JP3839814B2 - Service providing terminal and program - Google Patents

Description

  The present invention relates to a service providing terminal that provides a service by communicating with a user's portable terminal using a plurality of local interfaces.

  In recent years, in a system using a terminal that provides various services to a user, such as a vending machine, a POS terminal, an ATM terminal, etc., a terminal that provides a service by performing data communication with the user's mobile terminal is used. It has been realized. In some of such systems, a mobile terminal and a service terminal are each equipped with a plurality of local interface modules, and a service is provided by performing communication using a plurality of local interfaces between the terminals.

For example, there is a wireless communication device that performs data communication with an external system using two communication interfaces of wireless communication and infrared communication using Bluetooth (see Patent Document 1).
Japanese Patent Laid-Open No. 2003-18148 (page 3, FIG. 1)

In systems that provide services by communicating with multiple local interfaces between terminals, the communication key is set independently for each local interface, so key setting, updating, invalidation, etc. In order to do so, it is necessary to perform key setting / update / invalidation processing for each interface, which is complicated.
Also, in this way, in a system that performs data communication using a plurality of local interfaces, it is desirable to implement a mechanism that can securely manage keys used in each interface.

The present invention has been made in view of the above circumstances, and in a system that performs communication using a plurality of local interfaces between terminals, a service providing terminal that can easily manage keys used in each interface, and the like The purpose is to provide.
Another object of the present invention is to provide a service providing terminal or the like that can safely manage keys used in each interface in a system that performs communication using a plurality of local interfaces between terminals.

In order to achieve the above object, a communication system according to the first aspect of the present invention provides:
A service providing terminal that performs data communication with a mobile terminal using a plurality of local interfaces,
Storage means for storing, for each service, a key generation parameter and usage interface information indicating a local interface used in the service;
Means for accepting designation of a service to be executed;
Reading means for reading out the key generation parameters and usage interface information from the storage means for the designated service;
Generating means for generating an encryption key used in communication between the local interface and the portable terminal for each local interface indicated by the read use interface information, using the read key generation parameter; ,
Communication control means for communicating with the mobile terminal using the encryption key generated for the local interface via each local interface indicated by the read interface information;
It is characterized by providing.

  According to such a configuration, when the service is executed, the encryption key for each local I / F is generated using the key generation parameter (service key) for each service. Therefore, the key is set, updated, or invalidated for each interface. It is no longer necessary to perform such processing, and management of keys used in each interface becomes easy. Also, by storing the service key that is the key for each interface in a highly secure medium such as an IC chip, the key for each interface can be safely protected as a result.

The service providing terminal
A removable IC unit including at least the storage unit, the reading unit, and the generation unit may be provided.

Means for receiving a key generation parameter and usage interface information of a service to be registered from a server device via a network; and means for storing the received key generation parameter, usage interface information and service identification information in the storage means A service registration means comprising:
Means for receiving the key generation parameters and usage interface information of the service to be updated from the server device via the network; and the key of the service stored in the storage means with the received key generation parameters and usage interface information A service updating means comprising: a parameter for generation and a means for updating the usage interface information;
Means for receiving information for specifying a service to be deleted; means for deleting a key generation parameter and usage interface information of a service specified by the received information from the storage means;
You may further provide at least one of these.

  The generating unit is configured to execute the authentication for another local interface based on a result of authentication performed between the service providing terminal and the mobile terminal through one local interface among a plurality of local interfaces used in the service. Means for determining whether to generate an encryption key may be provided.

A program according to the second aspect of the present invention is:
A step of accepting specification of a service to be executed;
Reading a key generation parameter and usage interface information corresponding to the specified service from a storage area for storing a key generation parameter and usage interface information indicating an interface used in the service for each service;
A generation step of generating an encryption key used in communication between the local interface and the mobile terminal for each local interface indicated by the read usage interface information using the read key generation parameter;
Communicating with the mobile terminal using the encryption key generated for the local interface through each local interface indicated by the read interface information;
Is executed.

  According to the present invention, it is possible to easily manage keys for each interface in a service providing terminal that provides services using a plurality of local interfaces.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings, taking as an example a communication system that provides various services to users by performing wireless communication between terminals using a plurality of interfaces.

  A configuration example of a communication system according to an embodiment of the present invention is shown in FIG. This communication system includes a service providing terminal 2 to which an IC chip 1 is attached, a management server 3, and a mobile terminal 4. The service providing terminal 2 and the management server 3 are connected via the network 10. In addition, the service providing terminal 2 and the mobile terminal 4 include various local I / Fs such as a Bluetooth interface (I / F), an infrared I / F, a contact IC card I / F, and a non-contact IC card I / F. Connected by F.

