IC card in order to realize an access ticket that can be used only once. Not right.
[0028]
For this problem, the present applicant has proposed to introduce the usage control information into the access ticket qualification authentication method (Japanese Patent Application No. 08-191756, currently unpublished). In the method of Japanese Patent Application No. 08-191756, usage control information is introduced into Japanese Patent Application No. 08-062076, and this usage control information is also used when the information is decoded. As examples of the usage control information, usage expiration date, usage count, total usage time, usage upper limit amount, information on whether or not to take processing history, and the like are described.
[0029]
When the usage control information is the expiration date, rent can be realized.
[0030]
In addition, when the usage control information is information that takes a processing history, it is close to pay-per-use by calculating and billing the usage count by collecting and aggregating the history after a certain period of time. Function can be realized. Furthermore, if the usage amount per time is described in the usage control information, flexible pay-per-use can be realized.
[0031]
That is, according to the technique of Japanese Patent Application No. 08-191756, the above-described rights purchase, pay-per-use, and rent can all be realized.
[0032]
Next, consider the payment method. The following two methods can be considered.
[0033]
(1) Payment method when issuing a ticket:
A payment method when a ticket issuer issues an access ticket.
There are cases where payment is made with electronic money, and charges are recorded on the issuer side, and settlement is made by bank transfer.
[0034]
(2) How to pay by prepaid:
The user purchases the prepaid frequency in advance and holds it in an IC card or the like, and the corresponding frequency is deducted from the prepaid when purchasing or using.
[0035]
By using the technology of Japanese Patent Application No. 08-191756, (1) the above-mentioned rights form purchase, pay-per-use and rent can be realized by the method of paying at the time of ticket issuance.
[0036]
On the other hand, pay-per-use can be easily realized by the method (2) of prepaid payment. In other words, the usage amount per time is described in the usage control information, and each time authentication is performed, it is sufficient to deduct from the stored prepaid information by the number of times described in the usage control information.
[0037]
However, it is difficult to achieve purchase and rent by the method of paying by (2) prepaid. This is because purchase needs to be charged by prepaid only at the first use and not charged at the second and subsequent uses.
[0038]
As for purchases, the purchase amount of the usage right is described in the usage control information, and it is deducted from the prepaid information holding the amount at the first use, and the information of the used access ticket is registered in the IC card. In the second and subsequent use, it can be realized by checking whether the ticket to be used is already registered in the IC card, and not registering it from the prepaid information when it is registered. is there. However, since this registration information cannot be erased for a very long period of time, when many tickets are used, the storage capacity of the IC card is insufficient, which is not a practical solution.
[0039]
Even in the case of a rent, it is possible to realize it by describing the rental amount and the expiration date in the usage control information and adopting the same method as purchase, but the storage capacity of the IC card is also insufficient. It is not a very realistic solution.
[0040]
[Problems to be solved by the invention]
The present invention has been made in view of the above problems, and even in a method of prepaid payment, it is possible to realize purchase and rent without applying extra load on the proof data generation device (IC card) side. The challenge is to make this possible.
[0041]
[Means for Solving the Problems]
According to the present invention, in order to solve the above-described problem, authentication data is input to a proof data generation device that generates proof data that is generated to authenticate a user's access qualification and is verified for validity. Predetermined calculations for authentication data input means, user specific information storage means for storing user specific information, user specific information, access qualification feature information, and use condition information describing access conditions Proof auxiliary information set storage means for storing a proof auxiliary information set including a set of proof auxiliary information generated by executing and use condition information, and proof auxiliary information corresponding to the input authentication data The set is extracted from the proof auxiliary information set storage means, and a determination is made as to whether or not to continue the subsequent processing according to the usage condition information of the extracted proof auxiliary information set. Use condition determination means, and when the use condition determination means determines continuation, the extracted certification auxiliary information set, the authentication data input from the authentication data input means, and the user-specific information Proof data generation / output means for generating and outputting proof data by performing a predetermined calculation on the unique information of the user stored in the storage means, and from the authentication data input means, a first proof auxiliary An encryption certification auxiliary information set obtained by encrypting an information set with an encryption key in an encryption function is input, and the use condition determining means is input from the certification auxiliary information set storage means as input encryption certification auxiliary information. The second certification auxiliary information set corresponding to the set was extracted, and predetermined processing was performed according to the usage condition information of the extracted second certification auxiliary information set The proof data generating / outputting means determines whether to continue the subsequent processing, and the proof data generating / outputting means performs the above processing to thereby decrypt the encrypted proof auxiliary information set. An information set is output.
[0042]
In other words, the first certification auxiliary information set which is a normal certification auxiliary information set (access ticket) is encrypted to create an encrypted certification auxiliary information set, and the encrypted certification auxiliary information set is accessed. The first certification auxiliary information set is decrypted from the encrypted certification auxiliary information set by performing exactly the same processing as the normal authentication processing using the second certification auxiliary information set for performing the above.
[0043]
With this configuration, a ticket (second proof auxiliary information set) for creating and encrypting a ticket (first auxiliary information set for proof) that is free of charge and decrypting the encrypted ticket is created. An information set) is issued, and the use fee of this ticket (second certification auxiliary information set) is charged and paid in advance, so that the purchase function in prepaid can be realized as a whole.
[0044]
In addition to this, the rent function can be realized by describing expiration date information in the use condition information of the second certification auxiliary information set.
