JP4084507B2 - IC card security processing method and apparatus, and recording medium recording IC card security processing program - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to an IC card security processing method and apparatus for performing authentication and access control for accessing a file management area which is a file in the IC card or a file management unit from an IC card terminal, and a record in which an IC card security processing program is recorded. It relates to the medium.
[0002]
[Prior art]
The key sharing / authentication access control technology for IC cards is defined in ISO7816, JICSAP, Multos, and JavaCard. For ISO7816, Verify and External Authenticate specify simple authentication using a PIN code and strict authentication using a public key as external authentication methods, and a rough key management method and access control information management method for that purpose. Is stipulated. Here, the file management structure in ISO will be described first. In ISO, a file corresponding to a root directory in UNIX is called MF, and a file corresponding to an intermediate directory is called DF. A normal element file managed in the DF is called EF. DF is composed of DF and EF.
[0003]
Here, as the “key information” sharing method in ISO, the idea of sharing a key set in MF (hereinafter referred to as a card management area) and a local key identifier are specified as a method of specifying a global key identifier. The idea of sharing a key set in a DF (hereinafter referred to as a file management area) is disclosed as a method to do this.
[0004]
On the other hand, in JICSSAP, only the local key identifier designation method is defined, and a plurality of key files EF are generated for each file management area called DF, and the logical product or logical sum of these keys is used. The access control that controls the permission of command execution for the EF in the DF and the “access control information” management mechanism that defines the information are defined.
[0005]
At the same time, the status of the authentication result for this file is managed as an “authentication status” (referred to as security status in ISO and JICSAP), and the authentication to a key exceeds the maximum number of trials specified in advance for the key. In such a case, the key file that manages the key is automatically blocked, the “key blocked state” is managed (disabled), the automatic blocking mechanism, the DF is forcibly blocked, and the DF including the blocked DF Forcibly closing the EF and managing the “DF blocking state” is disclosed.
[0006]
In JavaCard, a means for executing access control to a file is defined as a means for sharing the file, and the key management means is implementation-dependent.
[0007]
On the other hand, for Multis, a mechanism for ensuring the independence between data and programs managed by each object by means of independently securing the physical areas managed by the objects is provided, and the firewall property between the program management areas is improved. For this reason, a data sharing method outside the shared area on the volatile memory is not defined.
[0008]
Therefore, the prior art will be described below using specific examples. FIG. 8 is a block diagram showing a functional configuration of an IC card system that implements a security processing method related to conventional IC card authentication / access control.
[0009]
In FIG. 8, the IC card 10 is connected to the IC card terminal 20, and information related to command execution in the IC card 10 is input from the IC card terminal 20 or an application in the IC card 10. In the IC card 10, the communication control unit 1-1 executes dispatch of command processing designated by the IC card terminal 20. When executing a command, first, a file to be subjected to command processing is selected using a file selection command. This file is called the current file 1-2, and the file selection control unit 1-3 executes this file selection command.
[0010]
Next, a key information setting method and access control information setting method for a command execution target file and an authentication / access control method during command execution processing for the file will be described. Therefore, a description will be given first of a prerequisite file configuration example and security information (key information, access control information, authentication status, blocking status) relating to authentication / access control managed for each file.
[0011]
9 and 10 show a file configuration based on ISO / JICSAP and a security information management method for the file.
[0012]
FIG. 9 relates to a method for managing the key information of CASE 1 in FIG. 11 in one EF in units of DF. In this case, each DF is managed separately from key information, access control information, authentication status (for keys managed in DF units), and DF blockage status. The EF has the same key information, authentication state, and DF blockage state as the DF.
[0013]
FIG. 10 is based on the JICSAP key management method and relates to a method of managing the CASE2 key information of FIG. 11 one by one in a plurality of EFs in DF units. Also in this case, each DF is individually managed for key information, access control information, authentication status (for keys managed in units of DF), DF blocked status, and key blocked status.
[0014]
As described above, in ISO / JICSAP, key information, authentication status, and blocking status are managed in units of MF / DF, and access control information can be set in units of MF / DF / EF.