  A configuration example of the IC chip 1 and the service providing terminal 2 is shown in FIG. 2, and a configuration example of the management server 3 is shown in FIG. FIG. 4 shows a functional block diagram of the IC chip 1, the service providing terminal 2, and the management server 3.

  The IC chip 1 includes, for example, a memory 11, a CPU 12, and an input / output I / F (interface) 13. For example, the IC chip 1 includes a SAM (Security Application Module) chip.

  The memory 11 includes a ROM, a RAM, and the like. The operation program to be executed by the CPU 12 and various data necessary for processing, a chip ID for identifying the IC chip 1, PIN (Personal Identification Number) information, date data, The secret key of the IC chip 1 and the public key of the management server 3 are stored. Further, in the memory 11, for example, as shown in FIG. 5, a service key (key generation parameter for each service), an expiration date of the service key, an I / F used in the service, and a service uses a plurality of I / Fs. Service key management information including data such as usage control information indicating the usage priority order of each I / F and the conditions for generating the encryption key is stored for each service in association with the service name. Further, in the memory 11, for example, as shown in FIG. 6, for each I / F included in the service providing terminal 2, an ID (I / FID) for identifying the I / F and a key generation parameter for each I / F Further, I / F management information including data such as a holding flag indicating whether or not the generated encryption key is held by the I / F module itself is stored.

  The CPU 12 logically realizes an authentication management unit 121, a server authentication unit 122, a service key management unit 123, an I / F setting unit 124, and the like by executing an operation program stored in the memory 11.

  In response to a key setting request from the service providing terminal 2, the authentication management unit 121 reads out service key management information and I / F management information corresponding to the service specified by the request from the memory 11. Then, based on the service key in the read service key management information and the data such as the key generation parameter in the I / F information, an encryption key is generated for the local I / F 26 used in the designated service. This encryption key includes an authentication key, a data encryption key, and the like. Then, according to the possession flag of each I / F, for the I / F set to possess the key by the module of the local I / F 26 itself, the generated encryption key is supplied to the service providing terminal 2, and the corresponding local I / F / F26 is set. In this case, authentication processing and encryption processing of the mobile terminal 4 are performed on the service providing terminal 2 side. In addition, for the local I / F 26 that is set not to be held by the module of the local I / F 26 itself, the key generated for the local I / F 26 is stored in the memory 11 and this encryption key is used. Authentication processing and encryption processing of the portable terminal 4 are performed.

  A process in which the authentication management unit 121 generates an encryption key for the local I / F 26 using data such as a service key (a key generation parameter for each service) and a key generation parameter will be specifically described. Here, for example, a 128-byte secret key based on the RSA encryption method is used as the service key. First, the authentication management unit 121 extracts arbitrary 8-byte data A (for example, randomly selected using a random number) from the service key, and extracts the chip ID of the IC chip 1 and the key of the local I / F 26 that is the key generation target. An arithmetic process using a hash function is performed on the data combined with the generation parameter, and the calculated hash value is used as an encryption key. At this time, if the key length necessary for the local I / F 26 is registered in the memory 11, the hash calculation is repeated as necessary so that the key length is obtained. Specifically, the authentication management unit 121 calculates a hash value H1 according to an arithmetic expression using a hash function shown in (Equation 1), for example. Then, it is determined whether or not the hash value H1 satisfies the required key length. If the hash value H1 satisfies the required key length, data corresponding to the required key length is extracted from the hash value and used as an encryption key. If not, the hash value (H2,..., Hn) is further calculated by calculating a hash value, and the process of determining whether the calculated hash value satisfies the required key length Repeat until it is determined that the length is satisfied.

(Equation 1)
H1 = Hash (data obtained by concatenating eight chip IDs | A | data obtained by concatenating eight key generation parameters)
A is an arbitrary 8 bytes extracted from the service key

H2 = Hash (chip ID | B | data obtained by concatenating eight key generation parameters)
B is the first 64 bytes of the data concatenated with H1 until the data length is 64 bytes or more

Hn = Hash (chip ID | X | data obtained by concatenating eight key generation parameters)
X is the first 64 bytes of the data obtained by concatenating H (n-1) until the data length is 64 bytes or more. In the above equations, the symbol "|" means concatenation.

  Further, when there are a plurality of local I / Fs 26 used in the service, the authentication management unit 121 sequentially generates an encryption key for the local I / F 26 according to the setting contents of the usage control information. Specifically, for example, in the service key management information of a service that downloads content via the second local I / F 26 after being authenticated by the first local I / F 26, usage control information as shown in FIG. When set in the memory 11, the authentication management unit 121 encrypts the second local I / F 26 only when the authentication with the encryption key (authentication key) of the first local I / F 26 is successful. Generate a key. Further, for example, in a service for migrating data D1 set in the first local I / F 26 itself so that it can be used in the second local I / F 26 on the mobile terminal 4 side, use as shown in FIG. When the control information is set in the memory 11, the authentication management unit 121 performs the second local I / F only when the authentication with the encryption key (authentication key) of the first local I / F 26 is successful. An encryption key (data update key) for F26 is generated. In this case, the service providing terminal 2 receives the data D1 from the portable terminal 4 via the first local I / F 26 and migrates the data D1 via the second local I / F 26.