[0045]
In order to decrypt the encrypted ticket, it is configured to perform the same processing as the normal ticket authentication processing, so that there is no need to put extra programs and data in the relatively small capacity IC card. Can be realized efficiently.
[0046]
DETAILED DESCRIPTION OF THE INVENTION
Examples of the present invention will be described below.
[0047]
FIG. 1 shows a block diagram of this embodiment. In this embodiment, an example (purchase) in which prepaid information is held in the proof data generation apparatus and the access right of the application program is purchased using the prepaid information will be described.
[0048]
FIG. 1 shows a proof data verification device that verifies proof data generated and output by the proof data generation device.
[0049]
First, the configuration of the present embodiment will be described with reference to FIG. 1, and then the processing flow of the proof data verification device and the proof data generation device will be described with a flowchart. In the description of the processing flow, a normal authentication process will be described as an example, and in the usage condition information L, an example in which a withdrawal is made from the prepaid for each use will be described. An example (purchase) of purchasing the access right of the application program will be described after the description of the normal authentication process.
[0050]
[Configuration of Example]
FIG. 1 shows the configuration of an embodiment as a whole. In this figure, a proof data generation device 10 is held by a user. For example, a portable device having a calculation function inside, such as an IC card. It is. In addition to the IC card, a PC card having a calculation function, a portable information tool, or a sub-notebook personal computer may be used. It is desirable to protect internal information from being easily tampered with from the outside.
[0051]
The proof data verification device 20 is a personal computer in which a user uses an application program, and is used by mounting an IC card as the proof data generation device 10 in a slot of the personal computer.
[0052]
The proof data verification apparatus 20 is mainly composed of an authentication data generation unit 21 and a proof data verification unit 22. The authentication data generation unit 21 generates authentication data and sends it to the proof data generation device 10 when authentication is required. The proof data verification unit 22 verifies whether the proof data sent back from the proof data generation device 10 is correct.
[0053]
The application program is protected by encryption or the like, and when the user tries to use the application program, the proof data verification device 20 creates authentication data corresponding to the application program and sends it to the proof data generation device 10. The proof data sent back from the proof data generation device 10 is verified, and the application program is unprotected and can be used only when it is verified that the proof data is correct.
[0054]
On the other hand, the proof data generation device 10 includes a user specific information storage unit 11, a frequency information holding unit 12, an access ticket storage unit 13, an authentication data input unit 14, a use condition determination unit 15, and a proof data generation output unit 16. Composed.
[0055]
The user specific information storage unit 11 is a part that holds the secret information of the user, and is information that differs for each user. It is desirable that the user-specific information is enclosed when the proof data generation device 10 is created and configured so that it cannot be taken out by the user.
[0056]
The frequency information holding unit 12 is a part that holds prepaid information, and a necessary amount is reduced in accordance with use or purchase of an application program. When the amount decreases, it can be increased. As a method of increasing the amount, for example, the method proposed in Japanese Patent Application No. 9-21373 can be used. In this method, the frequency information is increased using the frequency information and the signed frequency information. The increase / decrease of the amount in the frequency information holding unit 12 needs to be performed safely, and it is desirable that the access is made only by a predetermined method.
[0057]
The access ticket storage unit 13 stores a plurality of access tickets. The access ticket gives access qualification to the user and is created by the application program creator or a ticket issuer commissioned by the application program creator. In this embodiment, the access ticket is a certificate obtained by executing a predetermined calculation on the user's unique information, the characteristic information of the access qualification authentication, and the use condition information describing the access condition of the access qualification authentication. It is a set of auxiliary information and usage condition information. In this embodiment, the access ticket storage unit is configured in the IC card. However, since the access ticket can only be used by the person who issued it, copying is free, and the access ticket storage unit may be configured outside the IC card.
[0058]
The authentication data input unit 14 is a part for inputting authentication data sent from the proof data verification device 20.
[0059]
The use condition determination unit 15 extracts an access ticket corresponding to the input authentication data from the access ticket storage unit 13 and determines the use condition based on the use condition information in the access ticket. For example, use conditions such as whether the access ticket has not expired or the use fee is sufficient to be paid by the prepaid held are determined, and it is determined whether or not to continue the subsequent processing.
[0060]
The proof data generation / output unit 16 generates and outputs proof data only when it is determined to be continued by the use condition determination unit 15. The proof data is created by performing predetermined calculations on the proof auxiliary information, the authentication data, and the user specific information in the access ticket extracted by the use condition determining unit 15.
[0061]
Next, a specific example is given and it demonstrates in detail. The description here will be described by taking a normal authentication process as an example, and in the usage condition information L, an example will be described in which the payment is deducted from the prepaid for each use.
[0062]
FIG. 2 is a diagram in which symbols are added to the configuration diagram of FIG. 1. The symbols correspond to the following explanations.
[0063]
[Normal authentication processing]
Hereinafter, an example using RSA (Rivest-Shamir-Adelman) cipher in modulus n will be described in detail. First, normal authentication processing will be described. In the following example, an example will be described in which a software vendor, who is the creator of an application program, performs everything from issuing an IC card to issuing a ticket. In this example, the software vendor knows the secret information du of all users. In addition, a configuration in which a ticket issuer issues an IC card and issues a ticket is also possible.
[0064]
The software vendor creates an encryption key for the application program to be protected. Here, since RSA encryption is used, large prime numbers p and q are secretly created, and a modulus number n is created as n = p · q. Next, the encryption key E and the decryption key D under the modulus n
[0065]
[Expression 1]
ED≡1 mod φ (n)
Generate to satisfy. Here, φ (n) is the Euler number, and φ (n) = (p−1) (q−1).