[0015]
Thus, an example of a method for managing key information, access control information, authentication status, and blocking status will be described in detail. FIG. 11 is a diagram showing the structure of a key information management file in the conventional security processing method. Key information is managed in the EF for the key as a pair of key number and key information in DF units (CASE 1) or one key EF is prepared for one key information (CASE 2: JICSAP method) Managed by. In the latter case, a key number may be managed in addition to the key file ID and key information for management.
[0016]
FIG. 12 is a diagram showing a file structure of an access control information management file of a conventional security processing method for a file to be executed by a command.
[0017]
For a file, a plurality of access levels can be set according to a file type and a command pair for the file. This example shows four types of access levels A to D, and for each access level, a plurality of key numbers that require authentication can be set by logical product / sum. That is, for each access level, the first bit indicates whether the key of key number 1-7 corresponding to the second to eighth bits is designated by logical product or logical sum (1: logical product) , 0: logical sum) The second to eighth bits specify whether or not key number 1-7 is requested for authentication, and the ninth bit is the key number corresponding to the first 10th to 16th bits Indicates whether the key of 8-14 is designated by logical product or logical sum (1: logical product, 0: logical sum), and upper 8 bits and lower 8 bits are logical products. When one key EF is prepared for one key information as in the JICSAP specification, for example, whether correspondence with access control information is performed in the order of the ID value of the EF (the key number in FIG. 11). The order can be made to correspond to the order of the IDs of the EFs), or by assigning a key number to the key file when the key file is generated as shown in FIG. is there.
[0018]
FIG. 14 shows an example of setting the access level. For example, the access level A indicates an access level when a Lock-type command is executed for the MF / DF. The same applies to the access levels BD.
[0019]
FIG. 13 is a diagram showing a file structure of an authentication status management file in the conventional security processing method. When authentication is performed for a certain key (for example, password verification) and the authentication is successful, 1 is set in the bit corresponding to each key number to indicate that the authentication is successful. This is managed in DF units.
[0020]
The security information management method and file structure have been described above. Next, (1) key information setting for a command execution target file, (2) access control information setting, and (3) command execution for the current file The authentication control during processing and (4) access control will be described in order.
[0021]
First, setting of key information will be described. Returning to FIG. 8, the generation / setting of key information is performed in the key information management processing unit 1-5 of the key information management control unit 1-4, and the key information is transmitted from the communication control unit 1-1 as shown in FIG. A key information management control request is passed to the key information management processing unit 1-5 of the management control unit 1-4, and a key file is generated and a plurality of key files are generated for the current DF as in CASE 1 in FIG. Or the setting of key information for each of the key information management files 1-6 as shown in CASE2 of FIG.
[0022]
Secondly, the setting of access control information will be described. Referring back to FIG. 8, the access control information is set in the access control information management processing unit 1-8 of the access control information management control unit 1-7, and accessed from the communication control unit 1-1 as shown in FIG. An access control information management control request is passed to the access control information management processing unit 1-8 of the control information management control unit 1-7, and the access control information management file 1-9 as shown in FIG. 11 is set for the current file. Is implemented.
[0023]
Third, authentication control will be described. FIG. 17 is a diagram showing an authentication control flow after key information and access control information are set for a certain file. When a key number (in the case of CASE 1) or key file ID (in the case of CASE 2) and key information are input from the communication control unit 1-1, the authentication processing unit 1-10 in the authentication control unit 1-23 first starts. An authentication process is performed to determine whether the key information corresponding to the specified key number or key file ID and the input key information correspond to each other (verification in the case of Verify, verification in the case of External Authenticate).
[0024]
If the authentication is successful, the authentication state management processing unit 1-12 of the authentication state management control unit 1-11 is requested to authenticate the authentication state management file 1-13 as shown in FIG. Turns on the authentication status of the successful key number (sets a bit). If the number of authentication attempts exceeds the maximum number of attempts set in advance in the current file (CASE 1) or key file (CASE 2) (when the number of attempts is decremented and becomes 0), the block processing unit 1 -14, the corresponding blockage of the current DF block (CASE1) or the key file that has been authenticated (CASE2) is blocked via the blockage information management processing unit 1-16 of the blockage state management control unit 1-15. This is implemented by setting a bit indicating a blocked state in the state management file 1-17 (not shown).