  The authentication management unit 121 invalidates the encryption key generated for the local I / F 26 used in the service when the service ends or after a preset time has elapsed.

  The server authentication unit 122 performs processing for mutual authentication with the management server 3. In this mutual authentication process, a random number is generated, and authentication data generated based on the generated random number (for example, data obtained by encrypting the random number with the secret key of the IC chip 1) is transmitted to the management server 3. When the management server 3 side authentication data (server authentication data) or the like is received from the management server 3, the validity of the authentication data is confirmed using the public key of the management server 3 (for example, the authentication data is decrypted and transmitted) After checking that a random number is included, etc.), a session key used in the current communication is generated and transmitted to the management server 3 by being encrypted with the secret key of the IC chip 1 or the like. The date data encrypted with the session key is received from the management server 3 and decrypted, and the date data in the memory 11 is updated with the decrypted date data. After mutual authentication with the management server 3 is successful, processing such as service addition / update / deletion and I / F addition can be performed.

  The service key management unit 123 performs various processes for registering / updating / deleting services after mutual authentication with the management server 3 is completed. Specifically, for example, data such as a service name, a service key, an expiration date of the key, an I / F used in the service, usage control information, and the like are received from the management server 3 together with the registration request, and the service key based on the received data Management information is generated and registered in the memory 11. When data such as a service name, a service key, and a key expiration date is received from the management server 3 together with the update request, service key management corresponding to the received service name among the service key management information stored in the memory 11 is received. Information is specified, and the service key management information is updated with the received data. When data such as a service name is received together with a deletion request, service key management information corresponding to the service name or the like is deleted from the memory 11.

  Further, the service key management unit 123 checks the expiration date of the service key of the service to be executed before the service is executed on the service providing terminal 2 (for example, at the start of a daily service operation). If the expiration date has passed, a service key update request is transmitted to the management server 3 together with data such as the service name, and new service key data is received and stored (updated) in the memory 11. .

  After performing mutual authentication with the management server 3, the I / F setting unit 124 performs processing for setting I / F management information related to the I / F attached to the service providing terminal 2 in the memory 11. Specifically, the I / FID, whether the I / F module itself holds the encryption key generated for the I / F, and the like are received from the service providing terminal 2 together with the I / F addition request. Then, a key generation parameter for the local I / F 26 is generated, and I / F management information is generated based on the key generation parameter and the received data and registered in the memory 11. Further, when data such as I / FID and an I / F deletion request are received from the service providing terminal 2, I / F management information corresponding to the I / FID is deleted from the memory 11.

  The input / output I / F 13 controls data communication with the service providing terminal 2 to which the IC chip 1 is attached.

  The service providing terminal 2 includes, for example, a computer including a CPU 21, a storage unit 22, an input unit 23, a display unit 24, a communication unit 25, a local I / F 26, and an input / output I / F 27. The

  The CPU 21 logically realizes a service execution unit 211, a local I / F utilization unit 212, a service management unit 213, a local I / F registration unit 214, and the like by executing a program stored in the storage unit 22.

  The service execution unit 211 performs processing for providing a service in conjunction with the local I / F utilization unit 212 according to the contents of the executed service program. The content of the service provided is arbitrary, for example, it may be a payment service such as credit payment or electronic money payment in a vending machine or a POS terminal, an account processing service such as withdrawal, deposit, or account transfer in an ATM terminal or the like But you can.

  The local I / F utilization unit 212 performs communication processing with the mobile terminal 4 in the service provision processing by the service execution unit 211 in conjunction with each local I / F 26. Specifically, after transmitting a key generation request designating a service to the IC chip 1, data communication with the portable terminal 4 is performed in conjunction with each local I / F 26 based on an instruction from the IC chip 1. At this time, when using the local I / F 26 for setting the encryption key in the module itself, the encryption key is received from the IC chip 1 and set in the local I / F 26. Further, in the case of the local I / F 26 in which the encryption key is not set in the module itself, since encryption / decryption processing is performed in the IC chip 1, encrypted data is transferred between the IC chip 1 and the local I / F 26. Deliver.