[0066]
Next, the software vendor creates a common encryption key K, encrypts part or all of the application program to be protected with K,
[0067]
[Expression 2]
K '= K^E  mod n
Is calculated and embedded in an application program encrypted with K 'so that the third party cannot take it out.
[0068]
A user who wants to use this application program obtains an access ticket corresponding to the application program in advance.
[0069]
The software vendor issues an access ticket in response to a request for issuing an access ticket from the user. The software vendor extracts from the database the requested user secret information du and the decryption key (D, n) corresponding to the encryption key (E, n) used when encrypting the application program. Next, use condition information L to be given to the access ticket is created. In this case, since the charge is deducted from the prepaid, the usage amount withdrawn for one use is L.
And using this information,
[0070]
[Equation 3]
t = D−F (n, L, du)
Proof auxiliary information t is created. Here, the function F () is a one-way function, and a one-way hash function MD5, SHA, or a common key encryption DES (Data Encryption Standard) can be used.
[0071]
The software vendor issues a set of (t, L, n) to the user as an access ticket.
[0072]
When the user tries to use the application program, the proof data verification device creates authentication data (C, n) corresponding to the application program and sends it to the proof data generation device.
[0073]
The flow of this processing is shown in the flowchart of FIG. 3, and will be described based on this.
(Step S11): The certification data generation unit 21 extracts K 'and n from the protected application program.
(Step S12): The proof data generation unit generates a random number r and stores it in the random number holding unit.
(Step S13): C = r^EK ′ mod n is calculated.
(Step S14): The set of (C, n) is sent to the proof data generation device 10 as authentication data.
[0074]
Next, the flow of the proof data generation device 10 is shown in FIG. 4, and the processing of the proof data generation device 10 will be described based on this.
(Step S 21): Authentication data (C, n) is input from the authentication data input unit 14.
(Step S22): The use condition determination unit 15 searches the access ticket storage unit using n as a key, and takes out the access ticket (t, L, n).
(Step S23): The usage condition determination unit 15 compares the usage condition L (use amount) in the retrieved access ticket with the frequency information V of the frequency information holding unit.
(Steps S24 to S25): When V ≧ L, the certification data generation output unit 16 proceeds to (Step S26). Otherwise, the proof data generation / output unit outputs an error and ends.
(Step S26): The usage condition determination unit 15 reduces the frequency information V held in the frequency information holding unit 12 by the usage condition (use amount) L.
(Steps S <b> 26 to S <b> 29): The proof data generation / output unit 16 receives the auxiliary proof information t, the usage condition L (use amount), and the du read out from the user specific information storage unit 11. Using this, the proof data R is calculated and output.
[0075]
[Expression 4]
R '= C^{F (n, L, du)}  mod n
R = C^tR 'mod n
In FIG. 4, the calculation of R ′ is once divided to calculate the proof data R. This is because the user's confidential information is used in the calculation of R ′, so it is necessary to calculate so that the processing does not leak to the outside. Once R ′ is calculated, R is calculated externally. This is because it does not matter. Thus, it may be calculated separately for R ′ and R, or may be calculated at once.
[0076]
Next, processing of the proof data verification unit of the proof data verification device 20 will be described. When the proof data R output from the proof data generation device 10 is calculated using the correct user specific information du and the correct access ticket (correct proof auxiliary information t, correct use condition L),
[0077]
[Equation 5]

It becomes.
[0078]
Therefore, the proof data verification unit 22 extracts the random number r from the random number holding unit 23,
[0079]
[Formula 6]
r^-1R mod n
By calculating, the common encryption key K that has encrypted the application can be obtained. The proof data verification device can execute the application by decrypting the encrypted part of the application with this common encryption key K.
[0080]
In this example, the proof data verification apparatus determines that the verification has been performed correctly when the application has been correctly executed.
[0081]
This is the end of the description of the normal authentication process.
[0082]
[Purchase]
Next, an example in which the access right of an application program is purchased (purchase) using prepaid information will be described.
[0083]
In order to realize this function, the first access ticket, which is a normal access ticket, is encrypted to create an encrypted access ticket, and the second access ticket for accessing the encrypted access ticket is used. Thus, the first access ticket is decrypted from the encrypted access ticket by performing exactly the same processing as the normal authentication processing.
[0084]
At this time, the first access ticket is created as a ticket for which the usage fee is free, and the second access ticket is configured so that the usage fee is charged and paid in advance, so that the purchase function of the prepaid as a whole can be obtained. Enable realization.
[0085]
First, an application program for realizing the purchase function is AP1. Similar to the above description, AP1 is protected.
[0086]
<Description of protection of application program AP1>
The software vendor creates an encryption key for the application program to be protected. Since RSA encryption is used here, a large prime number p₁, Q₁Is secretly created and the modulus n₁N₁= P₁・ Q₁Create as. Next, the modulus n₁Encryption key E under₁And decryption key D₁The
[0087]
[Expression 7]
E₁・ D₁≡1 mod φ (n₁)
Generate to satisfy. Where φ (n₁) Is the Euler number and φ (n₁) = (P₁-1) (q₁-1).
[0088]
Next, the software vendor uses the common encryption key K₁Make a part or all of the application program you want to protect₁Encrypted with a common encryption key K₁According to the following formula:₁Encrypt with K₁'Is generated.