[0025]
Further, when the DF is blocked through the blocking processing unit 1-14, the blocking information management processing unit 1-16 of the blocking state management control unit 1-15 is the same for both CASE1 and CASE2. Thus, the blocking state setting process is executed, and the blocking state of the current DF is updated.
[0026]
Fourth, access control during command execution will be described. FIG. 18 shows an access control flow during command execution after authentication. When the command processing request is passed from the communication control unit 1-1 to the command processing unit 1-18 of the command control unit 1-24, the block control state verification processing unit 1-20 of the blockage state verification control unit 1-19 is notified. Request a blocking status verification process request. The blocking state verification processing unit 1-20 refers to the blocking state management file 1-17 for the current file, performs blocking state verification processing to determine whether the file is blocked, and returns the result to the command processing unit 1-18. . If it is blocked, the command processing unit 1-18 returns an error to the communication control unit 1-1. If not closed, the command processing unit 1-18 requests the authentication status verification processing unit 1-22 of the authentication status verification control unit 1-21 to perform verification of the authentication status. The authentication status verification processing unit 1-22 first determines an access level from the type of the current file and the type of the requested command by referring to the access level management file 1-25. For example, in the access level management file of FIG. 14, the access level is B when a write command is executed for EF. Second, access control information is acquired from the access control information management file 1-9 set in the current file, and access control information set as the access level obtained by the determination is acquired. For example, in FIG. 12, at access level B, key number 3 is the authentication target. Therefore, finally, the authentication status management file 1-13 is referred to verify the authentication status whether or not the access control information is satisfied, and the result is notified to the command processing unit 1-18. For example, in FIG. 13, since the bit for the key number 3 is already set, access / execution is permitted. In the command processing unit 1-18, when the result is satisfied, the command is continuously executed. When the result is not satisfied, an error is returned to the communication control unit 1-1.
[0027]
[Problems to be solved by the invention]
As described above, in the conventional IC card, the technique of sharing the same key, access control information, authentication status information, and blockage information across a plurality of programs in a plurality of file management areas, that is, DF or JavaCard / Multos, is Not disclosed. Therefore, even when a plurality of areas are used with the same authority (hereinafter referred to as an authority management area), independent security information must be set in each file management area. However, in this case, in addition to the problem of setting / updating a plurality of keys and setting / updating access control information for a plurality of file management areas constituting the authority management area, Regardless, authentication must be performed independently in each file management area, which requires processing man-hours such as when processing must be performed at high speed, such as in a road traffic system. . More specifically, there are problems as listed below.
[0028]
(1) In the above ISO / JICSSAP / EMV, keys cannot be shared except between MF-DF file management areas, that is, between DF-DF. In addition, in Multis and JavaCard, there is no provision for a method for sharing a key between programs. Therefore, when the file management area (or program management area) is currently the same user, or for a request to use the same key even for another user, the same key is set and operated again. There is a problem that work redundancy cannot be avoided.
[0029]
(2) Even when the key is shared in the above, since the idea of sharing the access control information is not disclosed in the current IC card, the same key is used for the request to set the same access control information. There is a problem that the redundancy of work cannot be avoided because it must be set and operated again.
[0030]
(3) Since the present technology does not disclose the idea of sharing the authentication status, which is the authentication result / status using the key and the access control information, among a plurality of file / program management areas, the same user Even if the same key information is set in each file management area in one authority management area, and even if one management area has already been authenticated, authentication for the other management area is performed. There is a problem that authentication redundancy that must be executed again cannot be avoided.
[0031]
(4) If the block information is not shared in the above, the other file management area is not blocked even when the key sharing designation destination is blocked between the file management areas sharing the key. This is problematic in that even if authentication fails once for the area of the same authority, security can be weakened because authentication can be performed again for another area.