  The service management unit 213 performs processing for registering, updating, and deleting a service provided by the service providing terminal 2. Specifically, the input service name and terminal ID are transmitted to the management server 3 together with the service registration request in response to an input relating to service registration. Then, the service program is received from the management server 3 and stored in the storage unit 22 in association with the service name. Further, in response to an input relating to service update, the input service name and terminal ID are transmitted to the management server 3 together with a service update request. Then, the service program is received from the management server 3 and the service program stored in the storage unit 22 is updated. Further, in response to an input regarding the deletion of the service, the input service name and terminal ID are transmitted to the management server 3 together with the service deletion request.

  The local I / F registration unit 214 performs processing for adding / deleting a local I / F to / from the service providing terminal 2. Specifically, for example, whether or not the I / F module itself holds the encryption key generated for the I / FID and I / F according to the input related to the addition of the local I / F 26, etc. Data is transmitted to the IC chip 1 together with an I / F addition request. Also, for example, in response to an input related to deletion of the local I / F 26, data such as I / FID is transmitted to the IC chip 1 together with an I / F deletion request. Further, acquisition of data such as whether or not the I / F module itself holds the encryption key generated for the I / FID and I / F may be accepted from the input unit 23. Data set in advance in the local I / F 26 may be read.

  Further, the CPU 21 controls the communication unit 25 and the input / output I / F 27 to receive the data addressed to the management server 3 from the IC chip 1 and transmit the data to the management server 3. The data addressed to the IC chip 1 from the management server 3. Is transmitted to the IC chip 1.

  The storage unit 22 includes a ROM, a RAM, a hard disk device, and the like, and stores an operation program to be executed by the CPU 21, various data necessary for processing, a terminal ID of the service providing terminal 2, and the like. Further, the storage unit 22 stores local I / F information (for example, I / FID, etc.) related to the local I / F 26 attached to the service providing terminal 2. The storage unit 22 stores a program for providing a service using the local I / F 26 for each service.

The input unit 23 is composed of an input device including a keyboard and a pointing device, for example, and notifies the CPU 21 of input data.
The display unit 24 includes a liquid crystal display and the like, and performs various screen displays.
The communication unit 25 performs data communication with the management server 3 via the network 10.

The local I / F 26 is an I / F that performs short-range data communication with the mobile terminal 4 according to a predetermined communication method, and includes, for example, a CPU, a ROM, a RAM, a receiver, a transmitter, and the like. One or a plurality of local I / Fs 26 are attached (connected) to the service providing terminal 2, and the type of communication method of each local I / F 26 is arbitrary. For example, a Bluetooth interface (I / F), an infrared I / F, a contact IC card I / F, a non-contact IC card I / F, or the like may be used.
The input / output I / F 27 controls data communication with the IC chip 1 mounted on the service providing terminal 2.

The management server 3 is a service provider server that provides an application necessary for the user to use the service, and is configured by a computer including a control unit 31, a storage unit 32, and a communication control unit 33. .
The control unit 31 includes a CPU (Central Processing Unit), a ROM (Read Only Memory), a RAM (Random Access Memory), and the like, and performs authentication by reading and executing an operation program stored in the storage unit 32 in advance. A management unit 311, a service download unit 312, a service key management unit 313, etc. are logically realized.

  The authentication management unit 311 performs processing for mutual authentication with the IC chip 1. In this mutual authentication process, upon receiving an authentication request, authentication data, etc. from the IC chip 1, the authentication management unit 311 confirms the validity of the received authentication data, etc., and then generates a server authentication code, etc. 1 is transmitted. For example, the verification of the authentication data is performed by comparing the data obtained by verifying the received authentication data with the public key of the IC chip 1 and the random number received together with the authentication data. The server authentication code may be generated by, for example, encrypting the received random number with the secret key of the management server 3. Then, after authenticating the transmitted authentication code from the IC chip 1, the session key from the IC chip 1 is received and stored in the work area of the storage unit 32. Then, the date data acquired from the internal timer is encrypted with the session key and transmitted to the IC chip 1.

  After the mutual authentication with the IC chip 1 is completed, the service download unit 312 reads the service program requested to be registered or updated from the storage unit 32 and transmits it to the service providing terminal 2.

After the mutual authentication with the IC chip 1 is completed, the service key management unit 313 transmits an instruction for registration / update / deletion of information related to the service to the IC chip 1. For example, when a service registration request is received from the service providing terminal 2, data such as the service name, service key, I / F used in the service, and usage control information of the service to be registered is stored in the service of the storage unit 32. The data read out from the management table and the expiration date data (for example, two months after the date when the request is received) are transmitted to the IC chip 1 together with a registration instruction. An example of the service management table is shown in FIG. When a service update request is received, data such as the service name, service key, I / F used by the service, and usage control information of the service to be updated is read from the service management table of the storage unit 32, The read data and expiration date data (for example, two months after the date when the request is received) are transmitted to the IC chip 1 together with an update instruction. When a service deletion request is received, data such as the name of the service to be deleted is transmitted to the IC chip 1 together with a deletion instruction.
When the service key management unit 313 receives a service key update request designating a service, the service key management unit 313 transmits the service key, new expiration date data, and the like to the requesting IC chip 1.