[0089]
[Equation 8]
K₁'= K₁E₁  mod n₁
And K₁It is embedded and distributed in an application program encrypted with 'so that a third party cannot easily take it out. N₁Also embed in encrypted application programs.
[0090]
Software vendor created (n₁, D₁, Φ (n₁)) Is stored in the access ticket information database.
[0091]
Next, creation of a prepaid purchase ticket will be described. FIG. 5 shows a configuration example of the auxiliary proof information generation device 30. In this example, the first use condition information, the first decryption key, the user specific information, and the second use condition information are input, and a prepaid payment purchase ticket is output. In FIG. 5, an input unit 31 is a part for inputting first usage condition information, a first decryption key, user-specific information, and second usage condition information. The first decryption key storage unit 33 is a part that stores the first decryption key input from the input unit 31. The first decryption key is the common encryption key K used for encrypting the application program AP1.₁Encryption key (E₁, N₁) Decryption key (D₁, N₁).
[0092]
The user specific information storage unit 34 is a part that stores user specific information input from the input unit 31. This is the same as that stored in the user proof data generation device 10.
[0093]
When the user requests to issue a ticket, the user identification information U and the n extracted from the application program AP1 that the user wants to use₁To the software vendor. The software vendor obtains the user specific information by searching for the user specific information du corresponding to the user identification information U from the user information database that holds the user identification information U and the user specific information du in association with each other. From the access ticket information database that holds a set of (n, D, φ (n)), n₁Decryption key (D₁, N₁) And is input to the proof auxiliary information generating device 30.
[0094]
The first use condition information storage unit 32 and the second use condition information storage unit 35 are parts for storing the first use condition information and the second use condition information, respectively. The first usage condition information describes the usage conditions of the application program AP1, and the second usage condition information describes the usage conditions of the prepaid purchase ticket. In the case of a prepaid purchase ticket, it is charged at the first use and is not charged at the second and subsequent uses. Therefore, the first use condition information includes at least information indicating that it is free. The second usage condition information includes at least information indicating that there is a charge.
[0095]
The first ticket generation unit 36 is a part that performs a predetermined calculation on the input first use condition information, the first decryption key, and the user specific information to generate an access ticket.
[0096]
The configuration part 41 including the first usage condition information storage unit 32, the first decryption key storage unit 33, the user specific information storage unit 34, and the first ticket generation unit 36 has the same configuration as that for generating a normal access ticket. I am doing.
[0097]
The second key generation unit 37 is a part that generates a key for encrypting the first access ticket generated by the first ticket generation unit 36.
[0098]
The encryption unit 38 is a part that encrypts the first access ticket generated by the first ticket generation unit 36 using the encryption key generated by the second key generation unit 37.
[0099]
The second ticket generation unit 39 is a part that generates a second access ticket necessary for decrypting the encrypted access ticket encrypted by the encryption unit 38.
[0100]
The ticket output unit 40 combines the encrypted access ticket encrypted by the encryption unit 38 and the second access ticket generated by the second ticket generation unit 39, and outputs the combined ticket as a prepaid payment purchase ticket.
[0101]
<Prepaid purchase ticket creation>
Hereinafter, a method for creating a prepaid payment purchase ticket will be described with reference to the flowchart of FIG.
[0102]
Upon receiving a prepaid payment purchase ticket issuance request from the user, the software vendor issues a prepaid payment purchase ticket. The user who requests the ticket issuance is extracted from the user identification information U and the application program AP1 that the user wants to use.₁To the software vendor.
[0103]
(Step S31): The software vendor extracts the user identification information U, which is a prepaid purchase purchase ticket issuance request from the user, and the application program AP1.₁(U, n₁). Also, first usage condition information L describing the usage conditions of the application program AP1₁And second use condition information L describing the use condition of the prepaid purchase ticket₂Enter also. Here, because the purpose is to generate a prepaid purchase ticket, the first use condition information L₁Means that the usage fee is free
[0104]
[Equation 9]
L₁= 0
The second use condition information L2 means that the purchase fee is charged.
[0105]
[Expression 10]
L₂= A
And However, A is a number other than 0, for example, 100.
[0106]
(Step S32): The user specific information du corresponding to the user identification information U is searched from the user information database that holds the user identification information U and the user specific information du in association with each other.
(Step S33): From the access ticket information database holding the set of (n, D, φ (n)), n₁The first decryption key (D₁, N₁)
(Step S34): a first access ticket T for the user to access AP1₁Create
[0107]
## EQU11 ##
T₁= (T₁, L₁, N₁)
t₁= D₁-F (n₁, L₁, Du)
(Step S35): First access ticket T₁To encrypt the second modulus n₂, Second encryption key E₂, Second decryption key D₂Is generated. Large prime number p₂, Q₂, And the modulus n so that₂, Encryption key E₂, Decryption key D₂Is generated.
[0108]
[Expression 12]
n₂= P₂・ Q₂
E₂・ D₂≡1 mod φ (n₂)
φ (n₂) = (P₂-1) (q₂-1)
(Step S36): The generated second encryption key E₂The first access ticket T₁Is encrypted. T₁The encrypted version of T₁'.