[0032]
The present invention has been made in view of the above, and an object of the present invention is to make it possible to share key information, access control information, an authentication state, and a blocking state among a plurality of files or file management areas, thereby improving efficiency. An IC card security processing method and apparatus to be obtained and a recording medium on which an IC card security processing program is recorded are provided.
[0033]
In order to achieve the above object, the present invention according to claim 1 provides: IC cards with multiple authority management areas are in the same authority area Based on multiple keys such as password, common key or secret key set between files or file management areas, authentication by password authentication, common key authentication, public key authentication, or command type sent by IC card terminal IC card security processing method for performing accelerator control for designating which key must be used for authentication among the plurality of keys in order to determine whether or not the command can be executed Because Within the same authority area Sharing multiple key information among multiple files or multiple management areas so that the same user can set the same key between multiple files or file management areas Access control information for specifying what key is required to be authenticated among the plurality of key information between a plurality of files or file management areas in the same authority area. Result of whether or not authentication is successful by performing authentication processing based on access control information for specifying what key is required for authentication among the plurality of key information to be shared Share the authentication status among files or file management areas in the same authority area that shares the access control information with the key used for the authentication, and register the maximum number of attempts for authentication and access control. When the number of trials exceeds the maximum number of trials, access to a file or file management area in the same authority area is denied, or the same is forced by the administrator. Block information management control that manages the open / closed state of a file or file management area for refusing access to a file or file management area within a limited area, and the block information is managed by multiple IC card security processing method characterized by sharing between files or file management areas .
[0034]
In the present invention described in claim 1, in the present invention described in claim 1, IC cards with multiple authority management areas are in the same authority area Since key information is shared among a plurality of files or file management areas, the same key can be set in each file management area and updated at the same time, so that efficiency can be improved.
[0035]
Further, in the present invention described in claim 2, in the invention described in claim 1, the plurality of key information Specifying what key authentication is required in Manage access control information Do The gist is to share access control information among the plurality of files or file management areas.
[0036]
Claim 1 In the present invention described above, the access control information is Within the same authority area Since sharing is performed among a plurality of files or file management areas, it is possible to access individual file management areas that share key information with the same access authority, thereby improving efficiency.
[0037]
Furthermore, the present invention described in claim 3 is the invention described in claim 1 or 2, wherein the plurality of pieces of key information are provided. The authentication process is performed based on the access control information that specifies what kind of key is required for authentication, and the result regarding whether or not the authentication is successful is maintained and managed. The authentication status is set between the file or file management area that shares the used key and access control information. The gist is to share.
[0038]
Claim 1 In the present invention described, the authentication status is Within the same authority area Since it is shared among a plurality of files or file management areas, it is not necessary to re-authenticate key information once authenticated in the file management area, which is efficient.
[0039]
The present invention according to claim 4 is the invention according to claims 1 to 3, wherein the maximum number of attempts for authentication and access control is registered, and the number of attempts exceeds the maximum number of attempts. In this case, the management of the open / closed state of the file management area for rejecting access to the file management area or forcibly denying access to the file management area by the administrator. Perform blocking information management control, same Blockage information Duplicate The gist is to share between multiple files or file management areas.
[0040]
Claim 1 In the present invention described, the occlusion information is Within the same authority area Since a plurality of files or file management areas are shared, if any area is blocked, all shared areas can be blocked.