  The storage unit 32 is composed of, for example, a hard disk device or the like, and stores an operation program to be executed by the control unit 31 and various data necessary for processing. The storage unit 32 also includes a service management table in which data such as a service name, a service key, an I / F used in the service, and usage control information are registered in association with each other, a terminal ID of the service providing terminal 2, and a terminal. A terminal management table in which data such as the chip ID of the mounted IC chip 1 is associated and registered, information on services set in each IC chip 1 (service key set in the IC chip 1 and local I / O IC chip management information and the like in which information (F26 information and the like) is registered are stored.

  The communication control unit 33 performs data communication with the service providing terminal 2 via the network 10. The network 10 includes, for example, the Internet, a dedicated line, a public line network, a mobile communication network, a wireless communication network, and the like.

  The mobile terminal 4 is configured by a computer including a control unit, a storage unit, a communication unit, a local I / F unit, an input unit, a display unit, and the like, and the control unit executes an operation program stored in the storage unit, Short-distance data communication is performed with the service providing terminal 2 through various wireless systems via the local I / F, and processing for receiving service provision is performed.

Next, the system operation of the communication system according to the embodiment of the present invention will be described.
First, an operation when the service providing terminal 2 communicates with the mobile terminal 4 using the local I / F 26 in order to execute a predetermined service will be described.

As shown in FIG. 9, for example, the service providing terminal 2 sends data such as a specified service name together with a key setting request in response to a service designation and a service execution request input from the input unit 23. 1 (step S1).
The IC chip 1 reads out the service key management information corresponding to the received service name from the memory 11 and stores the I / F information used in the service and the usage control information set in the read service management information. Referring to, one local I / F 26 having a high priority is identified as the local I / F 26 to be generated (step S2), and I / F management information corresponding to the identified I / F is read from the memory 11, Using the service key of the service to be executed, the key generation parameter of the local I / F 26, etc., an encryption key (authentication key) is generated (step S3). Then, referring to the possession flag of the I / F management information, it is determined whether the local I / F 26 to be used is a type that possesses an encryption key in the module (step S4).

When the local I / F 26 to be used is a type that has a key in the module (step S4: YES), the IC chip 1 receives the generated encryption key and a key setting request specifying the local I / F 26. It transmits to the service providing terminal 2. The service providing terminal 2 sets the encryption key received from the IC chip 1 in the designated local I / F 26 (step S5). Then, the service providing terminal 2 uses the local I / F 26 in which the encryption key is set to start searching for the portable terminal 4 to be communicated, and performs communication through a predetermined communication procedure (step S6). ). Specifically, for example, a wireless signal of a predetermined frequency is transmitted, a response signal from the mobile terminal 4 is received, and communication speed is negotiated to establish communication.
On the mobile terminal 4 side, a program for using the service is activated in response to a user input operation (step S7). Thereafter, the local I / F of the mobile terminal 4 receives a signal from the local I / F 26 on the service providing terminal 2 side, performs a predetermined communication procedure, and establishes communication with the service providing terminal 2 (step S8). ).

Next, the service providing terminal 2 notifies the IC chip 1 that communication with the mobile terminal 4 has been established, and in response to this, the IC chip 1 generates a random number, and the generated random number is used as the service providing terminal 2. Is transmitted to the portable terminal 4 via (step S9). The service providing terminal 2 transmits the encryption key ID set in the local I / F 26 to the portable terminal 4 prior to or together with the transmission of the random number.
When the mobile terminal 4 receives a random number from the service providing terminal 2, the mobile terminal 4 generates a random number on the mobile terminal 4 side, and uses the received random number, the generated random number, the encryption key (authentication key) of the service providing terminal 2, and the like. 4 authentication code is generated. And the portable terminal 4 transmits data, such as the produced | generated authentication code, with respect to the service provision terminal 2 (step S10). The mobile terminal 4 transmits the ID of the encryption key (authentication key) of the mobile terminal 4 for confirming the authentication code to the service providing terminal 2.

  The service providing terminal 2 decrypts the received authentication code with the encryption key (authentication key) set in the local I / F 26, and whether the decrypted data includes the random number transmitted to the mobile terminal 4 or the like. By confirming, it is determined whether the received authentication code is correct (step S11), and an authentication result based on the determination result is transmitted to the IC chip 1 (step S12). For example, when the transmitted random number is included in the decrypted data, the service providing terminal 2 recognizes that the authentication code is correct and transmits authentication OK to the IC chip 1. If the decrypted data cannot be confirmed to contain the transmitted random number, the authentication code is incorrect and the authentication NG is transmitted to the IC chip 1.