[0109]
[Formula 13]
T₁‘= T₁E₂  mod n₂
(Step S37): Encrypted access ticket T₁The second access ticket T for the user to decrypt '₂Create
[0110]
[Expression 14]
T₂= (T₂, L₂, N₂)
t₂= D₂-F (n₂, L₂, Du)
(Step S38): ((T₁', N₂), T₂) And output as a prepaid purchase ticket.
[0111]
The software vendor outputs the prepaid purchase ticket ((T₁', N₂), T₂) To the user.
[0112]
Next, an example of using a prepaid purchase ticket will be described.
[0113]
<Examples of using prepaid purchase tickets>
(A) Purchase ticket for prepaid payment ((T₁', N₂), T₂) First receives T₂Is stored in the access ticket storage unit 13.
(B) Next, (T₁', N₂) Is input from the authentication data input unit 14 of the proof data generation device 10 held by itself.
[0114]
Thereafter, the processing in the proof data generation device 10 is performed according to FIG. Now, it is assumed that the frequency information holding unit 12 of the proof data generation device 14 holds 800-degree prepaid information V. (V = 800)
(Step S21): The authentication data (T₁', N₂).
(Step S22): The use condition determining unit 15 sets n₂Is used as a key to search the access ticket storage unit 13 and access ticket T₂= (T₂, L₂, N₂).
(Step S23): The use condition judgment unit 15 uses the use condition L in the retrieved access ticket.₂And the frequency information V of the frequency information holding unit 12 are compared.
(Step S24): Now, L₂= 100, V = 800, so
[0115]
[Expression 15]
V ≧ L₂
The process proceeds to (Step S26).
(Step S26): The usage condition determination unit 15 uses the frequency information V held in the frequency information holding unit 12 as the usage condition L.₂Reduce by the amount of.
[0116]
[Expression 16]
V = 800-100 = 700
That is, the frequency information V is deducted 100 times as the purchase fee for the purchase ticket for the prepaid payment, and the remaining 700 times.
(Steps S27 to S29): The proof data generation / output unit 16 provides the proof auxiliary information t extracted by the use condition determination unit 15.₂, Terms of use L₂And the proof data R is calculated and output using du read from the user specific information storage unit 11.
[0117]
[Expression 17]
R '= T₁’^{F (n2, L2, du)}  mod n₂
R = T₁’^t2R 'mod n₂
When R is calculated,
[0118]
[Expression 18]

As the proof data R is obtained from the proof data generation / output unit 16,
[0119]
[Equation 19]
R = T₁
Is output.
[0120]
That is, (T₁', N₂) Is input from the authentication data input unit 14 of the proof data generation device 10 held by itself.₂Is deducted from the frequency information V, resulting in T₁‘T’ decoded₁Is output.
[0121]
(C) The user obtained T₁Is stored in the access ticket storage unit 13.
[0122]
(D) The user accesses an access ticket T for using the application program AP1.₁Is obtained, the application program AP1 is used.
[0123]
Thereafter, the authentication data generation processing in the proof data verification device 10 is performed according to FIG.
(Step S <b> 11): The authentication data generation unit 21 executes K from the protected application program.₁'And n₁And take out.
(Step S <b> 12): The authentication data generation unit 21 generates a random number r and stores it in the random number holding unit 23.
(Step S13): C = r^EK₁’Mod n₁Calculate
(Step S14): (C, n₁) Is sent as authentication data to the proof data generation device 10.
(E) The processing in the proof data generation device 10 is performed again according to FIG.
(Step S21): Authentication data (C, n) from the authentication data input unit 14₁).
(Step S22): The use condition determining unit 15 sets n₁Is used as a key to search the access ticket storage unit 13 and access ticket T₁= (T₁, L₁, N₁).
(Step S23): The use condition judgment unit 15 uses the use condition L in the retrieved access ticket.₁And the frequency information V of the frequency information holding unit 12 are compared.
(Step S24): Now, since L1 = 0 and V = 700,
[0124]
[Expression 20]
V ≧ L₁
The process proceeds to (Step S26).
(Step S26): The usage condition determination unit 15 uses the frequency information V held in the frequency information holding unit 12 as the usage condition L.₁Reduce by the amount of.
[0125]
[Expression 21]
V = 700-0 = 700
In other words, the frequency information V is first deducted 100 times as the purchase fee of the prepaid purchase ticket, so it is not deducted for the second and subsequent uses, and remains 700 degrees.
(Steps S27 to S29): The proof data generation / output unit 16 provides the proof auxiliary information t extracted by the use condition determination unit 15.₁, Terms of use L₁And proof data R is calculated and output using du read from the user specific information storage unit 11.
[0126]
[Expression 22]
R '= C^{F (n1, L1, du)}  mod n₁
R = C^t1R 'mod n₁
That means
[0127]
[Expression 23]

(F) The proof data verification unit 22 of the proof data verification device 20 performs processing similar to normal authentication, extracts the random number r from the random number holding unit 23,
[0128]
[Expression 24]
r^-1R mod n₁
By calculating, the common encryption key K that has encrypted the application can be obtained. The proof data verification device can execute the application by decrypting the encrypted part of the application with this common encryption key K.
[0129]
Thereafter, the same processing is performed no matter how many times the application program AP1 is executed and can be used free of charge.
[0130]
As described above, with the configuration as described above, it is possible to purchase (purchase) the access right of the application program using the prepaid information.
[0131]
The implementation of the purchase function in prepaid has been described above.
[0132]
In addition to this, the proof data generation device is provided with a clock, and in the usage condition information L of the first access ticket, in addition to the information that the usage amount is free, the expiration date information is described, and the first access ticket It is also possible to realize a prepaid rent function by comparing the time with each time of use.