[0041]
Claims 2 The present invention is IC cards with multiple authority management areas are in the same authority area Based on multiple keys set between files or file management areas, such as password, common key or secret key, authentication by password authentication, common key authentication, public key authentication, or command type sent by IC card terminal The IC card security processing device that performs accelerator control for designating which key is used for authentication among the plurality of keys in order to determine whether the command can be executed or not Because Within the same authority area A key information sharing means for sharing the plurality of key information between a plurality of files or a plurality of management areas so that the same user can set the same key between the plurality of files or the file management areas;
Above Within the same authority area Access control information sharing processing means for specifying what key is required for authentication among a plurality of key information among a plurality of files or file management areas, and the plurality of key information The authentication process is performed based on the access control information that specifies what kind of key is required for authentication, and the result regarding whether or not the authentication is successful is held and managed. Sharing used keys and access control information Within the same authority area When the authentication status sharing processing means for sharing the authentication status between files or file management areas and the maximum number of trials for authentication and access control are registered, and the number of trials exceeds the maximum number of trials, A file in the same authority area or Deny access to the file management area or force the administrator to Within the same authority area To deny access to a file or file management area File or Performs block information management control, which manages the open / closed status of the file management area. Within the same authority area An IC card security processing apparatus, characterized in that it comprises block information sharing means for sharing between a plurality of files or file management areas.
It is summarized as having.
[0042]
Claim 2 In the present invention described, Within the same authority area Since key information, access control information, authentication status, and blockage information can be shared among multiple files or file management areas, the same key can be set in each file management area, updating can be performed simultaneously, and key information can be shared Each file management area can be accessed with the same access authority, and there is no need to authenticate the key information once authenticated in the file management area. If any area is blocked, all shared areas are Can be occluded.
[0043]
Further claims 3 The described invention IC cards with multiple authority management areas are in the same authority area Based on multiple keys such as password, common key or secret key set between files or file management areas, authentication by password authentication, common key authentication, public key authentication, or command type sent by IC card terminal In accordance with the IC card security processing program for performing accelerator control for designating which key is used for authentication among the plurality of keys in order to determine whether the command can be executed or not A recording medium on which Within the same authority area Sharing the plurality of key information among a plurality of files or a plurality of management areas so that the same user can set the same key between the plurality of files or the file management areas; Within the same authority area Sharing access control information for specifying what key is required for authentication among a plurality of key information among a plurality of files or file management areas, and The authentication process is performed based on the access control information that specifies what kind of key is required for authentication, and the result regarding whether or not the authentication is successful is retained and used for the authentication. Shared key and access control information Within the same authority area If the authentication status is shared between files or file management areas, the maximum number of attempts for authentication and access control is registered, and the number of attempts exceeds the maximum number of attempts, Files within the same authority area Refuses access to the file management area or is forced by the administrator A file in the same authority area or Perform blockage information management control to manage the open / close state of a file or file management area for refusing access to the file management area. Within the same authority area The gist is to share between multiple files or file management areas.
[0044]
Claim 3 In the present invention described, Within the same authority area Since an IC card security processing program that shares key information, access control information, authentication status, and blockage information among a plurality of files or file management areas is recorded on a recording medium, the use of the recording medium can improve its distribution. Can be increased.
[0045]
DETAILED DESCRIPTION OF THE INVENTION
Hereinafter, embodiments of the present invention will be described with reference to the drawings. FIG. 1 is a block diagram showing a functional configuration of an IC card system that implements an IC card security processing method according to the first embodiment of the present invention. In the embodiment shown in the figure, a key information management control unit 1-4, an authentication state management control unit 1-11, and a blocking state management control are provided for the functional configuration for implementing the conventional IC card security processing method shown in FIG. The unit 1-15 is provided with a key information sharing processing unit 12-1, an authentication state sharing processing unit 12-2, and a blocking state sharing processing unit 12-3 for sharing key information, an authentication state, and a blocking state. The access control information management control unit 1-7 includes an access control information sharing processing unit 12-4, and the other configuration is the same as that shown in FIG.
[0046]
In the first embodiment configured as described above, first, the key information management method will be described assuming that it is the case of CASE 1 shown in FIG.
[0047]
FIG. 2 is a diagram showing a security information management method (CASE 1) in the present embodiment. In the present embodiment, between the same users (persons having the same authority), the above-mentioned processing units within the same authority management area, each DF and EF key information management file address, authentication status management file address It is possible to share the blocking status management file address and the access control information management file address, thereby enabling sharing of key information, authentication status, blocking status, and access control information within the authority management area.