  If the received authentication result is NG (step S13: NO), the IC chip 1 notifies the service providing terminal 2 of the error and disconnects the communication to the local I / F 26 (step S14). If the result indicates OK (step S13: YES), an authentication code generation request is transmitted to the service providing terminal 2 (step S15). The service providing terminal 2 extracts the random number generated on the mobile terminal 4 side included in the data decrypted in step S11 and encrypts the random number data with the encryption key (authentication key) set in the local I / F 26. Then, an authentication code on the service providing terminal 2 side is generated and transmitted to the portable terminal 4 (step S16).

  The mobile terminal 4 decrypts the received authentication code with the encryption key (authentication key) of the service providing terminal 2 and confirms whether the decrypted data includes a random number transmitted to the service providing terminal 2. Thus, it is determined whether the received authentication code is correct (step S17). If it is determined that it is not correct, an error signal is returned to the service providing terminal 2 and communication using the local I / F is blocked (step S20). If it is determined to be correct, the ID information, personal information, transaction request, etc. stored in the portable terminal 4 are transmitted to the service providing terminal 2 (step S19). The service providing terminal 2 exchanges data with the portable terminal 4 and performs processing for providing the service (step S18).

When the use of another local I / F 26 becomes necessary during the service providing process, the service providing terminal 2 transmits a key generation request to the IC chip 1 for the local I / F 26 that needs to be used ( Step S21).
The IC chip 1 checks whether the specified local I / F 26 is available in the selected service, satisfies the key generation conditions indicated by the usage control information, or the like (step S22). . If the designated local I / F 26 is available and satisfies the key generation condition indicated by the usage control information (step S22: YES), the process returns to step 2 to obtain the encryption key for the local I / F 26. Generate. If the designated local I / F 26 is not used in the selected service or does not satisfy the key generation conditions indicated by the usage control information (step S22: NO), an error is given to the service providing terminal 2. And the local I / F 26 disconnects communication (step S14).

If it is determined in step S4 that the local I / F 26 to be used is not a type that holds the encryption key in the module, the following processing (steps S31 to S38) is performed instead of the processing of steps S5 to S16. Do.
As shown in FIG. 10, the IC chip 1 temporarily sets (stores) the encryption key generated for the local I / F 26 in the memory 11 and transmits a key setting completion notification to the service providing terminal 2 (step S31). . In response to this, the service providing terminal 2 uses the local I / F 26 to start searching for the portable terminal 4 to be communicated, and performs a predetermined communication procedure to establish communication (step S32).
On the mobile terminal 4 side, a program for using the service is activated in response to a user input operation (step S7). Thereafter, the local I / F of the mobile terminal 4 receives a signal from the local I / F 26 on the service providing terminal 2 side, performs a predetermined communication procedure, and establishes communication with the service providing terminal 2 (step S8). ).

Next, the service providing terminal 2 notifies the IC chip 1 that communication with the portable terminal 4 has been established, and in response to this, the IC chip 1 generates a random number, and the generated random number is sent to the service providing terminal 2. To the portable terminal 4 (step S35). The mobile terminal 4 transmits the ID of the encryption key (authentication key) of the mobile terminal 4 for confirming the authentication code to the service providing terminal 2.
When the mobile terminal 4 receives the random number from the service providing terminal 2, the mobile terminal 4 generates a random number on the mobile terminal 4 side, and uses the received random number, the generated random number, the encryption key (authentication key) of the service providing terminal 2, etc. And data such as an authentication code is transmitted to the service providing terminal 2 (step S10).
The IC chip 1 of the service providing terminal 2 decrypts the received authentication code with the encryption key (authentication key) set in the memory 11 for the local I / F 26, and the random number transmitted to the mobile terminal 4 into the decrypted data Is received (step S37), and if the authentication code is not correct (step S37: NO), an error is notified to the service providing terminal 2. The local I / F 26 disconnects the communication (step S14). If the received authentication code is correct (step S37: YES), the local I / F 26 is generated on the mobile terminal 4 side included in the data decrypted in step S37. The provided random number is extracted, and the random number data is encrypted with the encryption key (authentication key) set for the local I / F 26 to provide the service providing terminal 2 side. It generates an authentication code, to the mobile terminal 4 (step S38).