[0133]
Further, as another example, the proof data generation device includes a clock, the expiration date information is described in the use condition information L of the second access ticket, and the encrypted first access ticket is decrypted. At this time, it is also possible to limit the time limit for distributing (decompressing) the first access ticket by comparing with the time.
[0134]
In the present embodiment, the description has been made based on the RSA encryption. However, the present invention is not limited to this, and other encryption methods may be used. Also, the access ticket realization formula is not limited to this.
[0135]
【The invention's effect】
When authenticating the user's access qualification such as execution control, the user holds the specific information in advance, and the protector such as the program creator prepares the characteristic information of the access qualification independent of the specific information possessed by the user. By creating and distributing an access ticket according to the user's unique information and the characteristic information of the access qualification authentication used for creating the application program, both the user and the protector are bothered in managing access right information. This makes it possible to realize the purchase function and rent function in prepaid, which was difficult in the past, while retaining the feature of releasing from.
[0136]
Furthermore, in order to realize these functions, it is configured to perform the same processing as normal ticket authentication processing, so it is efficiently realized without putting extra programs and data in a relatively small capacity IC card. Is possible.
[Brief description of the drawings]
FIG. 1 is a block diagram showing a configuration of an embodiment of the present invention.
FIG. 2 is a diagram illustrating the configuration of FIG. 1 in detail.
FIG. 3 is a flowchart for explaining authentication data generation processing of the proof data verification device of FIG. 1;
FIG. 4 is a flowchart for explaining proof data generation processing of the proof data generation device in FIG. 1;
FIG. 5 is a block diagram showing a proof auxiliary information generating apparatus that generates a ticket used for generating proof data in FIG. 1;
6 is a diagram for explaining generation of a ticket used for generation of proof data in FIG. 1. FIG.
[Explanation of symbols]
10 Certification data generator
11 User-specific information storage unit
12 Frequency information holding part
13 Access ticket storage
14 Authentication data input section
15 Use Condition Judgment Department
16 Proof data generation output
20 Certification data verification device
21 Authentication data generator
22 Proof data verification part
23 Random number storage
30 Auxiliary information generator for proof
32 1st use condition information storage part
33 First decryption key storage unit
34 User-specific information storage unit
35 Second Usage Condition Storage Unit
36 First ticket generator
37 Second key generation unit
38 Encryption section
39 Second ticket generator
40 Ticket output section

Claims (11)

Proof data generated to authenticate the user's access qualification , which is verified by the verification device based on the characteristic information of the access qualification authentication, thereby verifying the validity In the proof data generation device to generate,
Authentication data input means for inputting authentication data;
User-specific information storage means for storing user-specific information;
(A) Proof auxiliary information generated by executing a predetermined first calculation on user specific information, access qualification feature information, and use condition information describing access conditions ;
(B) including the set of the usage condition information and <br/>, the proof support information set storage means for storing proof support information set,
When a proof auxiliary information set corresponding to the input authentication data is extracted from the proof auxiliary information set storage means, and the usage state satisfies the usage condition information according to the usage condition information of the extracted proof auxiliary information set Use condition determining means for determining that the proof data generation process is to be continued , and determining that the proof data generation process is to be stopped if the use state does not satisfy the use condition information ;
When it is determined to be continued by the use condition determining means, the extracted proof auxiliary information set, the authentication data input from the authentication data input means, and the user specific information storage means are stored. Proof data generation and output means for generating and outputting proof data by performing a predetermined second calculation on the unique information of the user,
The predetermined first calculation executed to generate the proof auxiliary information and the predetermined second calculation executed to generate the proof data, the user specific information, When the feature information of access qualification authentication and the auxiliary information for proof correspond, select such that the proof data is verified based on the feature information of the access credential authentication by the verification device,
Furthermore, from the authentication data input means, an encryption certification auxiliary information set obtained by encrypting the first certification auxiliary information set with an encryption key in a cryptographic function is input,
The use condition determining means is a second proof auxiliary information set corresponding to the encrypted proof auxiliary information set inputted from the proof auxiliary information set storage means, and is the first proof auxiliary information set. Is extracted from the second proof auxiliary information set having the access qualification feature information, and it is determined whether the usage state satisfies the usage condition information according to the usage condition information of the extracted second proof auxiliary information set. If satisfied , after performing the accounting process, continue the proof data generation process using the second proof auxiliary information, and if not, stop the proof data generation process ,
The proof data generation / output means performs a proof data generation process using the second proof auxiliary information set, thereby decrypting the encrypted proof auxiliary information set. A proof data generation device, characterized in that an auxiliary information set is output so that proof data can be generated using the first proof auxiliary information set .   At least the user-specific information storage unit, the use condition determination unit, and the proof data generation / output unit are held in a defense unit that makes it difficult to observe internal data and processing procedures from the outside. The certification data generation device according to claim 1.   In addition, a frequency information holding unit that holds electronic frequency information is included, and the usage condition information includes a usage frequency to be paid when used, and the usage condition determination unit is an electronic device that is held in the frequency information holding unit. The frequency information is compared with the usage frequency included in the usage condition information, and the frequency information is held only when the electronic frequency information held in the frequency information holding means is equal to or higher than the usage frequency included in the usage condition information. 3. The proof data generation apparatus according to claim 1, wherein a determination is made to reduce the frequency corresponding to the usage frequency included in the usage condition information from the electronic frequency information held in the means and to continue the subsequent processing.   The usage frequency included in the first usage condition information included in the first proof auxiliary information set is 0 degree, and is included in the second usage condition information included in the second proof auxiliary information set. 4. The proof data generation device according to claim 3, wherein the utilization frequency is other than 0.   In addition, the first usage condition information included in the first certification auxiliary information set further includes expiration date information, and the usage condition determination means includes the time and the expiration date. 5. The proof data generation device according to claim 1, wherein the proof data generation apparatus determines that the subsequent processing is continued only when the information is compared with the time and the time is within the expiration date.   6. The proof data generation apparatus according to claim 1, wherein at least means other than the proof auxiliary information set storage means are configured as a portable small arithmetic device. In an access credential authentication apparatus for authenticating the access qualification of the user by verifying that the proof data generated to prove the access credential of the user is generated based on the characteristic information of the access credential authentication,
If the preliminary access qualification authentication is successful and the preliminary access qualification authentication is successful, the main access qualification authentication that can be performed is performed thereafter.