[0048]
FIG. 3 is a diagram showing a key information management control flow in the security processing method of the present embodiment. In the present embodiment, at the time of key information management control, that is, when generating a key information management file for a DF after generating the DF, setting key information after generating the key file, or performing batch update of key information First, it is determined whether there is a sharing specification of key information. If the sharing is not designated, the key information management file is generated and the key information is set as before. When sharing is specified, the address (file ID or physical address) of the key information management file EF of the upper DF is acquired and set as the address of the key information management file of the DF. At this time, the authentication state sharing processing unit 12-2 and the blocking state sharing processing unit 12-3 are requested to perform sharing processing via the authentication processing unit 1-10 and the blocking processing unit 1-14, respectively. The authentication status management file and DF blockage state management file address are acquired, and the authentication status management file and DF blockage state management file address for the current DF are set.
[0049]
Care must be taken here even when, for example, a virtual key file is generated and the key file is linked so that an upper key file is referenced (in this case, the file The reference destination of the key file in the header information is this virtual key file), and the access control information for the virtual key file must be the same as the key file to be referenced. This is because the same access authority as that of the shared key information management file is set in the new key information management file, and the strength of security can be maintained.
[0050]
In this case, the access control information management processing unit is requested to share access control information for the key file. This obtains the address of the access control information file referred to by the key information management file of the upper DF, and refers to the key information management file to be referred as header information of the key information management file newly generated or set with the key The address of the access control information management file for is set.
[0051]
FIG. 4 is a diagram showing a management control flow of access control information in the security processing method of the present embodiment. This is because when access control information management control is performed, that is, when access control information is collectively set when an arbitrary file is generated, or when access control information is collectively set after file generation, or batch update is performed after setting access control information This is the case specification method. When the key information is shared with the upper DF, it is possible to specify sharing of the access control information. If the request from the communication control unit is specified to share access control with an upper file, the access control information sharing processing unit 12-4 of the access control information management control unit 1-7 is requested to share access control information, The access control information of the file is set to refer to the acquired access control information of the upper DF. At this time, if the same access control information is specified in the request, the same access control information as that of the upper DF is set in the file.
[0052]
Next, a second embodiment of the present invention will be described. In this embodiment, a key information management method will be described in the case of CASE 2 in FIG.
[0053]
FIG. 5 is a diagram showing the security information management method of the present embodiment. Similarly to the first embodiment, this embodiment can also manage key information, access control information, authentication status, and blocking status in the same authority management area composed of a plurality of file management areas. Secure key sharing is possible.
[0054]
In FIG. 5 showing the security information management method according to the present embodiment, each file includes, as header information, an access control information management file (AAA), a key number and key information management file address (B011, B141), and an authentication status management. A file address (B012, B142), a pair of key lock state management file addresses (B013, B143), and an address (DDDD) of a DF block state management file are managed. That is, the authentication state management file structure is different from the conventional method and the method of the first embodiment. In the present embodiment, an authentication status management file is owned for each key information management file (that is, for each key).
[0055]
Here, first, all the files (DF, EF) can share a part or all of the key file set in the upper DF. At this time, when all key file sharing is performed, DF rule information is also automatically shared (since EF automatically performs key sharing with DF at the time of generation, DF block information can also be shared). Implemented). Also, when all the key information is shared, access control information can be shared.
[0056]
FIG. 6 is a diagram showing an information management control flow in the security processing method of the present embodiment. In the present embodiment, at the time of key information management control, that is, when generating a key file for a DF after generating the DF, setting key information after generating the key file, or updating the key information of the key file When the sharing is designated with the key information management file of the upper DF for all or a part of the key files, the following processing is executed.
[0057]
1) Address of specified key information management file, authentication status management file address for the key information, blocking status management file address acquisition processing for the key information, and DF blockage information management file address acquisition processing for all key information sharing
2) Address setting processing for current file header information
Note that the access control information sharing method is substantially the same as in the first embodiment. In the second embodiment, unlike the first embodiment, key sharing can be performed in units of individual key files. Therefore, the conditions under which access control information can be shared are higher in the first embodiment. It is only necessary to share the key with the DF, but in the second embodiment, only when all the key files are shared. However, the result is that both share all keys.