Next, the system operation in the process of checking the expiration date of the key set in the IC chip 1 will be described with reference to FIG.
At the time of activation, the service providing terminal 2 accepts an input of a PIN (Personal Identification Number) and transmits an input PIN verification request to the IC chip 1 (step S41).
The IC chip 1 collates the received PIN with the PIN registered in the memory 11 (step S42). At this time, if the collation result is NG, the PIN input is accepted again, and if the collation NG exceeds a certain number, a lock is applied, and error processing such as subsequent PIN collation is not performed, If the collation result is OK, the service providing terminal 2 is notified of this, and in response to this, the service providing terminal 2 requests the IC chip 1 to generate a dynamic port number and authentication data (step) S43).
The IC chip 1 generates a dynamic port number at random and supplies it to the service providing terminal 2. For example, the IC chip 1 generates a random number and manages authentication data, random numbers, and the like signed with the private key of the IC chip 1. The data is supplied to the service providing terminal 2 as transmission data for the server 3 (step S44). In response to this, the service providing terminal 2 connects to the management server 3 and transmits data such as a random number, authentication data, and public key from the IC chip 1 (step S45).

The management server 3 receives the data from the service providing terminal 2, decrypts the authentication data, and confirms whether the received random number is included, thereby confirming the validity of the authentication data (step S46). Then, in the case of authentication NG, the management server 3 transmits an error notification to the service providing terminal 2 (step S47). In the case of authentication OK, the management server 3 generates an authentication code (server authentication code) on the management server 3 side. Then, it is transmitted to the IC chip 1 (step S48).
When the validity of the server authentication code received from the management server 3 is confirmed, the IC chip 1 generates a session key and transmits it to the management server 3 (step S49).

The management server 3 receives the session key from the IC chip 1, shares it, and transmits a notification to the effect that the key has been received to the service providing terminal 2 (step S50). And the management server 3 produces | generates the socket for service provision terminals 2 (step S51), encrypts date data with a session key using this, and transmits to the service provision terminal 2 (step S52).
In addition, the service providing terminal 2 generates a dynamic port number with a random number in response to the reception notification of the session key from the management server 3, generates a server socket, and thereafter the dynamic port number of the IC chip 1. Data from the management server 3 is distributed to the IC chip 1 and the service providing terminal 2 using the dynamic port number of the service providing terminal 2 (step S53).
The IC chip 1 receives and decrypts the encrypted date data from the management server 3 via the service providing terminal 2, and updates the date data in the memory 11 (step S54). Thereby, the mutual authentication between the IC chip 1 and the management server 3 is completed.
Although an example in which the session key is transmitted from the IC chip 1 to the management server 3 is shown here, the session key is implicitly transmitted between the IC chip 1 and the management server 3 based on the data obtained when the authentication data is transmitted and received. May be shared.

Next, in response to the update completion signal from the IC chip 1, the service providing terminal 2 transmits a request for checking the expiration date of the service key of the service provided by the terminal to the IC chip 1 (step S55).
The IC chip 1 checks the expiration date of the service key of the designated service (step S56). If the expiration date has passed, the IC chip 1 sends a key update request to the management server 3 via the service providing terminal 2. Transmit (step S57).
The management server 3 confirms whether or not the key requested from the IC chip 1 can be updated (step S58), and if so, transmits a new service key to the IC chip 1 (step S58). S60). When it is determined that the key cannot be updated, a key update error is notified (step S59).
When receiving the service key from the management server 3, the IC chip 1 updates the service key in the memory 11, and notifies the service providing terminal 2 of the completion of the update (step S61). In response to this, the service providing terminal 2 disconnects the communication by the server socket, and starts the service program, for example (step S62).
If the checked expiration date has not elapsed in step S56, the process of step S62 is performed as it is.

  As described above, according to the present invention, when a service is executed, an encryption key for each local I / F 26 is generated using a key generation parameter (service key) for each service. There is no need to perform processing such as update / invalidation, and management of keys used in each interface becomes easy. In addition, by storing the service key that is the key for each interface in a highly secure medium such as the IC chip 1, the key for each interface can be safely protected as a result.

The present invention can be variously modified and applied.
For example, regarding the process of generating an encryption key for each local I / F 26 using data such as service keys (key generation parameters for each service) and key generation parameters, the encryption keys are updated as needed within the service key expiration date. In this case, instead of arbitrarily selecting the data A, for example, when the specified date and time is exceeded, the data A may be selected by shifting 8 bytes at a time and the encryption key may be regenerated using this.
In the above description, an example of generating a common key encryption key from a public key encryption service key has been described. For example, a secret key parameter d = d1 + hash (key generation parameter + service key) of a service key is used. May be generated as an encryption key for the local I / F 26 to generate a public key / encryption encryption key from a public key encryption service key.