further,
User- specific information storage means for storing user-specific information ;
And unique information of the user, the main access rights authentication characteristic information and a predetermined first encryption generating encrypted proof support and the proof support information of the main access right authentication generated by executing a calculation on Auxiliary information input means for encryption certification for inputting information ;
(A) the unique information of the user, a decryption key of the encrypted as feature information of the preliminary access credentials for the usage condition information describing the access condition, the first calculation of the predetermined Auxiliary information for proof of preliminary access credential authentication generated by execution and
(B) consisting of the usage condition information, the proof support information set storage means for storing a preliminary access credentials authentication proof support information set,
Follow the usage condition information included in the preliminary access credentials authentication proof support information set stored in the proof support information set storage unit, the billing process when the use state satisfies the usage condition information And deciding to continue the proof data generation process, and determining that the charging process and proof data generation are to be stopped if the usage state does not satisfy the usage condition information ,
When it is determined to execute the accounting process and continue the certification data generation process, the accounting process is performed, and the encryption certification auxiliary information stored in the encryption certification auxiliary information storage means, and and unique information of the user stored in the user-specific information storage means, the predetermined relative and proof support information sets of the preliminary access right authentication stored in the proof support information set storage unit Means for generating proof data by executing a second calculation, thereby restoring the auxiliary information for proof of the main access qualification ,
Authentication data input means for inputting authentication data for main access qualification authentication;
For the authentication data input by the authentication data input means , the user specific information stored in the user specific information storage means, and the restored authentication auxiliary information for the main access qualification authentication means for generating proof data by performing the predetermined second calculation,
The product is the proof data were to have a means for verifying,
The predetermined first calculation executed to generate the proof auxiliary information and the predetermined second calculation executed to generate the proof data, the user specific information, When the access qualification authentication feature information and the proof auxiliary information correspond to each other, select such that the verification means verifies that the proof data is generated based on the access credential authentication feature information. An access qualification authentication device characterized by the above. In an access credential authentication apparatus for authenticating the access qualification of the user by verifying that the proof data generated to prove the access credential of the user is generated based on the characteristic information of the access credential authentication,
If the preliminary access qualification authentication is successful and the preliminary access qualification authentication is successful, the main access qualification authentication that can be performed is performed thereafter.
User- specific information storage means for storing user-specific information ;
(A1) and specific information of the user, and characteristic information of the main access right authentication to a first use condition information describing the access condition, the main access right authentication generated by executing a predetermined first calculation proof support information and
(B1) and the first usage condition information as the main access rights authentication encryption proof support information set input means for inputting the proof support information set encryption proof support information set generated by encrypting a made of,
(A2) the unique information of the user, a decryption key of the encrypted as feature information of the preliminary access credentials for a second use condition information describing the access conditions, first the predetermined and preliminary access credentials auxiliary information of the authentication calculation was generated by executing the
(B2) and the second proof support information set storage means for storing a preliminary access credentials authentication proof support information set comprising the use condition information,
In accordance with the second usage condition information included in the preliminary access qualification authentication auxiliary information set stored in the proof auxiliary information set storage means , the usage status indicates the second usage condition information. If it is satisfied, it is determined that the charging process is executed and the proof data generation process of the preliminary access qualification authentication is continued . If the usage state does not satisfy the second usage condition information, the charging process and the preliminary Means to decide to cancel the generation of certification data for secure access qualification ,
When it is determined to continue the proof data generation processing preliminary access credentials to perform the billing process, performs the accounting process, further more input the encryption to the encrypted proof support information set input means of proof and supplementary information set, and the unique information of the user stored in the user-specific information storage means, for proof of the preliminary access right authentication stored in the proof support information set storage unit Means for performing a predetermined second calculation on the auxiliary information set to generate preliminary credential authentication proof data, and thereby restoring the main qualification proof auxiliary information set;
Authentication data input means for inputting authentication data for main access qualification authentication;
According restored the said first usage condition information included in the proof support information set of the main access rights authentication, certification data generation process of the main access right authentication when use state satisfies the first usage condition information Means for determining to continue the proof data generation process of the main access qualification authentication when the usage state does not satisfy the first usage condition information ;
The authentication data input by the authentication data input means and the user specific information stored in the user specific information storage means when it is determined to continue the main access qualification authentication proof data generation process If, means for generating proof data for primary access right authentication by performing a second calculation of the predetermined relative and proof support information set restored the primary access right authentication,
Proof data generated the primary access right authentication have a means for verifying,
The predetermined first calculation executed to generate the proof auxiliary information and the predetermined second calculation executed to generate the proof data, the user specific information, When the access qualification authentication feature information and the proof auxiliary information correspond to each other, select such that the verification means verifies that the proof data is generated based on the access credential authentication feature information. An access qualification authentication device characterized by the above. In the access credential authentication method for authenticating the access qualification of the user by verifying the validity of the certification data generated to prove the access credential of the user,
The access qualification authentication method is to perform preliminary access qualification authentication and, if the preliminary access qualification authentication succeeds, main access qualification authentication that can be performed thereafter.