[0058]
In addition, by recording the processing of the above-described embodiment as a program on a recording medium, it is possible to improve the circulation by using the recording medium.
[0059]
【The invention's effect】
As described above, according to the present invention, the same key can be set and shared for the same user, that is, a plurality of file management areas in the same authority management area. It is possible to answer the request that the same key is set in the file management area and the update is performed at the same time.
[0060]
Further, according to the present invention, since the same access control information can be easily set and shared in the file management area where the key is newly shared, the same access authority is assigned to each file management area where the key is shared. It is possible to answer the request that you want to access and change the access authority at once.
[0061]
Furthermore, according to the present invention, it is possible to share the same authentication state within a file management area where a key has been newly shared, so a key once authenticated within a file management area where another key is shared There is an effect that it is not necessary to perform authentication again on the information. Furthermore, when a new file management area that shares access control information in addition to the key is created, once authentication is executed within the shared file management area, the same type of file is subsequently accessed with the same command. In some cases, authentication is not necessary, and processing redundancy can be eliminated as much as possible.
[0062]
In addition, according to the present invention, in the file management area that newly shares the key / authentication state or the key / access control information / authentication state, it is possible to share the blocked state. If such an area is blocked, all shared areas can be blocked (for example, if a certain DF is forcibly blocked, all DFs sharing a key with the DF can be blocked) . Alternatively, if the key is blocked, access to all files using this key can be made infeasible, so the key, access control information, and authentication status are shared between file management areas. Even so, it is possible to guarantee the same security as before sharing.
[Brief description of the drawings]
FIG. 1 is a block diagram showing a functional configuration of an IC card system that implements an IC card security processing method according to a first embodiment of the present invention.
FIG. 2 is a diagram showing a security information management method (CASE 1) in the first embodiment.
FIG. 3 is a diagram showing a key information management control flow in the security processing method according to the first embodiment;
FIG. 4 is a diagram showing a management control flow of access control information in the security processing method according to the first embodiment.
FIG. 5 is a diagram showing a security information management method (CASE 2) according to the second embodiment of the present invention.
FIG. 6 is a diagram showing a key information management control flow in the security processing method according to the second embodiment;
FIG. 7 is a diagram showing a management control flow of access control information in the security processing method according to the second embodiment.
FIG. 8 is a functional configuration diagram of an IC card system that implements a conventional security processing method.
FIG. 9 is a diagram showing a security information management method (CASE 1) of a conventional security information management method.
FIG. 10 is a diagram showing a security information management method (CASE 1) of a conventional security information management method.
FIG. 11 is a diagram showing the structure of a key information management file in a conventional security processing method.
FIG. 12 is a diagram showing the structure of an access control information management file in a conventional security processing method.
FIG. 13 is a diagram showing the structure of an authentication status management file in a conventional security processing method.
FIG. 14 is a diagram showing the structure of an access level management file in a conventional security processing method.
FIG. 15 is a diagram showing a key information management control flow in a conventional security processing method.
FIG. 16 is a diagram showing an access control information management control flow in a conventional security processing method.
FIG. 17 is a diagram showing an authentication control flow in a conventional security processing method.
FIG. 18 is a diagram showing a command access control flow in a conventional security processing method.