When a request for using the local I / F 26 having a higher priority than the local I / F 26 currently used in the service providing terminal 2 is generated, the local I / F 26 set in the usage control information In accordance with the priority order, session information related to the session of the local I / F 26 currently used may be temporarily saved in the memory 11 of the IC chip 1 to start using the local I / F 26 for which the use request has occurred. . Then, the session information may be read from the memory 11 and the communication by the original local I / F 26 may be resumed at the starting point when the use of the local I / F 26 with the higher priority is terminated.
Alternatively, the priority order of the local I / F 26 set in the usage control information may be changed in response to successful authentication of one local I / F 26.

The IC chip 1 may have a contact type I / F, may have a non-contact type I / F, or may have both I / Fs.
The service providing terminal 2 may be a portable mobile terminal. The IC chip 1 in that case may be a UIM (User Identity Module).

The system of the present invention can be realized using a normal computer system, not a dedicated system. For example, a program for executing the above operation is stored in a computer-readable recording medium (FD, CD-ROM, DVD, etc.) and distributed, and the program is installed in the computer to execute the above processing. The IC chip 1, the service providing terminal 2, the management server 3, and the like may be configured. Alternatively, it may be stored in a disk device of a server device on the network 10 such as the Internet and downloaded to a computer, for example.
In addition, when the OS realizes the above functions by sharing the OS or jointly with the OS and the application, etc., only the part other than the OS may be stored and distributed in the medium, or may be downloaded to the computer. Good.

It is a figure which shows the structure of the communication system of embodiment of this invention. It is a figure which shows the structural example of an IC chip and a service provision terminal. It is a figure which shows the structural example of a management server. It is a functional block diagram of an IC chip, a service providing terminal, and a management server. It is a figure for demonstrating service key management information. It is a figure for demonstrating I / F management information. It is a figure which shows an example of usage control information. It is a figure which shows an example of a service management table. It is a figure for demonstrating the system operation | movement when communicating with a portable terminal using the local I / F of the type in which a service provision terminal holds a key. It is a figure for demonstrating the system operation | movement when a service provision terminal communicates with a portable terminal using the local I / F of the type which does not hold a key. It is a figure for demonstrating the system operation | movement in the process which checks the expiration date of the key set in IC chip.

Explanation of symbols

1 IC chip 2 Service providing terminal 3 Management server 10 Network 11 Memory 12, 21 CPU
13, 27 I / O I / F
22 storage unit 23 input unit 24 display unit 25 communication unit 26 local I / F
REFERENCE SIGNS LIST 121 Authentication management unit 122 Server authentication unit 123 Service key management unit 124 I / F setting unit 211 Service execution unit 212 Local I / F utilization unit 213 Service management unit 214 Local I / F registration unit 31 Control unit 32 Storage unit 33 Communication control 311 Service download unit 312 Authentication management unit 313 Service key management unit

Claims (5)

A service providing terminal that performs data communication with a mobile terminal using a plurality of local interfaces,
Storage means for storing, for each service, a key generation parameter and usage interface information indicating a local interface used in the service;
Means for accepting designation of a service to be executed;
Reading means for reading out the key generation parameters and usage interface information from the storage means for the designated service;
Generating means for generating an encryption key used in communication between the local interface and the portable terminal for each local interface indicated by the read use interface information, using the read key generation parameter; ,
Communication control means for communicating with the portable terminal using the encryption key generated for the local interface via each local interface indicated by the read interface information;
A service providing terminal comprising: The service providing terminal
A detachable IC unit including at least the storage unit, the reading unit, and the generation unit;
The service providing terminal according to claim 1. Means for receiving a key generation parameter and usage interface information of a service to be registered from a server device via a network; and means for storing the received key generation parameter, usage interface information and service identification information in the storage means A service registration means comprising:
Means for receiving the key generation parameters and usage interface information of the service to be updated from the server device via the network; and the key of the service stored in the storage means with the received key generation parameters and usage interface information A service updating means comprising: a parameter for generation and a means for updating the usage interface information;
Means for receiving information for specifying a service to be deleted; means for deleting a key generation parameter and usage interface information of a service specified by the received information from the storage means;
Further comprising at least one of
The service providing terminal according to claim 1, wherein the service providing terminal is provided. The generating unit is configured to execute the authentication for another local interface based on a result of authentication performed between the service providing terminal and the mobile terminal through one local interface among a plurality of local interfaces used in the service. Means for determining whether to generate an encryption key;
The service providing terminal according to claim 1, wherein the service providing terminal is provided. On the computer,
A step of accepting specification of a service to be executed;
Reading a key generation parameter and usage interface information corresponding to the specified service from a storage area for storing a key generation parameter and usage interface information indicating an interface used in the service for each service;
A generation step of generating an encryption key used in communication between the local interface and the mobile terminal for each local interface indicated by the read usage interface information using the read key generation parameter;
Communicating with the mobile terminal using the encryption key generated for the local interface through each local interface indicated by the read interface information;
A program that executes

Images