Storing the user specific information in the user specific information storage means ;
(A1) Main access credential authentication generated by executing a predetermined first calculation on the user's unique information, access qualification feature information, and first use condition information describing access conditions proof support information and
(B1) step of the first usage condition information as the main access rights authentication encryption proof support information set generated by encrypting the proof support information set consisting of inputs Encryption proof support information input means When,
(A2) the unique information of the user, a decryption key of the encrypted as feature information of the preliminary access credentials for a second use condition information describing the access conditions, first the predetermined the second proof support information generated by executing the calculation and
(B2) a step of storing in said second usage condition information and preliminary access rights authentication proof support information set storage means proof support information set consisting of,
In accordance with the second usage condition information included in the preliminary access qualification authentication auxiliary information set stored in the certification auxiliary information set storage means , the usage state satisfies the second usage condition information. In this case, it is determined by the determination means that the charging process is executed and the proof data generation process of the preliminary access qualification authentication is continued. When the usage state does not satisfy the second usage condition information, the charging process and A step of determining by the determination means that the generation of proof data for preliminary access qualification authentication is stopped ;
When it is determined that the billing process is to be executed and the proof data generation process for preliminary access qualification authentication is to be continued, the billing process is performed, and the encryption input by the encryption certification auxiliary information set input means is performed. Auxiliary information set for proof, unique information of the user stored in the user-specific information storage means, and auxiliary information set for proof of preliminary access qualification stored in the auxiliary information set for proof of storage Generating a preliminary credential authentication proof data by executing a predetermined second calculation on the proof data generating means, and restoring the main access credential authentication proof auxiliary information set;
A step of inputting authentication data for main access qualification authentication by an authentication data input means;
In accordance with the first use condition information included in the restored auxiliary information set for certification of the main access qualification , when the use state satisfies the first use condition information, the determination means performs the main access qualification authentication. Determining that proof data generation processing is to be continued, and determining that the proof data generation processing of the main access qualification authentication is to be stopped by the determination means when the usage state does not satisfy the first usage condition information ;
The authentication data input by the authentication data input means when it is determined that the main access qualification authentication proof data generation process is to be continued, and the user specific information stored in the user specific information storage means and generating the proof data of the main access right authentication the second calculation of the predetermined relative and proof support information set restored the primary access right authentication be performed by said proof data generation means,
The proof data generated the primary access right authentication possess and verifying the verification means,
The predetermined first calculation executed to generate the proof auxiliary information and the predetermined second calculation executed to generate the proof data, the user specific information, When the access qualification authentication feature information and the proof auxiliary information correspond to each other, select such that the verification means verifies that the proof data is generated based on the access credential authentication feature information. An access credential authentication method characterized by: 9. The proof auxiliary information set used in the access qualification authentication apparatus according to claim 8 and the preliminary access credential authentication auxiliary information set configured and output as composite proof auxiliary information . In the auxiliary information generation device,
Auxiliary information for proof of main access qualification authentication is executed by executing a predetermined first calculation on the user's unique information, characteristic information of main access qualification authentication, and first use condition information describing access conditions. Means for generating;
Means for encrypting the proof support information of the primary access rights authentication, the proof support information set of the main access right authentication consisting of the first usage condition information,
And unique information of the user, a decryption key of the encrypted as feature information of the preliminary access credentials for a second use condition information describing the access condition, the first calculation of the predetermined Means for executing and generating auxiliary information for proof of preliminary access entitlement authentication ;
Means for generating and outputting composite proof auxiliary information from the encrypted primary access credential certification auxiliary information set and the preliminary access credential certification auxiliary information set. An auxiliary information generating device for proof. 9. The proof auxiliary information set used in the access qualification authentication apparatus according to claim 8 and the preliminary access credential authentication auxiliary information set configured and output as composite proof auxiliary information . In the auxiliary information generation method,
A predetermined first calculation is executed by the auxiliary information generating means for proof of main access qualification for the unique information of the user, the characteristic information of the access qualification authentication, and the first use condition information describing the access conditions. Generating auxiliary information for proof of primary access qualification ,
Encrypting the main access qualification authentication auxiliary information set consisting of the main access qualification authentication auxiliary information and the first use condition information by an encryption means ;
Proof of preliminary access qualification authentication with respect to the user specific information, the decryption key for encryption as characteristic information of preliminary access qualification authentication, and the second use condition information describing access conditions Generating auxiliary information for proof of preliminary access qualification by executing the predetermined first calculation by auxiliary information generating means ;
From the encrypted primary access credential certification auxiliary information set and the preliminary access credential certification auxiliary information set, the certification auxiliary information output means generates composite certification auxiliary information. proof support information generating method characterized by a step of outputting.

Images