[Explanation of symbols]
1-3 File selection control unit
1-4 Key information management control unit
1-5 Key information management processing unit
1-6 Key information management file
1-7 Access control information management control unit
1-8 Access control information management processing unit
1-9 Access control information management file
1-10 Authentication processing section
1-11 Authentication status management control unit
1-13 Authentication status management file
1-15 Blocking state management control unit
1-17 Blocked state management file
1-18 Command processing section
1-19 Blocking state verification control unit
1-21 Authentication status verification control unit
1-23 Authentication control unit
1-24 Command Access Control Unit
12-1 Key information sharing processor
12-2 Authentication status sharing processor
12-3 Blocking state sharing processing unit
12-4 Access control information sharing processor

Claims (3)

In an IC card with multiple authority management areas,
Based on multiple keys such as password, common key or secret key set between files in the same authority area or between file management areas, authentication by password authentication, common key authentication, public key authentication, IC card terminal In accordance with the command type sent by, the accelerator control for specifying what key is required to be authenticated among the plurality of keys in order to determine whether the command can be executed or not. An IC card security processing method to be performed,
Sharing the plurality of key information among a plurality of files or a plurality of management areas in the same authority area so that the same user can set the same key between the plurality of files or the file management areas ,
The access control information for specifying what key is required for authentication among the plurality of key information is shared between a plurality of files or file management areas in the same authority area. ,
Performs authentication processing based on access control information for specifying what key is required for authentication among the plurality of key information, and holds and manages the result regarding whether or not the authentication is successful And sharing the authentication status between files or file management areas in the same authority area that shares the access control information with the key used for the authentication,
The maximum number of attempts for authentication and access control is registered, and when the number of attempts exceeds the maximum number of attempts, access to a file or file management area within the same authority area is denied, or the administrator forcibly Perform block information management control that manages the open / closed state of a file or file management area for refusing access to a file or file management area in the same authority area. Sharing between other files or file management areas
An IC card security processing method . In an IC card with multiple authority management areas,
Based on multiple keys such as password, common key or secret key set between files in the same authority area or between file management areas, authentication by password authentication, common key authentication, public key authentication, IC card terminal In accordance with the command type sent by, the accelerator control for specifying what key is required to be authenticated among the plurality of keys in order to determine whether the command can be executed or not. An IC card security processing device to perform,
Key information sharing for sharing the plurality of key information among a plurality of files or a plurality of management areas in the same authority area so that the same user can set the same key between the plurality of files or the file management areas Means,
Access control information sharing processing means for designating what key is required for authentication among the plurality of key information among a plurality of files or file management areas in the same authority area When,
Performs authentication processing based on access control information for specifying what key is required for authentication among the plurality of key information, and holds and manages the result regarding whether or not the authentication is successful Authentication status sharing processing means for sharing the authentication status between files or file management areas in the same authority area that shares the access control information with the key used for the authentication,
The maximum number of attempts for authentication and access control is registered, and when the number of attempts exceeds the maximum number of attempts, access to a file or file management area within the same authority area is denied, or the administrator forcibly perform occlusion information management control where to manage the opening and closing state of the file or file management area to deny access to the file or file management area in the same rights within the region, a plurality in the same occlusion information in the same authority area IC card security processing device, characterized in that: a block information sharing means for sharing between files or file management areas. In an IC card with multiple authority management areas,
Based on multiple keys such as password, common key or secret key set between files in the same authority area or between file management areas, authentication by password authentication, common key authentication, public key authentication, IC card terminal In accordance with the command type sent by, the accelerator control for specifying what key is required to be authenticated among the plurality of keys in order to determine whether the command can be executed or not. A recording medium recording an IC card security processing program to be performed,
Sharing the plurality of key information among a plurality of files or a plurality of management areas in the same authority area so that the same user can set the same key between the plurality of files or the file management areas,
The access control information for specifying what key is required for authentication among the plurality of key information is shared between a plurality of files or file management areas in the same authority area. ,
Performs authentication processing based on access control information for specifying what key is required for authentication among the plurality of key information, and holds and manages the result regarding whether or not the authentication is successful And sharing the authentication status between files or file management areas in the same authority area that shares the access control information with the key used for the authentication,
Register the maximum number of attempts for authentication and access control, when the number of trials has exceeded the maximum number of attempts, the file or to deny access to the file management area located in the same rights within the region, or forcibly by the administrator perform occlusion information management control where to manage the opening and closing state of the file or file management area to deny access to the file or file management area located in the same rights within the region, certain the occlusion information in the same authority area A recording medium on which an IC card security processing program is recorded, which is shared among a plurality of files or file management areas.

Images